Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e203231383539.roa
File: 3137322e39392e32322e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: EXMHYb2+Iq8FXct1YlerVD2jS6g7eJZQ3zG/YJnvu1E=
Subject key identifier: D6:08:86:9C:36:97:73:C2:41:EA:BC:C6:63:7B:D0:DF:3D:63:79:9F
Certificate issuer: /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial: 2B7331455651A5AC8570E2FD58501D6BDB4E2AD9
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e203231383539.roa
Signing time: Mon 06 Jan 2025 09:20:50 +0000
ROA not before: Mon 06 Jan 2025 09:15:50 +0000
ROA not after: Mon 05 Jan 2026 09:20:50 +0000
asID: 21859
IP address blocks: 172.99.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:73:31:45:56:51:a5:ac:85:70:e2:fd:58:50:1d:6b:db:4e:2a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Validity
Not Before: Jan 6 09:15:50 2025 GMT
Not After : Jan 5 09:20:50 2026 GMT
Subject: CN=D608869C369773C241EABCC6637BD0DF3D63799F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:cf:bf:45:4f:09:8e:8e:98:a5:dc:d9:e8:
11:e7:46:2c:7e:c9:42:75:c7:d4:ff:eb:26:9e:51:
91:85:ec:77:90:5c:94:6a:a2:ec:f9:95:76:32:e4:
c7:e7:f7:06:cc:14:40:08:99:b7:97:09:eb:2a:cc:
c3:b4:0d:16:70:ec:a3:e3:cd:f8:67:b3:9f:57:35:
c0:4c:0c:40:06:b8:22:87:e8:5f:d5:b4:42:08:c8:
6b:a3:2d:71:bf:6b:67:a0:db:15:82:60:e2:8d:2f:
e1:e7:9b:f0:18:cd:8d:7e:ca:89:76:58:37:a4:c4:
25:42:32:97:dc:78:22:90:d4:6c:c8:f2:77:16:2e:
de:83:17:3a:6b:de:da:ca:d8:f8:b8:59:f9:48:b0:
e7:d4:c5:29:32:ce:08:f3:4b:69:fd:4a:9d:15:75:
5c:6f:60:3d:57:ce:88:3a:e7:d1:92:e9:f3:b7:40:
be:e0:70:0c:35:1d:90:6a:50:3d:81:e6:ab:bd:be:
c5:a5:53:7d:ab:46:f0:80:8b:57:19:8c:51:73:34:
c5:3d:24:2f:f9:a0:1f:80:de:d6:f0:f3:67:ef:ea:
fa:c0:7a:db:87:43:43:2c:09:ef:0f:4b:14:ea:66:
19:f6:4c:d9:aa:51:20:eb:7b:2a:71:33:14:b8:be:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:08:86:9C:36:97:73:C2:41:EA:BC:C6:63:7B:D0:DF:3D:63:79:9F
X509v3 Authority Key Identifier:
keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.99.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:29:9a:be:d0:ab:d8:27:ee:7e:00:2a:26:9c:c3:a1:c0:02:
54:db:f8:90:c5:b5:68:46:68:e8:c4:39:c6:81:7a:fd:0e:84:
0f:8a:61:24:48:14:ff:7b:3f:46:ef:21:f4:39:50:b6:ca:9f:
ea:70:ea:f3:86:93:7c:ca:a4:da:30:f0:69:44:a2:c4:21:12:
6a:07:0f:32:0d:8d:4e:a0:11:89:31:01:b7:36:04:35:f4:48:
06:f8:5b:8f:00:4c:bf:3b:96:c6:dd:08:95:7a:98:31:68:9a:
68:0e:35:0d:10:9d:00:ad:7d:5e:46:40:a3:8c:89:7c:db:0e:
41:d6:5f:84:db:5d:55:8f:d4:28:c5:27:bb:44:b5:91:5e:89:
1d:d7:57:dd:87:0f:78:eb:03:b3:8c:46:1a:06:da:eb:3e:ee:
4f:f3:28:6a:c4:cf:25:7f:c3:d6:eb:62:ac:ff:06:bb:92:0d:
a2:9d:d7:68:6a:24:67:1e:0c:cd:c2:f0:ec:01:49:fd:50:42:
88:f2:e9:a4:e6:98:c3:28:3e:2e:4b:03:b9:e7:29:e1:93:87:
92:73:24:55:eb:f1:4a:2d:8a:62:42:d8:f3:36:64:1a:0a:68:
e0:15:94:a4:aa:e4:fc:c9:bb:23:69:7e:c9:0e:4b:e1:2c:40:
69:da:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:43 2025 by rpki-client