Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa
File: 3137322e39392e32332e302f32342d3234203d3e20333938393632.roa (raw, json)
Hash identifier: XhU7zeL8Ak1sCKa4D9V/awpSG7HpVrFlnjYtaxei47U=
Subject key identifier: 12:CA:70:75:6D:10:85:0E:E5:78:B8:34:F8:C8:B5:56:2F:44:FC:DF
Certificate issuer: /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial: 35E0F8CDC8B12B6EB00B7C41DC8B1AFB0B4915E9
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa
Signing time: Wed 09 Oct 2024 08:49:01 +0000
ROA not before: Wed 09 Oct 2024 08:44:01 +0000
ROA not after: Wed 08 Oct 2025 08:49:01 +0000
asID: 398962
IP address blocks: 172.99.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e0:f8:cd:c8:b1:2b:6e:b0:0b:7c:41:dc:8b:1a:fb:0b:49:15:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Validity
Not Before: Oct 9 08:44:01 2024 GMT
Not After : Oct 8 08:49:01 2025 GMT
Subject: CN=12CA70756D10850EE578B834F8C8B5562F44FCDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:9f:61:b3:ec:94:32:36:45:5e:e8:3f:aa:
ab:02:05:87:b4:12:05:9c:d0:ad:d4:12:cd:cb:88:
d8:be:0b:89:c3:a3:35:a2:1e:aa:6d:cb:fc:e0:bb:
18:35:55:08:14:fe:c6:b1:e0:8e:e5:4b:ff:f6:a6:
fa:a4:1c:bc:46:17:59:cd:86:a6:fa:33:0b:fb:ac:
43:de:b4:d5:c1:26:de:60:1b:ed:82:e4:1d:96:27:
38:25:61:14:16:4e:c5:ba:7f:b8:3c:3a:06:73:b4:
cd:39:18:5a:8e:70:31:83:80:b4:16:b3:aa:ca:31:
7c:6b:36:6b:73:08:c4:35:cd:5a:dc:3a:e3:4a:3c:
f1:91:17:20:a8:b1:81:5f:3f:67:08:a6:01:72:62:
6a:65:04:8d:ff:ea:d1:67:31:7c:33:5f:c2:ac:28:
fc:38:7b:be:a4:5e:2c:2f:80:fb:d8:7c:1b:6e:97:
4a:fb:e6:d3:20:71:86:4a:19:11:75:02:fb:36:46:
a8:58:bf:b2:f1:b4:4c:d1:89:9e:d5:2b:cd:05:97:
8c:2a:12:db:bf:e9:62:85:b5:e8:f7:dc:f8:af:1e:
87:73:9a:64:7c:c1:ac:17:e2:fe:fe:d5:62:5f:27:
d5:f7:74:1f:ec:73:3a:5a:4d:8a:17:0c:20:4c:da:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CA:70:75:6D:10:85:0E:E5:78:B8:34:F8:C8:B5:56:2F:44:FC:DF
X509v3 Authority Key Identifier:
keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.99.23.0/24
Signature Algorithm: sha256WithRSAEncryption
10:08:53:68:64:c3:5e:d0:0b:28:48:e6:c6:63:cb:ff:77:5a:
30:3a:86:1c:75:2e:ad:77:57:91:97:50:0a:b7:05:3d:37:2b:
62:40:b9:54:4f:21:1f:a4:ca:9b:00:f3:57:55:31:09:4c:e1:
27:d4:10:b7:f1:a7:44:41:68:83:c4:de:7f:28:56:86:a4:bb:
4e:ab:98:79:47:c7:a9:2b:2a:0d:44:71:0b:6b:b1:68:71:a6:
f1:fa:55:b9:03:1e:e0:f9:c1:0e:d9:a2:73:d1:2a:c5:f0:8e:
ca:b8:1d:fd:94:65:23:60:4d:e6:d6:22:40:8f:7d:77:88:3b:
e6:f9:3e:68:2e:93:aa:49:62:98:bc:db:25:ba:e4:d3:42:48:
60:0d:96:ea:db:9a:a9:7f:4d:e8:37:75:af:97:c0:38:23:87:
f2:fc:fa:0d:7b:f5:b1:bb:7e:2b:d3:42:c4:dc:64:34:93:fb:
ca:f8:40:61:98:d9:6c:45:cf:e8:e3:65:7c:b7:1a:71:10:be:
de:e4:14:72:02:29:e8:8a:4b:77:dd:ef:58:b7:6b:9f:5a:44:
33:8e:fb:34:da:2b:94:c8:b2:af:e4:9e:d7:71:6c:c2:63:a7:
f3:06:e8:70:4b:3c:6f:2a:fe:d9:dc:50:a7:31:7d:b1:55:8f:
ce:8b:83:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:12 2025 by rpki-client