Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233382e302f32342d3234203d3e203332373830.roa
File: 3139392e3138382e3233382e302f32342d3234203d3e203332373830.roa (raw, json)
Hash identifier: DyHCVW6mXrCtLSQix2b9EGFllBxlLZCNoTSXloWqsDY=
Subject key identifier: 09:0F:BE:F8:27:60:62:E8:3F:E3:CD:AC:36:AF:5E:F0:48:FD:92:62
Certificate issuer: /CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
Certificate serial: 4B6F92B8F6D6E8A4E5A5DF4536B1519A4794A70C
Authority key identifier: CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233382e302f32342d3234203d3e203332373830.roa
Signing time: Thu 12 Dec 2024 20:28:23 +0000
ROA not before: Thu 12 Dec 2024 20:23:23 +0000
ROA not after: Thu 11 Dec 2025 20:28:23 +0000
asID: 32780
IP address blocks: 199.188.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:6f:92:b8:f6:d6:e8:a4:e5:a5:df:45:36:b1:51:9a:47:94:a7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
Validity
Not Before: Dec 12 20:23:23 2024 GMT
Not After : Dec 11 20:28:23 2025 GMT
Subject: CN=090FBEF8276062E83FE3CDAC36AF5EF048FD9262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:47:be:93:5c:4b:37:1e:b7:b4:42:92:09:
91:75:0d:9d:57:96:3e:91:91:66:6d:97:cd:dd:6d:
13:5b:7a:35:f1:4f:95:bd:98:86:44:e1:94:a6:50:
08:d3:56:c9:7b:66:6d:ea:42:77:5d:e7:af:03:ac:
4c:34:b3:de:03:ad:e8:47:5d:65:28:b6:cf:0e:6e:
64:84:0e:11:7e:6d:82:47:75:93:20:61:f6:ff:f9:
d3:86:10:64:9b:d5:68:38:ac:be:56:b8:3c:f6:c5:
a0:59:e9:f0:a3:fe:e0:35:67:57:de:f1:d5:b1:03:
4b:a2:22:dd:47:60:ef:c5:8a:d0:58:f2:7c:d3:98:
9f:8e:65:24:ae:8f:1f:4b:b4:fc:1b:76:e5:e6:11:
78:55:6c:93:b9:b6:ee:57:b2:11:47:49:50:a0:f1:
07:c4:96:98:0b:7a:1c:82:3b:52:62:b3:66:ec:7b:
a5:86:e5:b5:15:f7:fe:85:3b:4a:d7:54:be:e5:b7:
a5:46:93:05:4f:7a:95:85:7a:f3:6a:9a:15:0a:c6:
ff:51:3f:fa:d5:e7:8a:92:28:33:68:4c:98:e0:f0:
2a:2f:02:64:81:02:48:07:26:a6:59:7b:36:b2:0b:
3b:36:af:d9:d6:70:83:ef:d3:8e:fb:56:71:6e:f8:
67:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0F:BE:F8:27:60:62:E8:3F:E3:CD:AC:36:AF:5E:F0:48:FD:92:62
X509v3 Authority Key Identifier:
keyid:CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233382e302f32342d3234203d3e203332373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.188.238.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:45:fe:a3:64:63:b8:0e:ad:6c:2c:c9:63:7e:2c:53:89:1b:
23:3d:cf:77:44:a7:bd:d1:61:a5:7a:e0:2a:db:de:23:9f:c7:
e4:d2:00:de:c8:fe:73:09:c5:2a:d1:83:32:65:9e:70:5c:63:
67:2a:d8:2e:83:3f:aa:eb:7d:43:bb:a8:bb:0d:cb:45:54:81:
e5:0d:92:64:a9:79:bc:ae:d1:f9:75:46:60:5f:bb:ce:ad:00:
92:35:21:10:12:2c:38:48:70:b8:30:08:da:2f:c9:d6:2b:70:
9f:5c:8e:86:81:c2:19:68:07:55:3a:c6:57:4d:25:7f:f3:3a:
ae:45:31:ad:c3:f3:65:aa:fd:39:d6:0e:ce:2a:97:4a:13:0c:
f3:d6:34:22:7b:3d:cc:32:26:c8:1c:69:04:92:58:3e:ca:cf:
78:5c:53:24:3a:80:b1:4c:cb:77:ca:ae:aa:22:59:05:8f:c3:
63:2c:31:59:d5:20:4f:3c:d9:f3:05:a0:7b:e4:90:d1:d7:d5:
2b:e1:05:49:65:54:0b:6d:a5:fb:94:bd:5f:80:3e:d9:a0:60:
0a:3f:1f:74:72:74:f3:30:2d:a3:87:8d:f1:69:47:2f:f6:bd:
48:e2:50:95:76:fd:a1:ee:65:03:c2:e7:d9:32:b3:cb:70:0f:
e0:52:a5:62
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUS2+SuPbW6KTlpd9FNrFRmkeUpwwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzNhN2EyZmE5ZmRmN2E2ZjUwODdiODQwYjY2YzRmYzM0
MTIwZDVjZTcxMTRiODc4ZDAwHhcNMjQxMjEyMjAyMzIzWhcNMjUxMjExMjAyODIz
WjAzMTEwLwYDVQQDEygwOTBGQkVGODI3NjA2MkU4M0ZFM0NEQUMzNkFGNUVGMDQ4
RkQ5MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTtHvpNcSzce
t7RCkgmRdQ2dV5Y+kZFmbZfN3W0TW3o18U+VvZiGROGUplAI01bJe2Zt6kJ3Xeev
A6xMNLPeA63oR11lKLbPDm5khA4Rfm2CR3WTIGH2//nThhBkm9VoOKy+Vrg89sWg
Wenwo/7gNWdX3vHVsQNLoiLdR2DvxYrQWPJ805ifjmUkro8fS7T8G3bl5hF4VWyT
ubbuV7IRR0lQoPEHxJaYC3ocgjtSYrNm7HulhuW1Fff+hTtK11S+5belRpMFT3qV
hXrzapoVCsb/UT/61eeKkigzaEyY4PAqLwJkgQJIByamWXs2sgs7Nq/Z1nCD79OO
+1Zxbvhn6QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFAkPvvgnYGLoP+PNrDavXvBI
/ZJiMB8GA1UdIwQYMBaAFMuneLdBW9TR5u8OgA4li0bfpU2KMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThjZmEwYTE2YmYxOWY0LzAv
Q0JBNzc4Qjc0MTVCRDREMUU2RUYwRTgwMEUyNThCNDZERkE1NEQ4QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkL2NiZmM4NGNkLTM5ZmItNGVmYi1hNjVkLWRjYTczYWRmYTlhYy9jM2E3
YTJmYTlmZGY3YTZmNTA4N2I4NDBiNjZjNGZjMzQxMjBkNWNlNzExNGI4NzhkMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4Y2Zh
MGExNmJmMTlmNC8wLzMxMzkzOTJlMzEzODM4MmUzMjMzMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzMyMzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7zuMA0GCSqGSIb3DQEB
CwUAA4IBAQCtRf6jZGO4Dq1sLMljfixTiRsjPc93RKe90WGleuAq294jn8fk0gDe
yP5zCcUq0YMyZZ5wXGNnKtgugz+q631Du6i7DctFVIHlDZJkqXm8rtH5dUZgX7vO
rQCSNSEQEiw4SHC4MAjaL8nWK3CfXI6GgcIZaAdVOsZXTSV/8zquRTGtw/Nlqv05
1g7OKpdKEwzz1jQiez3MMibIHGkEklg+ys94XFMkOoCxTMt3yq6qIlkFj8NjLDFZ
1SBPPNnzBaB75JDR19Ur4QVJZVQLbaX7lL1fgD7ZoGAKPx90cnTzMC2jh43xaUcv
9r1I4lCVdv2h7mUDwufZMrPLcA/gUqVi
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:23 2025 by rpki-client