Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137332e3234392e3138382e302f32322d3234203d3e203230343733.roa
File: 3137332e3234392e3138382e302f32322d3234203d3e203230343733.roa (raw, json)
Hash identifier: 4x4Op1BQad7crb63Zp7pR7NSYCw+SCMeSSbrlbSV1N8=
Subject key identifier: 8F:2D:2A:52:66:B1:82:51:35:95:21:9B:18:55:53:67:73:03:AA:6B
Certificate issuer: /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial: 6A5E56648FF4C5FD17CEAC0FC3E8CE82EAEA8346
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137332e3234392e3138382e302f32322d3234203d3e203230343733.roa
Signing time: Wed 22 Jan 2025 16:28:26 +0000
ROA not before: Wed 22 Jan 2025 16:23:26 +0000
ROA not after: Wed 21 Jan 2026 16:28:26 +0000
asID: 20473
IP address blocks: 173.249.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:5e:56:64:8f:f4:c5:fd:17:ce:ac:0f:c3:e8:ce:82:ea:ea:83:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Validity
Not Before: Jan 22 16:23:26 2025 GMT
Not After : Jan 21 16:28:26 2026 GMT
Subject: CN=8F2D2A5266B182513595219B185553677303AA6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b5:07:92:93:e0:dd:3f:a4:ef:e3:3f:eb:39:
7a:f3:80:e0:de:f2:fa:20:b5:e5:2d:c4:fa:00:f7:
19:03:dd:f2:51:cc:5a:c9:0a:8e:05:4e:0c:40:42:
3b:c6:bf:73:e6:eb:6b:bc:69:ff:da:61:0a:14:95:
9d:00:ef:9a:9f:49:11:db:6d:51:ae:0b:5c:1a:fa:
bd:23:fc:ed:60:b5:82:2b:f8:d5:87:2b:40:ea:04:
9d:3c:b1:1d:0a:04:9d:4a:6e:41:eb:a9:b0:66:36:
27:c2:d5:47:68:21:f2:61:70:29:a9:34:4c:c2:c0:
68:06:fb:ca:90:5f:cc:43:47:70:d3:06:de:5a:24:
b8:ac:e9:d9:83:8b:39:5c:47:cc:54:c5:c7:60:32:
9b:c4:3c:54:86:6f:dc:6d:b4:12:2f:fd:4c:34:5c:
b8:0a:86:5a:01:2a:e6:b5:55:e9:e2:6f:ff:b2:75:
78:29:b2:3a:be:c0:14:17:21:83:e8:b5:53:1e:f7:
fc:a3:48:06:f1:84:ee:e9:7c:ec:9a:13:27:53:47:
0d:ac:27:69:e7:17:d4:30:7e:3f:60:98:34:e8:a0:
60:4f:97:4e:43:1b:42:c0:87:b6:b6:1a:12:88:52:
13:0e:4d:6c:71:9c:08:ec:d2:62:f2:d9:2b:3c:dc:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2D:2A:52:66:B1:82:51:35:95:21:9B:18:55:53:67:73:03:AA:6B
X509v3 Authority Key Identifier:
keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137332e3234392e3138382e302f32322d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.249.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:8d:87:e9:a2:e3:49:a8:fa:88:a5:72:b0:7e:4c:a7:82:1e:
15:14:44:22:6d:c2:53:c4:65:30:35:1a:bf:37:14:ba:1d:4a:
fe:8c:c2:69:70:7e:17:82:e7:97:4f:39:ab:84:e8:5b:52:10:
33:a1:51:97:94:66:af:46:42:19:11:57:94:d0:c8:99:ba:9a:
67:8d:13:f0:25:0d:2c:b8:72:01:e4:9f:2f:08:86:43:49:2e:
3b:e8:b7:d6:14:0e:30:12:e6:b0:52:01:fa:98:d1:f8:d7:6e:
77:5b:83:4b:b0:1e:6b:00:35:6d:90:7f:16:38:ac:9a:96:12:
77:0b:bb:85:0e:cc:34:b8:a8:9c:09:52:03:f8:f9:0b:61:21:
d7:9d:8e:21:5e:32:67:c0:09:95:3e:1a:f4:15:92:ae:53:41:
b2:35:59:99:89:a1:da:26:7e:08:1a:17:8f:af:ef:ef:db:18:
f4:61:8b:77:3c:ef:d7:cc:00:79:53:f9:f6:ff:49:82:85:04:
5d:ee:7b:8a:da:2a:3c:2c:23:e1:a1:f1:ba:5d:0b:fe:e0:4f:
60:72:c2:00:b2:95:4f:2d:31:46:fe:59:3f:33:74:12:1f:06:
d6:ed:26:cc:b4:a1:8f:14:36:92:70:3a:c9:93:61:35:d9:c1:
4d:5a:85:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:46 2025 by rpki-client