Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa
File: 3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa (raw, json)
Hash identifier: UfNtpjkqj8VGeUwUAjLZp216zfC9OWBv6BKfdNfZz/U=
Subject key identifier: C6:01:C5:ED:28:33:F8:B7:78:1C:F7:0E:A3:76:2F:DB:25:FE:CA:EB
Certificate issuer: /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial: 251610BAD90D997C8EDD3FC9C2A5FB04B81C7E39
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa
Signing time: Wed 22 Jan 2025 16:28:26 +0000
ROA not before: Wed 22 Jan 2025 16:23:26 +0000
ROA not after: Wed 21 Jan 2026 16:28:26 +0000
asID: 20473
IP address blocks: 216.211.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:16:10:ba:d9:0d:99:7c:8e:dd:3f:c9:c2:a5:fb:04:b8:1c:7e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Validity
Not Before: Jan 22 16:23:26 2025 GMT
Not After : Jan 21 16:28:26 2026 GMT
Subject: CN=C601C5ED2833F8B7781CF70EA3762FDB25FECAEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:2a:29:38:22:cd:ae:3e:8d:5c:40:c7:d6:
4b:9a:8c:49:38:48:c0:78:a9:58:9d:f3:d5:37:3a:
7a:53:50:c8:04:8b:09:2a:4c:0d:88:13:b1:ae:e3:
e8:d3:32:7f:33:46:5c:d8:81:65:77:01:7e:d4:31:
9e:53:51:ae:ee:a4:35:25:b6:c2:30:49:7d:bc:f6:
b3:9a:39:cd:21:95:f0:db:48:3b:e9:6e:0f:76:bf:
5e:2b:2e:a5:e2:e1:92:84:83:23:7c:d6:4d:2e:5d:
16:a3:0b:2b:68:cb:27:60:a1:6d:64:da:e5:2c:e8:
3a:d5:8f:2c:6a:9b:a8:d7:a0:02:2a:62:74:a7:6e:
8c:94:4c:49:22:f0:b7:5f:1a:b7:32:52:fe:b4:80:
b3:60:60:d2:77:41:be:5a:5f:ef:ba:c1:33:2c:b7:
0c:2f:cb:26:b9:8d:90:e5:3a:09:6a:dd:44:a5:55:
90:93:62:39:e5:41:fa:12:a1:4f:5e:84:7b:70:ae:
5c:a3:32:4b:cf:a7:12:9e:7d:f0:75:0a:08:13:5a:
e9:b5:35:d5:75:1f:61:20:6d:ef:00:d5:af:3f:3f:
e9:e0:d9:0f:9c:7c:28:90:e0:db:71:79:67:15:cc:
5d:08:22:4d:78:d4:66:98:2c:4b:0d:86:df:0b:c3:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:01:C5:ED:28:33:F8:B7:78:1C:F7:0E:A3:76:2F:DB:25:FE:CA:EB
X509v3 Authority Key Identifier:
keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.211.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:a6:c3:63:56:e6:08:43:5e:58:0f:d4:83:c4:64:dc:fd:0e:
69:63:5c:84:f3:b9:3b:d9:4e:d5:64:f4:ee:f5:3f:9c:a9:70:
08:69:d2:8f:09:79:ea:f0:e2:4e:57:bf:7d:0b:6d:db:27:0c:
87:f2:80:7b:82:c1:76:99:70:9c:70:55:02:67:ce:c4:85:eb:
b5:95:64:47:89:76:0f:5b:14:e3:3d:44:f4:7e:0a:e1:e0:ad:
5c:b3:6e:c1:60:22:57:54:ce:fe:e7:f1:8c:3c:1a:a2:dd:3c:
08:8d:a8:fc:5b:08:2c:67:63:75:83:0d:94:a5:7e:ea:35:c4:
b0:46:ce:22:cc:33:59:10:2b:4c:f9:6a:83:5a:69:49:f2:8b:
1f:7e:19:67:b9:b6:f9:7a:28:c2:da:56:e5:5a:52:ad:f5:ec:
fb:fa:ed:de:10:f0:94:9f:5f:25:95:29:82:74:73:49:05:bf:
77:7f:8e:e2:c0:27:63:c4:55:28:a5:63:cc:ee:d0:55:6f:12:
46:7b:2c:2b:e0:7d:f1:1b:93:e4:a0:d1:62:f8:b5:0c:fc:c8:
7a:fa:65:52:e9:95:d2:c9:36:cd:a4:a9:0b:c6:ac:cd:4a:43:
4f:4f:ec:56:12:e1:a8:e6:58:81:f5:33:29:e5:16:21:f0:f9:
bc:92:33:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:31 2025 by rpki-client