Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e312e302f32342d3234203d3e20383334.roa
File: 3139322e3230382e312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: c8bzZhpTf38ImGsDWvv8eyirdHT39AsOBkROfOzK7U4=
Subject key identifier: 2F:BD:84:7E:F1:7C:25:50:71:D2:EC:97:DC:53:84:AD:E5:66:A3:6B
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 14D45655EB2CB0C91F58A083039D84DEE040FD8A
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e312e302f32342d3234203d3e20383334.roa
Signing time: Thu 28 Nov 2024 00:00:58 +0000
ROA not before: Wed 27 Nov 2024 23:55:58 +0000
ROA not after: Thu 27 Nov 2025 00:00:58 +0000
asID: 834
IP address blocks: 192.208.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d4:56:55:eb:2c:b0:c9:1f:58:a0:83:03:9d:84:de:e0:40:fd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 27 23:55:58 2024 GMT
Not After : Nov 27 00:00:58 2025 GMT
Subject: CN=2FBD847EF17C255071D2EC97DC5384ADE566A36B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:6f:16:29:18:ec:70:e9:df:50:a4:05:ff:
cc:83:de:f6:d0:cd:62:fa:87:29:43:ac:3c:72:1a:
59:11:e6:7a:b9:5b:c6:53:4a:92:30:fc:4f:33:ca:
52:27:6b:a5:b5:2c:1a:34:2f:94:e0:8f:53:b1:67:
c3:8c:9f:62:64:73:a4:b9:9c:b5:96:63:68:0c:41:
43:dc:0a:2c:45:11:9b:57:9e:4b:bc:1c:67:7a:3c:
4a:b2:72:0e:8a:56:a2:a0:3c:ae:b8:1f:ba:0a:27:
1e:30:3e:34:ad:00:8a:75:98:30:d9:87:53:e3:a1:
39:a6:da:56:51:00:29:1a:81:42:c2:a7:e0:03:68:
78:42:a5:36:18:fc:6f:f6:b9:0a:9e:c3:fe:33:1f:
e3:d0:c3:da:2d:79:42:05:ab:79:03:80:af:63:72:
c1:7f:81:13:8a:80:a2:de:31:d7:48:6c:f2:c9:88:
11:51:0c:c4:d5:3a:44:39:73:e9:c3:63:96:3d:0c:
ba:95:1a:34:13:15:6f:f5:f7:69:05:79:ee:7b:52:
f9:0d:fa:80:6b:6a:32:71:5a:28:07:1c:c2:d6:97:
8f:3d:93:f5:dc:f1:72:ba:f0:ec:63:cd:02:b5:7b:
15:51:5d:a0:a5:02:0c:d2:f6:6e:3e:dc:2a:a8:2e:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BD:84:7E:F1:7C:25:50:71:D2:EC:97:DC:53:84:AD:E5:66:A3:6B
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.1.0/24
Signature Algorithm: sha256WithRSAEncryption
18:13:83:cc:15:34:1a:c8:ca:71:ae:9d:43:52:87:d8:38:9f:
32:cf:f8:ca:c5:31:d8:38:55:a5:3d:c3:e6:a2:ed:c7:5a:c9:
e7:55:32:13:b8:d4:ff:5a:1f:0f:15:80:ab:f8:1f:54:04:3d:
29:14:de:c2:e1:d6:8b:b3:60:3f:25:36:3a:18:56:b7:79:a6:
64:c0:aa:37:4a:47:04:ff:ba:b9:bc:3d:b1:71:89:18:30:2e:
10:5b:a1:87:f1:53:d6:f4:2a:93:44:d6:6e:91:81:d5:db:a3:
ef:da:ab:33:37:10:9b:6f:4c:bf:27:09:a7:c2:e3:5b:9a:c7:
ae:8b:40:61:7c:0a:fd:92:a3:17:e8:75:66:c5:9c:56:87:2c:
6b:dc:c3:a1:3a:39:d5:62:87:ad:cb:5c:a5:98:37:9a:50:06:
73:56:0e:02:53:ad:ff:64:01:1b:35:97:d0:87:e3:aa:50:18:
cf:93:b8:17:e5:04:c8:b3:24:d5:17:e0:0e:71:b7:4f:53:04:
02:e1:61:f8:44:62:c8:d5:74:d4:e7:77:b5:0e:01:c2:a2:08:
ed:f6:e6:fb:27:24:74:45:4a:09:e4:c8:d4:82:72:3d:7b:fa:
5c:9f:82:3c:97:84:35:bb:69:ad:c2:19:c5:df:76:18:8d:b2:
19:5d:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:00:07 2025 by rpki-client