Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20323134363534.roa
File: 3139322e3230382e31312e302f32342d3234203d3e20323134363534.roa (raw, json)
Hash identifier: p6TYWH/mvHyZYQA9NrjpbjkEefoNgURPlRxZdFWyQM8=
Subject key identifier: 94:6E:34:A3:D5:AE:30:F1:1B:7C:1B:D5:42:85:C3:4D:4D:52:81:21
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 08461824724F1523F25B0BA778209CCC4CA92C37
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20323134363534.roa
Signing time: Fri 29 Nov 2024 15:28:53 +0000
ROA not before: Fri 29 Nov 2024 15:23:53 +0000
ROA not after: Fri 28 Nov 2025 15:28:53 +0000
asID: 214654
IP address blocks: 192.208.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:46:18:24:72:4f:15:23:f2:5b:0b:a7:78:20:9c:cc:4c:a9:2c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 29 15:23:53 2024 GMT
Not After : Nov 28 15:28:53 2025 GMT
Subject: CN=946E34A3D5AE30F11B7C1BD54285C34D4D528121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:2c:c6:a1:d0:1f:f3:25:31:3f:31:2c:9f:
35:3c:37:5a:9d:2a:a0:7e:6c:ad:5a:c7:f4:69:c5:
6a:b8:c2:92:21:ba:63:77:09:96:32:04:c3:d1:2d:
fe:57:a0:cf:7f:ad:f7:99:da:4d:3c:07:7a:bf:54:
03:50:f8:21:e9:22:f1:e6:ab:99:0c:d8:61:b3:46:
77:1b:42:88:9f:c1:c3:b2:31:6f:d9:f9:72:51:1b:
1a:ad:f5:76:4d:a6:ed:71:b3:fc:01:de:44:45:0d:
06:b5:de:3f:42:54:6a:9f:97:13:e1:8e:92:0b:9b:
20:e0:d8:86:66:09:82:06:7d:2c:9f:13:50:7c:8e:
69:91:aa:68:eb:d6:0a:b0:48:ea:fe:e7:85:5f:bc:
57:71:15:6c:70:43:38:d5:19:e8:3c:03:e8:f4:be:
fb:7a:d0:ca:a1:e3:27:6d:9c:b6:48:e9:a5:0d:e6:
98:d0:5f:48:cb:0d:7a:b3:78:19:ec:42:c4:2e:1a:
0a:78:09:36:e5:8d:76:12:38:14:13:86:b5:a6:ab:
76:53:fb:da:16:b4:ab:74:02:60:97:42:3d:68:51:
2d:08:28:e9:86:e0:42:a8:7b:00:ed:66:e9:5b:46:
d6:95:65:cf:2e:2e:ed:b8:b9:d3:e6:de:48:96:bc:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6E:34:A3:D5:AE:30:F1:1B:7C:1B:D5:42:85:C3:4D:4D:52:81:21
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20323134363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.11.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b0:04:b1:9f:ef:96:09:cb:30:53:bb:da:62:55:c1:53:1d:
8d:a8:1d:d9:88:32:02:2d:f8:76:24:67:bd:ca:9d:80:95:16:
8a:00:b5:80:67:f7:3a:15:15:e2:8e:1d:4d:a4:66:cb:4b:86:
c6:8d:f0:82:ea:4d:d3:99:fe:c6:e8:cd:48:79:37:fd:35:09:
d9:47:cc:ca:16:26:41:a6:7b:23:7b:4d:00:3c:f2:46:2f:c0:
69:82:c8:cd:72:a4:6e:db:dc:fe:24:38:2e:ac:02:f3:0e:53:
48:c6:85:4f:ae:8f:3c:b6:f1:fb:db:b0:7d:a6:80:76:13:7d:
83:3f:91:1d:40:07:13:71:df:10:65:bd:2b:02:af:ee:f6:a4:
5e:bd:64:d4:09:87:9a:f9:a8:bf:d5:37:40:3b:4b:34:85:78:
aa:e0:62:7d:42:fe:5b:b2:80:15:d6:a4:4d:a3:d3:35:8c:fa:
ee:14:03:5e:b4:83:74:e4:90:2f:31:fa:74:be:cc:c9:f7:9b:
77:19:a4:8b:c6:95:a0:fa:eb:97:62:e8:ac:ff:b5:95:e6:64:
ab:6e:5e:32:5a:1b:a5:9c:fb:5c:2a:b1:e7:4b:08:e7:26:a2:
d9:03:42:96:97:de:29:d5:d0:e3:b5:ea:47:a2:59:96:ec:24:
ba:b4:18:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:06 2025 by rpki-client