Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e203336353330.roa
File: 3139322e3230382e31312e302f32342d3234203d3e203336353330.roa (raw, json)
Hash identifier: fjL8+q6xjs2yJU5dkzV0owS8sdKdXPp7UhmpRI3cgl8=
Subject key identifier: 0D:11:18:97:A1:99:25:D3:EC:64:0A:7F:8B:0E:F7:38:B7:5E:33:98
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 968EA5F531EE10815A9528536A653C19C10425
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e203336353330.roa
Signing time: Thu 28 Nov 2024 12:00:52 +0000
ROA not before: Thu 28 Nov 2024 11:55:52 +0000
ROA not after: Thu 27 Nov 2025 12:00:52 +0000
asID: 36530
IP address blocks: 192.208.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
96:8e:a5:f5:31:ee:10:81:5a:95:28:53:6a:65:3c:19:c1:04:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 28 11:55:52 2024 GMT
Not After : Nov 27 12:00:52 2025 GMT
Subject: CN=0D111897A19925D3EC640A7F8B0EF738B75E3398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:28:5b:5d:57:fd:02:f2:d0:ce:79:01:4d:
21:95:83:b0:44:49:e8:2e:6a:08:47:25:b4:ed:8e:
b9:b5:5f:20:ed:10:74:bb:b5:37:44:59:11:9a:89:
2c:27:af:e5:fa:8b:e9:62:db:cd:7d:b6:76:9d:98:
4a:e8:cd:34:08:68:1b:d4:49:e5:7d:15:0f:58:dc:
c9:40:a5:bf:b4:dd:10:24:f4:6e:06:b1:64:fe:8b:
60:04:03:c6:4b:bb:7f:a2:5b:e0:b4:e3:2f:19:d2:
e6:72:86:37:20:a6:97:af:a6:6a:34:8f:33:39:ce:
19:94:99:c1:00:4f:c3:46:c3:95:70:f5:86:18:76:
78:6b:ab:a6:9b:83:21:70:fa:d6:66:63:a3:df:9d:
1f:75:7c:21:62:b7:2b:f8:7f:0f:db:c3:c2:58:48:
8c:b4:69:c4:f8:76:c4:b8:6f:7a:08:a9:e0:26:a8:
05:a7:2e:d6:2f:05:2b:f8:f3:3a:d0:67:37:2d:10:
dd:ee:df:cb:a6:2b:0f:93:2f:6f:11:78:2f:a7:1f:
84:43:bb:38:e5:bb:68:19:01:0e:f2:70:63:cc:1d:
4c:45:88:65:0a:27:3a:3b:d3:59:b9:7e:9a:e8:76:
97:58:5d:ed:85:f9:d5:3c:ca:43:19:07:6b:24:c2:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:11:18:97:A1:99:25:D3:EC:64:0A:7F:8B:0E:F7:38:B7:5E:33:98
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.11.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e3:37:32:a3:55:dc:38:3d:6f:75:59:93:a2:f0:4d:6a:13:
98:2e:7d:2f:d0:05:2b:d6:cc:df:a5:fe:16:dc:70:a2:12:b0:
28:f7:f8:e7:7b:73:5d:17:72:41:9d:79:a5:d3:9b:d3:14:fb:
0f:55:9a:d0:f7:e5:c6:23:b6:12:24:c0:9e:17:f9:92:37:38:
10:f2:d7:f8:60:47:22:36:85:80:ad:5d:71:b3:a4:fd:85:83:
0b:bf:d9:d5:66:71:45:2a:60:aa:26:b2:3f:3a:75:e1:bf:a5:
39:83:c5:c8:ef:8b:86:7a:68:c8:f2:ba:5c:df:a1:62:38:e4:
de:12:46:7d:0a:27:39:29:29:cb:30:73:0e:7c:a8:d1:e7:85:
2e:2a:d1:f7:01:56:b6:81:64:f9:b0:17:67:65:d4:47:30:d6:
1c:c3:74:9e:a4:08:1d:33:04:17:d0:4a:12:25:19:f9:c3:ea:
29:c9:a7:e3:55:53:0d:03:e5:32:74:78:eb:00:87:a7:30:bc:
ac:11:7d:dc:7a:b0:d4:db:1f:8f:5e:84:8b:90:b8:bb:e9:21:
96:79:ee:bd:4a:62:25:fd:16:52:57:b8:b3:3d:59:fb:f8:fd:
a7:e8:99:46:fa:3b:6e:e0:03:b7:e1:44:20:bb:8a:61:2f:43:
8f:72:33:8a
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUAJaOpfUx7hCBWpUoU2plPBnBBCUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjQxMTI4MTE1NTUyWhcNMjUxMTI3MTIwMDUy
WjAzMTEwLwYDVQQDEygwRDExMTg5N0ExOTkyNUQzRUM2NDBBN0Y4QjBFRjczOEI3
NUUzMzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE0oW11X/QLy
0M55AU0hlYOwREnoLmoIRyW07Y65tV8g7RB0u7U3RFkRmoksJ6/l+ovpYtvNfbZ2
nZhK6M00CGgb1EnlfRUPWNzJQKW/tN0QJPRuBrFk/otgBAPGS7t/olvgtOMvGdLm
coY3IKaXr6ZqNI8zOc4ZlJnBAE/DRsOVcPWGGHZ4a6umm4MhcPrWZmOj350fdXwh
Yrcr+H8P28PCWEiMtGnE+HbEuG96CKngJqgFpy7WLwUr+PM60Gc3LRDd7t/LpisP
ky9vEXgvpx+EQ7s45btoGQEO8nBjzB1MRYhlCic6O9NZuX6a6HaXWF3thfnVPMpD
GQdrJMKC3QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFA0RGJehmSXT7GQKf4sO9zi3
XjOYMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDE3
ODM2MTE3MzhmZi8wLzMxMzkzMjJlMzIzMDM4MmUzMTMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzNjM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMDQCzANBgkqhkiG9w0BAQsF
AAOCAQEAU+M3MqNV3Dg9b3VZk6LwTWoTmC59L9AFK9bM36X+FtxwohKwKPf453tz
XRdyQZ15pdOb0xT7D1Wa0PflxiO2EiTAnhf5kjc4EPLX+GBHIjaFgK1dcbOk/YWD
C7/Z1WZxRSpgqiayPzp14b+lOYPFyO+LhnpoyPK6XN+hYjjk3hJGfQonOSkpyzBz
Dnyo0eeFLirR9wFWtoFk+bAXZ2XURzDWHMN0nqQIHTMEF9BKEiUZ+cPqKcmn41VT
DQPlMnR46wCHpzC8rBF93Hqw1Nsfj16Ei5C4u+khlnnuvUpiJf0WUle4sz1Z+/j9
p+iZRvo7buADt+FEILuKYS9Dj3Izig==
-----END CERTIFICATE-----
Generated at Thu Apr 10 12:25:26 2025 by rpki-client