Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20383334.roa
File: 3139322e3230382e31312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: cZ4S4zT6mtgYOBKF1KoCySRoCr7aeeW/dERlX+d6UzI=
Subject key identifier: D9:13:4E:87:D6:3E:67:64:A8:5E:9B:3E:BC:48:99:23:74:D1:74:02
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 460830FBCF02E19977AF97B7B847DD89C3A899F8
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20383334.roa
Signing time: Thu 28 Nov 2024 00:01:01 +0000
ROA not before: Wed 27 Nov 2024 23:56:01 +0000
ROA not after: Thu 27 Nov 2025 00:01:01 +0000
asID: 834
IP address blocks: 192.208.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:08:30:fb:cf:02:e1:99:77:af:97:b7:b8:47:dd:89:c3:a8:99:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 27 23:56:01 2024 GMT
Not After : Nov 27 00:01:01 2025 GMT
Subject: CN=D9134E87D63E6764A85E9B3EBC48992374D17402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:67:e8:b7:3a:c2:bf:ad:3e:ae:09:74:d8:22:
b2:a4:a4:91:cf:bc:3a:da:13:3d:ce:30:d5:0e:d9:
bd:87:18:2e:0e:21:ce:3d:f0:cd:e6:65:81:13:cb:
17:80:16:71:0f:51:3d:42:56:89:b7:cc:1b:24:35:
19:e0:a0:80:df:44:76:67:08:da:ab:1e:d0:b8:0e:
2c:ad:a0:e9:28:09:19:ea:61:35:fb:81:fa:5d:3f:
1d:e9:80:9b:58:f7:62:3b:3f:a4:3a:37:62:a5:6a:
d6:5c:e2:69:1e:6f:8d:53:4e:9e:9d:62:7d:7f:6c:
e1:54:98:0c:b9:ca:a0:5a:b4:b8:a9:a9:21:81:ba:
69:75:9d:bf:31:33:66:35:55:e6:d2:55:c1:e3:94:
96:94:55:e4:7d:fd:d7:94:20:0c:31:a7:e7:fb:f3:
cf:2c:72:c4:bf:11:65:92:db:ff:a0:5e:32:d9:21:
3d:cd:98:75:3a:a6:dd:23:3d:d5:37:8f:c8:9c:ae:
01:4e:b7:d7:e0:b8:b5:54:9e:0c:3f:28:6d:b2:6b:
a8:e8:79:5b:a4:16:a7:8e:98:ce:8d:6c:87:3b:0a:
48:fd:f2:c8:6c:94:59:aa:a6:6b:b3:fe:68:d2:b4:
44:b9:a4:80:99:2d:2f:8a:c7:22:2e:ba:95:24:85:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:13:4E:87:D6:3E:67:64:A8:5E:9B:3E:BC:48:99:23:74:D1:74:02
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.11.0/24
Signature Algorithm: sha256WithRSAEncryption
86:12:92:19:19:60:e5:28:9e:13:60:7b:18:fe:9f:29:76:01:
76:93:42:f1:d4:02:d7:0c:74:8e:ab:69:fe:e2:ce:d6:be:d4:
b1:b6:96:83:db:76:fb:86:c9:95:9a:bf:b9:e7:15:45:87:02:
4e:26:3e:ea:d2:d8:78:df:9d:ed:aa:35:8c:c9:a9:c1:d3:1f:
3a:88:3f:bf:2c:33:32:ba:d4:14:fb:3b:61:3b:8f:18:3b:1b:
1b:5b:f2:6f:c3:28:99:16:42:42:ec:17:42:0e:9e:dd:ef:e1:
ea:bb:32:87:91:fd:61:4a:b8:df:12:2e:c8:36:01:9a:db:8e:
5d:45:2f:cf:36:5b:0a:ab:0e:26:30:ac:aa:1d:6c:e4:23:62:
87:e3:2a:5e:8e:ae:19:8a:ae:cf:8f:c6:ef:5e:78:78:f7:11:
0e:f3:ea:08:07:f2:ba:7d:02:57:1b:9f:14:b7:fa:fb:63:a9:
6e:da:03:33:91:06:c5:7f:12:d4:eb:75:35:fa:88:20:df:7f:
ed:df:a8:6a:e2:94:9e:a4:c1:d6:28:4e:78:a5:de:fe:eb:24:
8a:1e:a8:a4:b4:ae:22:f1:05:f4:0c:25:0f:6e:b5:4a:16:87:
e2:3f:b5:b8:a3:0c:19:25:97:dc:da:3e:8d:11:98:25:b3:17:
b9:f8:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:55:14 2025 by rpki-client