Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20333937343233.roa
File: 3139322e3230382e31332e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier: 5/JeXH2U3n+44lp0sea5bpCdJNC1MfWcObSIPmkyCyM=
Subject key identifier: BF:B7:C7:2D:68:FF:D2:4A:FE:B8:73:82:7C:69:F6:1C:3F:70:BF:D0
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 0DAF9E539CBA264E5993A7D9718AFEC96F60E472
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20333937343233.roa
Signing time: Fri 14 Jun 2024 16:14:25 +0000
ROA not before: Fri 14 Jun 2024 16:09:25 +0000
ROA not after: Fri 13 Jun 2025 16:14:25 +0000
asID: 397423
IP address blocks: 192.208.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:af:9e:53:9c:ba:26:4e:59:93:a7:d9:71:8a:fe:c9:6f:60:e4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Jun 14 16:09:25 2024 GMT
Not After : Jun 13 16:14:25 2025 GMT
Subject: CN=BFB7C72D68FFD24AFEB873827C69F61C3F70BFD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:87:2b:f2:8e:c9:43:73:87:8a:b4:58:f0:
15:6f:43:c8:78:dd:b4:03:8e:c5:f8:86:fd:06:f1:
ab:e2:a5:10:8b:c3:b1:cc:b7:d0:8c:97:60:a2:2b:
fd:bd:87:db:b2:7d:84:25:37:e4:03:6d:b3:d4:c1:
0f:b7:c5:6e:bd:54:0e:60:90:22:51:2e:3f:84:95:
3e:4c:b0:f7:27:fa:fc:6e:1c:54:58:e1:b2:ce:c8:
9c:7b:4e:92:dd:8a:9b:0a:ca:66:a5:49:24:1e:e7:
e0:19:03:ec:03:4a:5a:8d:b3:8b:05:a4:7c:17:47:
e3:31:32:52:9c:16:38:4a:ac:58:34:be:d5:35:89:
9f:3e:53:3f:4b:a4:9a:62:ac:cb:9e:ac:93:25:a2:
0f:51:39:2f:76:59:ca:08:62:17:d5:b1:62:c4:2e:
0e:e7:f2:92:fd:9a:9a:d7:c8:a5:5d:3a:08:b0:15:
74:10:ba:58:be:34:10:82:78:91:fa:1f:70:34:b3:
a3:1b:0d:38:16:a2:15:3e:80:54:31:53:f3:72:de:
17:18:9a:35:3e:0b:7a:f4:2b:bd:37:c7:74:2b:69:
78:cf:04:47:46:6b:53:37:fe:71:f1:07:6c:34:13:
40:7d:49:9f:60:15:e1:53:33:ac:0e:8a:70:d5:4b:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B7:C7:2D:68:FF:D2:4A:FE:B8:73:82:7C:69:F6:1C:3F:70:BF:D0
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20333937343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.13.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e6:e7:e6:6e:26:8b:a3:12:f1:30:ce:9b:a2:9c:2f:b7:50:
00:6e:a1:a0:fb:5b:73:31:b6:15:f5:a0:e5:95:a8:85:67:79:
ee:09:01:85:87:0c:df:32:78:dc:b0:cc:11:07:00:86:10:37:
51:5b:5e:83:db:3c:0a:3d:09:11:6b:ec:c3:a3:5e:66:a7:11:
98:9b:82:c0:56:43:ec:ec:b3:37:7d:88:54:52:a0:ca:22:c3:
60:a9:a3:bb:fb:2e:1d:5c:a9:a6:b3:e6:a3:e7:9d:a3:2f:ed:
95:0c:a0:b2:9e:33:23:d5:74:c3:4b:72:6a:7b:77:e7:4f:c9:
b5:84:12:cb:72:b1:30:8a:3f:f0:a0:07:34:f3:7b:86:33:35:
86:15:b5:68:e7:51:f8:98:5e:dd:27:ee:a3:00:33:f8:24:71:
c1:6e:a3:19:e9:21:68:83:64:18:21:ce:ee:c6:54:1a:5f:31:
57:02:52:e3:47:8e:e3:11:e1:2c:c3:5b:76:ec:35:b1:cd:b9:
86:fe:89:ac:0a:d9:7e:a7:91:a0:e0:06:09:7f:a0:53:f1:5a:
10:d1:11:d0:b7:db:29:b4:21:db:f0:a1:c1:7c:fb:66:12:e3:
86:1f:7b:9f:fc:47:77:b6:ef:8b:0f:b7:a0:29:ae:a4:52:96:
90:3c:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:54 2025 by rpki-client