Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323135333034.roa
File: 3139322e3230382e31342e302f32342d3234203d3e20323135333034.roa (raw, json)
Hash identifier: FCNdLXPLT2Ml2UsruDUyWZ7Q/QlEzDy0jaAkcYfoVAg=
Subject key identifier: 98:7E:65:A4:7B:33:D5:94:89:01:E2:E0:F8:C6:DD:B0:B5:1C:A5:81
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 62F72ECB336EA1FFB8F43FF5F080C0A037AC06EA
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323135333034.roa
Signing time: Thu 28 Nov 2024 12:00:53 +0000
ROA not before: Thu 28 Nov 2024 11:55:53 +0000
ROA not after: Thu 27 Nov 2025 12:00:53 +0000
asID: 215304
IP address blocks: 192.208.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:f7:2e:cb:33:6e:a1:ff:b8:f4:3f:f5:f0:80:c0:a0:37:ac:06:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 28 11:55:53 2024 GMT
Not After : Nov 27 12:00:53 2025 GMT
Subject: CN=987E65A47B33D5948901E2E0F8C6DDB0B51CA581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a1:8c:b1:51:b0:3d:86:a7:1a:26:a9:ac:78:
7e:fe:83:4f:28:c2:c4:06:e3:06:0f:8f:4b:d8:cd:
ab:3f:0e:29:99:a3:a7:23:54:73:2c:e8:c7:66:a8:
65:13:de:78:f1:c5:7c:ae:eb:36:be:3d:2e:c1:57:
e0:cc:77:f8:18:fe:f9:2d:6a:0c:03:5c:19:bf:64:
4a:8c:01:da:d9:2d:99:5d:5f:b5:02:9a:4d:ea:c4:
36:97:e2:a9:8b:2e:74:08:1c:58:18:aa:57:6d:4e:
e7:ab:0d:06:d2:72:54:48:74:f4:d7:3d:bf:bf:b6:
eb:89:47:c4:92:83:c8:61:6f:26:43:e2:2a:33:83:
82:52:90:00:cd:0b:fd:fe:c4:58:a4:87:7f:9f:df:
d5:3e:29:45:4b:a8:9f:5c:f8:13:38:cf:38:7e:18:
3f:d7:33:d3:2b:85:06:87:b7:92:f3:fe:56:c2:76:
e7:80:02:49:bf:38:d3:8b:f4:2f:a6:fb:02:c7:60:
f3:07:c4:f2:6c:7c:b1:21:ee:fa:4c:11:f9:52:7a:
92:17:ed:ac:da:1e:fb:fd:50:59:30:a6:ab:33:ab:
a0:2f:c2:0e:df:43:6e:47:4f:c9:c5:e7:3f:a4:b8:
0f:50:fd:02:5b:ae:1e:f5:0e:1e:4a:7a:05:37:17:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7E:65:A4:7B:33:D5:94:89:01:E2:E0:F8:C6:DD:B0:B5:1C:A5:81
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323135333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.14.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:12:d8:54:6a:bb:5f:31:18:1d:82:3a:02:a7:97:f3:2d:93:
60:fc:2f:90:b7:3a:4a:2f:3e:b6:70:78:48:9c:b3:92:16:1e:
07:59:f9:18:ff:17:dc:74:ea:73:4c:15:e4:af:da:3c:55:73:
e1:9e:93:f1:b9:31:bf:3b:81:cc:78:71:14:d2:d7:8a:a2:8b:
be:0f:f0:b6:cf:8a:a0:3b:a5:9d:79:98:66:bd:f7:c1:90:96:
4f:e6:f4:84:b2:9d:41:f0:6f:f0:b9:54:26:ee:b6:3d:cb:c0:
71:90:77:83:a9:6e:9a:f7:4e:b2:3d:c3:67:4b:34:8c:d8:02:
cb:85:08:04:1a:20:c1:7b:6f:da:9d:50:db:c3:87:2f:53:82:
11:e5:3d:c1:47:b8:70:42:ff:22:2c:97:2b:b6:3e:06:25:9b:
7f:31:f9:c4:b8:dc:1b:9d:e6:a4:bc:13:6e:09:1f:1a:cc:2b:
38:ba:c5:0b:0d:a9:f3:b2:d0:c4:57:0e:2a:79:3b:12:7b:6e:
6b:f2:5d:df:36:c5:a4:e9:2f:bd:1c:6f:04:d1:36:8b:47:db:
cc:d3:94:04:5d:17:2c:9b:47:d3:11:f8:0e:ff:47:70:9b:ef:
32:16:2c:78:0e:cc:1e:a6:77:8c:c2:a1:ff:49:1d:b5:46:6f:
fc:1b:70:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:49 2025 by rpki-client