Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20323134363534.roa
File: 3139322e3230382e31352e302f32342d3234203d3e20323134363534.roa (raw, json)
Hash identifier: OMFFlFnTPvBNy1XZP7//pbWblwj9fyauEvhJsDMLCAw=
Subject key identifier: 9F:8E:59:B4:38:F4:DA:67:F4:02:44:38:C6:F8:0F:B1:DC:00:BC:9C
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 05380FF3F2D5B7D010829C6964BD103D82309DBA
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20323134363534.roa
Signing time: Fri 29 Nov 2024 15:28:53 +0000
ROA not before: Fri 29 Nov 2024 15:23:53 +0000
ROA not after: Fri 28 Nov 2025 15:28:53 +0000
asID: 214654
IP address blocks: 192.208.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:38:0f:f3:f2:d5:b7:d0:10:82:9c:69:64:bd:10:3d:82:30:9d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 29 15:23:53 2024 GMT
Not After : Nov 28 15:28:53 2025 GMT
Subject: CN=9F8E59B438F4DA67F4024438C6F80FB1DC00BC9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:e5:a7:39:cb:8c:be:38:0a:0c:72:bf:84:
c2:41:e8:d1:9e:f7:bc:b5:38:bc:8b:29:b3:1e:d4:
11:14:2e:81:8e:f0:5a:e2:53:24:93:88:5a:fc:c1:
3d:64:cc:40:bc:fb:7d:b8:18:37:d6:03:10:9d:ca:
70:ce:d4:81:b1:6b:55:54:5e:90:62:ff:17:77:af:
67:ac:0b:06:70:52:de:d5:6e:2a:7d:5e:ac:9b:67:
6e:79:93:3b:fd:5d:ae:18:b2:45:2f:dc:1b:38:d1:
42:ff:33:c0:1a:ad:fb:eb:bc:42:26:87:be:b2:7a:
4b:d1:47:a7:91:9f:37:db:62:0c:c4:a0:af:05:cc:
b1:cd:21:d6:cd:09:c6:04:3a:2c:e3:cb:fd:dd:9c:
b4:e9:27:72:b7:3e:74:84:db:10:c5:74:fe:59:f7:
86:9e:2d:4b:60:6f:0e:da:dd:da:df:67:3e:ad:ad:
b9:23:e1:01:8c:a8:b3:cc:63:da:ca:35:45:39:cf:
f1:36:8e:df:0d:94:34:c2:d2:ad:89:09:b0:ce:64:
c6:5a:78:82:c1:8a:f2:f5:b9:c2:fb:02:e0:81:ef:
c8:42:ae:cf:a4:01:11:8b:c3:38:7d:53:17:d5:20:
4b:c4:44:d9:50:eb:56:8b:f9:a9:b8:ed:e9:2d:50:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8E:59:B4:38:F4:DA:67:F4:02:44:38:C6:F8:0F:B1:DC:00:BC:9C
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20323134363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.15.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5d:ff:65:3e:9b:d4:18:13:d7:90:70:5b:c4:8f:76:16:d5:
90:24:02:45:ca:46:f0:c1:c6:6b:c4:de:85:99:7a:e7:2c:ad:
b4:57:21:9f:68:39:98:d4:22:79:16:21:d6:9f:39:8d:49:ea:
e4:71:4c:2f:23:11:d3:20:54:0a:6a:a9:4f:a4:b0:a3:de:23:
fd:6b:2d:eb:8e:92:4f:d5:76:2b:fa:39:ee:23:54:f9:a0:93:
00:4c:ea:98:3a:b3:7d:a7:6b:50:48:00:73:24:15:63:81:cf:
b7:51:9c:8a:e8:eb:77:b9:c2:2a:be:e0:67:ef:16:be:fa:a0:
59:75:72:6d:ab:ab:d4:5c:c4:eb:46:01:b0:ee:92:c1:75:0e:
61:c5:fc:6e:32:cc:0a:c3:83:94:0a:eb:93:fa:14:c4:42:d8:
9e:0c:f5:95:5e:ae:76:68:6d:ec:82:73:ac:93:3f:9a:a1:b6:
72:12:78:85:89:51:46:ca:83:bf:f2:05:ec:a6:4d:23:ae:5a:
1e:de:34:95:67:85:19:7e:fa:5a:e4:9f:73:70:5a:1a:4d:f6:
47:6e:58:66:32:33:c2:2b:23:13:70:1c:32:79:8c:4b:75:cf:
44:65:9c:b6:15:bc:c2:22:1b:f0:e8:06:bf:65:a7:fd:45:d9:
b5:3e:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:02:52 2025 by rpki-client