Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313337383937.roa
File: 3139322e3230382e322e302f32342d3234203d3e20313337383937.roa (raw, json)
Hash identifier: sJQF0aTqohK5SpriWlTPsuSqczDjEhwtxfJOdqxakbw=
Subject key identifier: 03:61:F3:61:91:91:C8:0D:54:7F:03:71:5D:47:74:BC:98:10:18:B7
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 094ECE4943BDCF815999AC262336E632F0DE415E
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313337383937.roa
Signing time: Wed 26 Mar 2025 12:36:44 +0000
ROA not before: Wed 26 Mar 2025 12:31:44 +0000
ROA not after: Wed 25 Mar 2026 12:36:44 +0000
asID: 137897
IP address blocks: 192.208.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:4e:ce:49:43:bd:cf:81:59:99:ac:26:23:36:e6:32:f0:de:41:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Mar 26 12:31:44 2025 GMT
Not After : Mar 25 12:36:44 2026 GMT
Subject: CN=0361F3619191C80D547F03715D4774BC981018B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:00:c2:77:bf:56:10:da:ac:27:dd:4a:27:
33:d6:c0:a5:9a:40:77:2a:2d:38:3c:32:4a:36:46:
a3:4f:b8:a5:2f:e1:17:24:fe:69:31:56:b3:a9:bc:
3c:48:6b:29:1e:bf:7a:23:22:3a:a4:b0:5d:bb:a8:
98:fb:c9:a7:79:85:31:f2:9c:88:4d:6d:b5:a5:2a:
e5:17:11:67:c8:76:47:f9:43:12:06:b5:9b:b4:7c:
ce:0e:ea:10:b9:0a:67:4f:dc:c5:08:67:f4:fa:49:
8e:9c:55:2f:27:47:41:45:55:0c:dc:59:8f:59:01:
e5:4a:c4:69:fe:30:e9:bc:a7:4c:bf:18:f2:3b:aa:
af:8b:60:a7:b4:1e:32:37:60:1a:7b:62:fa:5e:73:
38:c5:25:cb:5a:a9:b9:1f:bd:64:52:c8:ca:5a:19:
d6:8b:75:70:b9:ea:0c:45:7a:26:6d:33:ad:67:df:
66:28:e9:48:ff:20:bd:99:81:7e:16:c4:e6:48:c2:
1d:cc:5e:c1:bc:44:2a:6b:d5:88:7c:d8:55:66:5e:
49:48:12:65:a9:c9:60:18:33:89:4c:fb:2f:a7:95:
e1:25:19:f8:ef:59:cd:99:e6:9f:2e:b2:7c:e6:53:
5a:e4:30:c5:38:c7:6d:0a:0a:96:db:af:d3:6f:33:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:61:F3:61:91:91:C8:0D:54:7F:03:71:5D:47:74:BC:98:10:18:B7
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313337383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.2.0/24
Signature Algorithm: sha256WithRSAEncryption
97:cb:e5:0f:59:93:5d:52:79:43:22:a6:cb:42:be:6b:56:49:
52:4c:71:d8:cc:60:88:49:df:b9:9b:37:59:1c:b7:e6:67:56:
44:03:02:68:10:bb:ba:4a:3d:74:9a:40:2e:94:9f:02:2b:2c:
a6:6b:78:7a:40:23:4d:a6:e1:ae:2a:a4:6a:fc:ba:ba:a2:cd:
ad:26:91:50:03:68:b4:b4:54:36:ba:8d:e2:5c:88:11:09:d6:
a6:69:c8:a4:21:08:d2:ad:68:74:eb:98:a4:cb:4d:b3:46:a2:
e7:aa:6a:0c:3f:53:bd:2a:86:d3:16:c0:61:5c:77:4a:24:66:
a8:e2:54:45:91:6a:bb:4d:9f:ba:0c:85:4f:0e:19:56:bc:a6:
2b:98:ff:ab:31:e6:08:4d:93:e1:c6:bf:0b:ca:da:cc:36:22:
d9:78:9f:fb:69:d4:74:2e:ea:57:e7:93:8c:73:59:6d:82:85:
0c:68:6f:33:ef:4c:02:19:cf:9d:9f:53:91:1a:94:56:50:ac:
17:5c:5f:33:46:80:39:85:db:38:00:ad:bf:06:d6:2b:0f:a0:
7f:b2:18:b1:31:b1:9b:65:0e:38:dd:c5:87:e0:47:7e:35:1e:
64:61:e1:04:2e:0d:4d:90:a0:c6:f4:5c:a4:11:ef:a2:33:a1:
f7:43:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:49:12 2025 by rpki-client