Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e2034353135.roa
File: 3139322e3230382e322e302f32342d3234203d3e2034353135.roa (raw, json)
Hash identifier: alQixuI0A8bboWb5MnnYNjbD9F+IIql4sveK528cqU8=
Subject key identifier: F3:81:48:DB:E5:C0:D9:31:B3:0C:73:34:19:56:B1:C0:22:39:95:B3
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 07667493B1E24F4C4386FC4EB172583D715286AF
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e2034353135.roa
Signing time: Wed 26 Mar 2025 12:36:44 +0000
ROA not before: Wed 26 Mar 2025 12:31:44 +0000
ROA not after: Wed 25 Mar 2026 12:36:44 +0000
asID: 4515
IP address blocks: 192.208.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:66:74:93:b1:e2:4f:4c:43:86:fc:4e:b1:72:58:3d:71:52:86:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Mar 26 12:31:44 2025 GMT
Not After : Mar 25 12:36:44 2026 GMT
Subject: CN=F38148DBE5C0D931B30C73341956B1C0223995B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:59:ea:82:47:b0:4f:8c:35:3c:e3:df:12:
ce:07:cb:c9:6f:1f:59:c4:1e:aa:70:5b:71:ed:0a:
22:ea:e3:b2:0d:cd:29:1f:71:5c:37:c0:64:bc:8e:
4b:6b:9c:31:fe:52:40:7c:d0:c7:51:de:5f:6b:d3:
c0:ed:32:a9:ee:74:d0:7d:e9:5c:24:1c:3f:f9:21:
41:d2:8b:f8:2b:6a:57:f3:e2:7a:0d:55:c9:6d:7e:
e2:19:f9:7c:6e:48:6f:3f:88:e7:42:dd:23:89:4d:
12:c2:4a:c8:7b:a5:6a:be:f8:c1:ce:0e:19:ac:51:
d1:dc:62:54:23:f7:c5:1c:73:52:54:10:44:6a:ef:
de:a0:32:cd:7c:9c:ab:34:1b:2b:21:c1:72:8c:38:
f5:fe:f5:07:38:63:90:27:31:3b:6b:10:a3:d1:00:
e8:e2:fe:81:7e:aa:0e:52:12:14:cd:55:c0:30:45:
64:ea:97:f0:3c:85:76:60:25:19:6b:a6:a7:2e:f4:
7a:f5:ec:5a:8c:08:17:47:a1:8e:9a:04:cc:4d:d7:
38:bc:04:bb:53:5d:f3:0f:d1:f0:c0:59:d0:b9:97:
87:fa:67:22:a5:0f:ed:0f:d6:b9:84:63:da:97:b7:
3c:ca:78:b4:a0:bb:43:e9:75:8f:5f:ec:03:04:ab:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:81:48:DB:E5:C0:D9:31:B3:0C:73:34:19:56:B1:C0:22:39:95:B3
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e2034353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:aa:ec:05:8f:49:89:30:c4:6d:fb:e7:49:e7:9d:7f:4a:b4:
77:00:dc:0f:d6:ee:86:9e:ef:54:f3:87:29:2f:50:0a:42:70:
12:dc:6b:be:03:d2:72:3d:7c:ad:28:6f:38:d1:cb:9d:d2:b6:
c9:6d:e8:85:41:51:24:5a:b7:e5:b0:a7:22:51:8e:60:d1:54:
21:7b:74:9d:cb:80:86:bf:c5:5c:e9:f4:00:63:73:a2:b4:ca:
95:d6:86:6c:5a:c2:b5:23:25:4b:4c:31:50:e6:29:5a:8f:c1:
df:42:91:bb:c0:c7:5b:54:eb:9e:38:83:85:51:ce:53:06:39:
80:e0:18:0c:b1:f7:c2:bf:2f:ef:dc:fc:08:0c:e6:59:65:71:
b9:a6:cf:80:a9:2d:cc:5b:e3:a0:33:0f:8b:41:de:6a:9d:7f:
0e:3f:58:4e:f5:66:22:19:86:b1:0a:ce:21:7d:b0:c5:df:be:
86:cf:b6:e8:8b:91:54:61:58:ec:98:79:fc:14:7b:6b:27:f6:
4c:e5:38:6f:75:05:f6:b6:d7:0f:40:94:5b:ab:36:79:77:e3:
29:b6:59:0e:3c:bb:7d:a9:83:e6:73:8e:3a:af:96:7a:7d:7e:
9a:1e:95:46:5c:8f:d2:a0:42:48:5a:c1:0a:12:ab:a4:f8:43:
ca:5f:81:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:42:21 2025 by rpki-client