Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e20323134303235.roa
File: 3139322e3230382e392e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier: 2DTp3VXwR9aOc/8uVh/120BkX2gx/uV7II2JoUgmns0=
Subject key identifier: DD:E9:75:4C:6B:2D:08:50:36:90:E1:A3:3A:DC:05:AE:02:0E:E6:45
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 608E242DC396FB66F384534CBC430F91D5BD4B16
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e20323134303235.roa
Signing time: Thu 28 Nov 2024 12:00:53 +0000
ROA not before: Thu 28 Nov 2024 11:55:53 +0000
ROA not after: Thu 27 Nov 2025 12:00:53 +0000
asID: 214025
IP address blocks: 192.208.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:8e:24:2d:c3:96:fb:66:f3:84:53:4c:bc:43:0f:91:d5:bd:4b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 28 11:55:53 2024 GMT
Not After : Nov 27 12:00:53 2025 GMT
Subject: CN=DDE9754C6B2D08503690E1A33ADC05AE020EE645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:5f:53:00:ca:1d:77:eb:72:ac:77:82:30:
16:bf:ad:ca:f3:e7:94:20:2b:5d:7a:cf:be:5d:a5:
31:38:99:18:44:f2:b1:73:93:f9:86:9b:e7:e6:0f:
f7:ca:6b:6c:03:89:93:20:42:f3:f7:6b:a3:d3:eb:
7d:d8:a1:17:6b:59:0b:46:a7:bf:f5:85:49:5e:7e:
ab:66:40:0e:6f:45:25:54:aa:e2:bb:18:dd:8c:af:
01:ad:64:fd:c6:c6:e5:9a:dd:e1:c3:3b:f6:c9:79:
7e:00:26:d0:c2:13:c5:e6:61:67:4f:08:8b:1c:cf:
e7:65:65:58:e0:69:6c:a5:97:34:83:fe:48:49:12:
e6:4f:60:86:dc:92:6a:ef:0d:5e:39:88:0b:32:6b:
d8:88:5d:09:6f:a6:e5:9d:d6:69:38:5b:40:c7:d4:
6e:97:88:14:f2:09:67:a4:9d:42:6e:3b:d6:96:22:
d6:82:63:45:91:22:6e:61:ed:cf:40:0b:32:bd:d8:
19:fd:c4:18:88:cb:a1:d2:34:51:1a:e2:39:8c:93:
96:dd:32:5b:1c:c1:ab:c6:9d:cc:d1:06:3a:e8:b7:
38:d9:ab:a0:37:6e:0b:c9:02:51:89:9e:e0:32:24:
26:03:0c:1d:bd:a2:02:e0:18:f0:65:cd:9c:a5:16:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E9:75:4C:6B:2D:08:50:36:90:E1:A3:3A:DC:05:AE:02:0E:E6:45
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e20323134303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:2f:be:2a:5e:43:a5:69:b5:41:6f:f3:a8:0b:1e:56:5a:19:
33:31:0b:6b:a7:1c:48:d7:91:0e:92:aa:9f:33:f8:c5:a1:39:
01:ab:9a:fa:55:6a:48:e9:9d:a8:e6:4e:a8:73:19:ae:b6:83:
69:39:a2:f0:07:9d:11:04:45:45:a8:8e:3a:18:2b:76:4f:c8:
ca:c6:ea:06:52:f3:96:57:ec:3c:3e:93:fb:39:74:be:2a:e7:
91:df:fd:36:fd:4a:75:06:2a:00:c6:8f:a2:81:8b:cd:4e:51:
03:80:07:5b:75:09:04:f8:0f:fd:bc:33:b8:bf:7a:e2:9f:ae:
4a:de:bf:00:88:93:b7:a1:f1:2a:1c:a7:27:9d:5e:68:f3:35:
cd:b5:54:03:ea:1d:6b:b9:39:99:53:79:54:73:01:ba:54:5a:
cc:c4:12:88:bf:44:c8:be:d1:0f:4c:37:ce:54:f1:dc:93:4d:
93:1a:77:6a:b2:35:3e:3a:f1:f8:57:2e:50:d1:87:95:d0:0f:
af:4d:02:83:59:3e:69:68:cb:93:82:ba:05:86:cd:86:5a:b0:
78:0c:c4:58:83:b3:80:8e:74:9a:c1:9d:16:88:ab:b0:a0:8c:
f2:35:bd:f8:07:8f:ee:ea:cf:23:d8:40:c7:d1:31:75:13:43:
39:d3:1a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:30 2025 by rpki-client