Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e20323134363534.roa
File: 3139322e3230382e392e302f32342d3234203d3e20323134363534.roa (raw, json)
Hash identifier: msxGt2X87ZVKh/ZhOr6iS+TSm/u9l/SAdvLX5heb4GM=
Subject key identifier: 3A:1A:D8:80:F3:3F:3A:EB:49:D4:26:B9:10:15:BD:08:69:B0:24:FF
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 3E248917F359EA86EFC749CB637C7FD04859BA98
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e20323134363534.roa
Signing time: Fri 29 Nov 2024 15:28:52 +0000
ROA not before: Fri 29 Nov 2024 15:23:52 +0000
ROA not after: Fri 28 Nov 2025 15:28:52 +0000
asID: 214654
IP address blocks: 192.208.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:24:89:17:f3:59:ea:86:ef:c7:49:cb:63:7c:7f:d0:48:59:ba:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 29 15:23:52 2024 GMT
Not After : Nov 28 15:28:52 2025 GMT
Subject: CN=3A1AD880F33F3AEB49D426B91015BD0869B024FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7a:7b:ef:75:8c:77:54:fc:ba:65:70:bd:6f:
f3:dc:ac:58:71:85:a6:fd:16:a2:b5:a8:43:c0:d6:
33:fb:2f:25:4b:26:13:36:99:21:bb:3b:2f:cb:6d:
b5:4e:4e:d2:75:96:02:a7:0b:d3:2e:1c:29:07:7b:
0b:3b:ab:41:19:e1:ca:19:98:d9:44:d0:78:88:81:
a8:fb:39:a8:68:8b:54:5a:bf:2e:fb:c7:7b:df:ba:
ac:f0:3a:ac:7d:59:3c:97:76:6e:75:5b:bf:e1:94:
f5:b9:8f:60:ae:eb:79:47:a9:49:f4:c9:80:cf:57:
dc:6d:95:0f:3a:bf:6a:50:50:43:50:52:72:1b:0d:
4c:52:e9:9b:88:2c:5c:6f:b3:4e:8d:ae:3a:92:74:
e3:30:ed:48:f4:97:34:a6:8e:53:8d:78:54:44:e5:
79:c3:44:85:78:41:12:3c:57:a8:3b:e7:03:4f:ea:
27:6a:d8:91:72:b9:81:18:bf:49:00:77:42:df:be:
48:7c:5c:9b:35:ca:b4:ab:f0:3b:7e:18:52:e5:ef:
ef:25:a1:8f:29:a0:0c:28:3d:5d:ed:ff:17:be:5d:
60:d6:fb:96:a1:88:5e:a4:93:70:b0:7b:33:2b:07:
52:4c:c3:53:33:6e:e0:98:2a:51:f3:1b:b3:28:bf:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1A:D8:80:F3:3F:3A:EB:49:D4:26:B9:10:15:BD:08:69:B0:24:FF
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e20323134363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.9.0/24
Signature Algorithm: sha256WithRSAEncryption
20:dc:39:37:97:52:8e:4c:b5:2a:35:e4:6c:c6:48:a8:fb:02:
d0:dc:e2:34:57:a9:bd:82:ee:fe:90:51:11:7c:04:12:29:7d:
9f:7e:ef:3b:17:82:d8:ba:02:61:1e:68:4b:90:02:71:00:cb:
ba:5a:aa:25:ad:61:36:a1:f3:7a:2e:e1:5b:e3:4a:69:8d:f7:
7c:0b:ac:28:8f:e5:0d:a9:5d:f9:f8:c7:0b:73:5a:8a:eb:0c:
98:8b:97:b8:ca:81:80:36:c2:8a:58:aa:6d:02:8a:cd:0a:22:
b9:28:86:8b:75:e7:b0:d8:1d:43:f0:aa:3e:9b:b2:99:09:e2:
1c:65:f8:a9:e6:61:6c:9f:17:dc:6e:ec:03:fc:a5:bf:43:1a:
41:bc:7e:e9:21:53:78:b0:f7:b1:96:df:54:40:71:98:03:03:
5b:f8:72:a3:cc:32:80:db:91:86:23:e9:6e:e8:1e:65:7c:8f:
c8:56:ba:6d:fc:59:e1:74:3c:7f:86:6b:66:f5:d0:4d:be:5e:
14:ad:bc:94:cf:5d:c2:04:f0:52:f9:17:d7:90:05:71:a1:79:
18:c5:27:2b:74:16:eb:6d:26:0e:cb:d1:86:0a:13:51:5a:54:
72:7f:b8:a2:c7:ae:86:21:23:81:ca:78:69:63:40:3c:a3:fb:
9c:6b:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:09 2025 by rpki-client