Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136372e302f32342d3234203d3e2037303138.roa
File: 3139382e3137352e3136372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: oeKHQkwEKWsPr0hkQNsW9PbHAHGyzQnzZKGRoK6oaLw=
Subject key identifier: 2E:8E:D9:13:FB:48:50:E7:3B:30:01:26:7B:AF:8F:9F:AF:CA:31:4D
Certificate issuer: /CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
Certificate serial: 0D8FB12BDFFB4895A8FBCFA98A7A9B45B1B41997
Authority key identifier: 1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136372e302f32342d3234203d3e2037303138.roa
Signing time: Wed 18 Dec 2024 05:47:45 +0000
ROA not before: Wed 18 Dec 2024 05:42:45 +0000
ROA not after: Wed 17 Dec 2025 05:47:45 +0000
asID: 7018
IP address blocks: 198.175.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:8f:b1:2b:df:fb:48:95:a8:fb:cf:a9:8a:7a:9b:45:b1:b4:19:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
Validity
Not Before: Dec 18 05:42:45 2024 GMT
Not After : Dec 17 05:47:45 2025 GMT
Subject: CN=2E8ED913FB4850E73B3001267BAF8F9FAFCA314D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:3d:d4:00:ec:23:7b:e3:f1:86:7d:14:fd:
1b:87:1b:c8:74:5c:da:78:61:3d:ac:3f:88:bd:68:
90:92:b6:46:01:8c:60:92:8d:78:52:7b:3a:63:5e:
3d:7e:e5:52:98:4e:91:a2:12:9f:99:da:ed:8c:4e:
64:54:10:9a:ff:9a:2d:9b:31:35:ea:ee:99:de:b7:
53:f4:48:1c:5c:a1:f4:95:10:64:3c:03:a7:67:9a:
53:96:e9:e1:90:d0:80:37:51:85:77:53:9a:43:2d:
45:66:97:65:86:6f:77:b2:a1:c4:eb:22:c9:44:fa:
2c:70:14:76:59:b8:65:e2:88:ba:01:fa:75:23:51:
87:2d:5b:46:68:9f:b7:23:90:f6:8c:b9:b9:2e:ab:
65:6d:d1:ce:53:4f:48:8e:a5:ed:9d:f0:be:55:27:
09:b0:d5:c8:a7:20:a9:0c:18:2a:f9:45:23:ac:3c:
a2:c0:8a:47:6f:19:18:76:89:3d:22:18:8a:c8:29:
56:8a:fc:65:fe:6c:42:23:11:1d:29:ba:c7:72:33:
7b:f4:01:b7:33:83:42:1f:5e:a2:05:5f:25:a9:b4:
6b:50:d7:46:17:3e:39:11:e4:0a:47:b2:87:82:f4:
49:58:d5:8e:c7:df:cf:6c:3a:49:93:c5:d2:82:81:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8E:D9:13:FB:48:50:E7:3B:30:01:26:7B:AF:8F:9F:AF:CA:31:4D
X509v3 Authority Key Identifier:
keyid:1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136372e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.175.167.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1e:40:78:8b:2c:20:39:13:8a:73:eb:b2:43:10:36:2e:99:
e2:08:1b:84:8a:1c:ea:d8:a6:e3:6a:10:dc:ff:a7:ef:eb:20:
e3:a0:f7:50:60:24:4a:fd:76:c8:59:80:29:c2:f1:f7:b1:9b:
d3:67:bd:94:ae:48:b0:17:af:81:38:54:fa:ff:56:41:86:a5:
c3:35:83:3f:c8:a2:b7:8f:41:c9:74:b4:07:aa:f7:c8:4d:9a:
69:fb:f9:d0:a8:91:ae:69:ff:8c:87:88:56:88:b4:e1:2b:5b:
b1:2e:4f:f0:57:b6:40:fb:89:78:0e:7f:9d:00:08:1d:08:45:
33:fa:7d:6d:e4:51:e8:f1:2c:63:0b:45:1b:79:52:39:cb:80:
c6:39:81:1b:36:93:b0:24:f6:68:79:bc:5c:be:90:31:fd:56:
0d:a4:e7:e2:50:df:f9:12:44:5a:1e:a4:f5:cc:68:7e:da:f0:
a2:1c:b7:2b:da:6e:ad:ac:b7:8b:bc:bf:34:d2:f0:ee:10:1c:
1f:18:ed:c9:2e:e6:d4:dd:d7:25:7a:66:08:13:b5:ce:53:ff:
ac:af:3a:d4:5c:a8:a0:41:6d:38:52:26:e9:74:14:37:76:c6:
42:04:81:84:4b:2b:71:7b:5f:a4:11:2c:90:be:16:7a:9b:05:
4d:97:aa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:55:04 2025 by rpki-client