Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36302e302f32332d3234203d3e20383334.roa
File: 3139382e3137372e36302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: Q9YiOA3tov3fln6ZZbWZzHoiZmkYE8PVPZ3OeeYWWIw=
Subject key identifier: E3:15:E5:5D:FC:88:15:8E:DF:E5:18:0A:11:DE:64:69:BF:93:AF:D0
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 07749A408FD8D451FD9CC0A775DB269B0ABB3692
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36302e302f32332d3234203d3e20383334.roa
Signing time: Thu 06 Mar 2025 08:12:16 +0000
ROA not before: Thu 06 Mar 2025 08:07:16 +0000
ROA not after: Thu 05 Mar 2026 08:12:16 +0000
asID: 834
IP address blocks: 198.177.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:74:9a:40:8f:d8:d4:51:fd:9c:c0:a7:75:db:26:9b:0a:bb:36:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Mar 6 08:07:16 2025 GMT
Not After : Mar 5 08:12:16 2026 GMT
Subject: CN=E315E55DFC88158EDFE5180A11DE6469BF93AFD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:4e:3b:b9:41:1d:71:a6:a1:29:22:86:b5:
52:da:5f:88:58:33:9d:9a:5e:64:a3:fa:7f:e6:cb:
60:6e:a9:9e:f9:91:97:02:5b:41:7e:74:84:26:19:
cc:2c:f2:b2:3d:a7:09:cf:35:42:10:34:fd:6f:3c:
8d:f9:16:8a:19:73:51:68:5a:07:f0:13:c5:b1:20:
45:b1:f4:fa:38:a8:0b:14:f8:24:60:56:2e:67:08:
0a:9a:91:c0:92:d0:6d:0f:f2:8b:3e:29:af:85:50:
8b:b2:d0:e5:c5:1a:93:cd:28:aa:02:45:75:ff:1f:
4d:ed:cc:89:31:6e:0a:b2:6a:92:38:01:92:52:0b:
a9:13:f3:91:23:b8:e4:bd:d5:3b:21:62:d8:47:cb:
15:7e:fc:0a:83:1f:bb:25:5a:c8:7c:e6:70:0c:db:
73:cf:b5:88:7c:20:80:8f:78:65:10:57:52:c3:6b:
09:2e:96:93:92:56:0f:eb:5d:a5:0b:e3:6e:8c:3f:
93:68:f6:f6:94:49:bd:48:91:88:44:3a:5c:5c:2b:
17:38:16:b7:d3:ea:82:8a:21:85:3a:3c:46:f7:2b:
fc:7a:b9:3c:4d:51:0b:d4:cc:7d:1e:0c:63:9f:c8:
b4:be:8d:44:53:0e:9c:54:5e:cd:00:f0:4a:40:e4:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:15:E5:5D:FC:88:15:8E:DF:E5:18:0A:11:DE:64:69:BF:93:AF:D0
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.177.60.0/23
Signature Algorithm: sha256WithRSAEncryption
35:83:7c:7f:af:9f:f0:d4:eb:e4:ea:a2:5c:24:23:db:ab:06:
0a:67:39:35:e5:a7:20:84:dc:cb:7f:ee:58:75:e2:50:e1:45:
7e:e0:b6:b6:3c:bb:ef:fa:aa:cb:41:cc:11:25:85:4b:f2:d3:
b2:c6:33:81:3a:bf:0b:35:18:f9:ab:2a:19:6d:36:fd:68:47:
c8:82:6d:dd:9a:8c:2e:b9:c4:34:1c:6e:0a:51:5c:a1:32:13:
62:59:b1:39:3a:d4:dc:42:f6:d1:f9:ab:91:37:ac:26:73:b5:
a3:28:b3:c8:87:68:da:96:0e:93:9c:65:7d:bc:6a:83:f7:53:
e9:e4:73:fa:a7:f2:a6:ba:98:29:72:c5:94:43:42:b4:06:2b:
4c:56:7d:9a:6f:0f:96:6c:85:a0:ca:a3:52:16:4e:0b:d4:ec:
74:dc:57:9f:3f:5f:09:62:42:01:ce:d8:68:de:b0:95:c7:18:
8a:50:16:a1:03:76:36:16:34:2c:c6:00:4f:d7:48:34:c7:9e:
64:26:3e:1b:50:c2:ca:66:00:96:2e:52:32:cb:b5:48:78:a6:
ac:9e:b1:49:f9:33:54:88:c5:82:3a:da:f2:6b:50:5c:ea:06:
16:fd:fd:65:4d:33:a8:11:cb:f4:aa:12:23:d2:e0:3a:28:f3:
f3:c4:48:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:08 2025 by rpki-client