Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e203134363138.roa
File: 3139392e3233312e36362e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: O9nKnAsoC2JjGXAIwN3iVMQs1vmU/vN+/CCDwFd530A=
Subject key identifier: 4A:76:A2:A9:F0:BD:94:9A:3D:4D:49:14:23:DA:F4:EE:37:1C:51:58
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 0D4D079AE719FD363C0358B2B8C9A6E125CC635C
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e203134363138.roa
Signing time: Thu 13 Feb 2025 07:12:31 +0000
ROA not before: Thu 13 Feb 2025 07:07:31 +0000
ROA not after: Thu 12 Feb 2026 07:12:31 +0000
asID: 14618
IP address blocks: 199.231.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:4d:07:9a:e7:19:fd:36:3c:03:58:b2:b8:c9:a6:e1:25:cc:63:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Feb 13 07:07:31 2025 GMT
Not After : Feb 12 07:12:31 2026 GMT
Subject: CN=4A76A2A9F0BD949A3D4D491423DAF4EE371C5158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:4c:de:4d:f9:dd:26:22:2c:3e:96:2e:75:
4d:f8:65:e5:20:08:b5:dc:5e:2b:e4:fa:47:1a:bb:
30:de:0b:86:5f:a9:d3:9f:2d:19:b6:1c:68:76:c4:
bf:59:2b:cd:6a:31:0a:9a:75:b1:1b:b3:4f:a1:21:
49:3a:42:95:c1:c8:03:37:32:cf:86:c0:c6:e1:af:
61:4a:f0:12:4c:d2:90:2a:83:f2:2c:52:a1:ee:87:
6f:ba:bb:a5:d2:96:7d:2b:c4:14:8b:95:ea:6f:0a:
2a:ee:b9:3a:21:00:bb:bb:6b:dc:66:20:03:eb:34:
1e:3c:99:43:de:d0:1c:e3:d3:87:f6:f4:30:28:9c:
1b:97:c9:0b:9b:f3:6d:fe:a5:37:53:71:89:cd:11:
46:43:bf:c7:2b:07:f8:81:40:5f:3b:58:bb:d6:02:
62:3c:04:52:38:b9:e0:e9:ab:48:5d:df:d8:45:56:
e1:ae:c6:ac:68:0b:bc:b4:fb:87:b6:43:4b:da:b9:
de:90:60:4e:6d:cd:6c:b1:84:46:48:f0:95:be:20:
05:81:63:8c:9f:e2:0c:a1:ef:ad:e7:4d:16:4c:a4:
5e:fd:af:d8:a9:f5:88:cd:79:22:77:31:cd:37:b4:
ff:94:63:6b:e9:8a:67:a7:f3:1b:a3:97:47:8c:a1:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:76:A2:A9:F0:BD:94:9A:3D:4D:49:14:23:DA:F4:EE:37:1C:51:58
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.66.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:24:fe:68:27:d6:7a:f9:55:a7:5d:b9:91:44:39:4c:fe:e9:
d9:aa:d3:35:d2:e7:86:da:b3:7d:36:ed:b9:73:48:7a:af:3c:
4b:92:bd:b4:92:e3:88:16:29:ab:34:57:ce:dd:3f:00:b5:fe:
0a:1f:6c:50:81:11:b1:8f:fb:73:18:71:30:8d:c5:41:45:d2:
f6:14:ed:60:d7:21:7e:0c:94:19:09:20:d9:ed:c6:a3:e8:8e:
be:e0:b8:8a:e5:62:49:b1:e1:2d:e3:23:23:7b:3f:c8:2a:9f:
a3:c9:7c:25:c5:5b:84:3c:b4:12:7d:40:26:0b:4c:2d:94:1d:
d7:f6:80:4d:06:05:43:15:76:87:11:a3:bf:ea:ff:0e:ae:0c:
89:ab:65:7a:26:c8:58:77:a5:04:6a:0a:6e:26:3b:dd:c8:b3:
78:72:a9:e2:bf:43:ea:e1:3b:25:f1:50:af:eb:e1:95:c2:e0:
bd:0f:61:1a:4f:d1:62:fa:28:36:05:02:5b:fb:72:a2:7e:07:
50:ea:95:76:d8:a0:84:b7:af:ec:e0:0f:1a:4a:e8:3b:e9:87:
6a:a3:f4:ee:b9:48:33:f6:1b:3c:da:c3:8b:45:6c:59:33:63:
a6:fd:33:4b:f6:55:10:b3:c5:22:2b:3b:35:4f:63:d6:b1:96:
46:d2:81:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:11 2025 by rpki-client