Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36392e302f32342d3234203d3e20323133393930.roa
File: 3139392e3233312e36392e302f32342d3234203d3e20323133393930.roa (raw, json)
Hash identifier: E5fK35U4ApKOt6lQUQnffUtGnFHf7XiVaZzNSm2gnZo=
Subject key identifier: B6:69:A2:A6:38:86:7E:2D:8A:0C:DB:D2:5A:F2:99:89:4B:68:23:7E
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 2D613FDFCC532F5759D124F4D004FCE83D644871
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36392e302f32342d3234203d3e20323133393930.roa
Signing time: Sun 09 Feb 2025 13:51:57 +0000
ROA not before: Sun 09 Feb 2025 13:46:57 +0000
ROA not after: Sun 08 Feb 2026 13:51:57 +0000
asID: 213990
IP address blocks: 199.231.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:61:3f:df:cc:53:2f:57:59:d1:24:f4:d0:04:fc:e8:3d:64:48:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Feb 9 13:46:57 2025 GMT
Not After : Feb 8 13:51:57 2026 GMT
Subject: CN=B669A2A638867E2D8A0CDBD25AF299894B68237E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:43:b1:67:07:1d:4c:a0:8f:eb:6b:04:68:
4e:4c:30:a0:76:f5:4b:68:30:09:47:a8:0d:03:e3:
e4:30:c6:b9:0d:d3:62:2d:5b:04:29:fa:71:02:a6:
2b:9e:cc:f7:a2:d5:b8:cd:49:90:cd:36:29:cc:2a:
71:0f:39:de:09:cf:05:2d:6d:f9:c5:94:66:41:69:
9c:f6:3c:d4:3f:89:09:7d:6d:29:c9:49:bf:b5:f3:
93:7e:71:a8:d9:fd:a4:0e:93:9a:3c:b2:3c:de:12:
5d:97:48:b0:f4:7f:bf:c8:61:e8:8c:af:10:67:d3:
97:a9:96:18:40:74:96:14:9a:d6:62:16:c1:f4:46:
22:0e:d5:66:c3:41:5c:a2:e6:81:dd:a7:49:d9:8f:
68:5a:87:a9:1d:0a:c4:df:e5:7b:83:77:64:4e:be:
ad:cf:71:08:e7:1c:07:0d:aa:ea:02:4f:03:28:1e:
3c:a1:58:eb:8a:dd:9b:62:3d:33:3d:28:db:42:22:
85:a4:06:55:98:79:cf:f1:f1:94:f4:46:45:07:1a:
0c:a9:be:3f:3c:9a:9d:33:5e:24:57:db:03:05:05:
26:28:72:78:1d:44:85:da:13:78:a2:6f:73:43:43:
59:19:89:ca:df:8b:5f:ca:0d:ea:d8:78:af:3e:9f:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:69:A2:A6:38:86:7E:2D:8A:0C:DB:D2:5A:F2:99:89:4B:68:23:7E
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36392e302f32342d3234203d3e20323133393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.69.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:06:f7:4b:30:fc:af:89:05:58:a8:bf:7f:08:9f:13:47:83:
c1:4a:cc:59:c0:e2:73:07:b2:69:56:61:a4:f2:5a:9e:74:7b:
20:b4:33:2d:a1:e3:b0:e2:2e:e1:a7:c4:16:1a:9f:47:e8:e4:
62:9b:46:06:89:54:52:08:9f:89:74:78:0d:70:59:36:cf:b7:
6d:9b:77:e4:7c:76:3b:6b:96:cc:fb:f3:91:58:fb:85:c2:d6:
e9:57:eb:66:2e:db:88:67:7e:c2:1d:b0:55:0c:80:0d:3d:dc:
0b:d1:d3:96:b3:db:b2:55:bc:db:a6:8d:a0:59:65:3a:d8:de:
b3:c0:4a:26:a6:d2:87:dc:64:6c:a5:fd:5f:7e:c2:40:aa:b1:
64:b2:40:26:1b:66:22:12:6e:22:dc:a1:0d:c1:3a:c6:b0:4a:
bb:98:74:04:94:19:67:37:ea:48:bd:a4:f3:7b:2d:90:e7:a0:
e2:2f:9e:12:05:e4:0c:c1:f5:bb:38:53:77:b6:24:48:22:2c:
38:89:9c:57:8d:ab:59:3e:ad:98:9c:b5:f1:d5:27:3a:9f:b8:
61:94:0f:df:1a:19:a4:d0:ac:b9:bc:9e:77:3c:fc:6b:a5:8b:
c5:f2:6c:51:e1:81:b0:61:14:7e:53:2b:c0:cc:31:60:b6:b7:
28:fc:d3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:20 2025 by rpki-client