Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa
File: 3137322e38322e39312e302f32342d3234203d3e20323132333936.roa (raw, json)
Hash identifier: rNg7Xn8oMe9e4TSR87RGUOWX1p4MZoFS+KVTkm3vQzw=
Subject key identifier: DF:47:B8:43:65:22:2B:2B:44:75:D0:97:F6:BA:08:D4:2B:10:18:37
Certificate issuer: /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial: 0E950C5DEF242F25ED5D18577101CE2E10CD2EAA
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa
Signing time: Wed 12 Jun 2024 20:09:08 +0000
ROA not before: Wed 12 Jun 2024 20:04:08 +0000
ROA not after: Wed 11 Jun 2025 20:09:08 +0000
asID: 212396
IP address blocks: 172.82.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:95:0c:5d:ef:24:2f:25:ed:5d:18:57:71:01:ce:2e:10:cd:2e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Validity
Not Before: Jun 12 20:04:08 2024 GMT
Not After : Jun 11 20:09:08 2025 GMT
Subject: CN=DF47B84365222B2B4475D097F6BA08D42B101837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b3:db:45:8b:f5:14:80:83:d9:75:6b:16:ab:
f4:cf:55:78:ca:9c:ac:fd:03:5d:24:e8:72:25:4e:
78:5b:a0:aa:ff:70:8d:f6:f4:2f:4a:08:cd:cc:68:
79:0d:6e:3b:3e:3a:7b:1f:05:86:5d:09:b9:db:41:
80:c6:07:6b:63:76:e9:12:53:d4:ba:0b:0e:f5:ca:
a2:67:f4:65:20:43:3d:9a:b2:19:00:1a:ac:12:63:
28:9f:49:6b:df:22:01:a1:38:77:1a:01:5b:85:70:
33:cd:a4:ae:e0:83:08:0e:a1:01:1e:e9:c7:ae:49:
5e:1e:9a:cb:13:e9:d2:63:e3:96:f6:67:e2:ca:c1:
37:4c:c9:ce:2c:3f:f5:87:fa:e5:38:94:d0:5e:cb:
3c:2d:0a:5f:17:ca:e2:b2:24:a3:27:18:43:63:94:
dc:28:34:b7:d5:d6:da:68:49:f6:9f:5b:d8:93:29:
a2:27:7e:2a:63:0c:af:0c:f8:6f:70:19:4a:33:4b:
9a:1d:cd:38:ac:de:9e:cd:dc:8d:a9:29:be:18:f0:
3c:35:0c:90:41:c6:30:f2:d1:41:c8:1f:cf:5e:05:
e3:31:89:92:10:1f:06:42:18:19:39:24:83:8f:62:
89:d3:39:3f:ee:01:dd:a9:1a:a2:3f:6a:8b:b2:18:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:47:B8:43:65:22:2B:2B:44:75:D0:97:F6:BA:08:D4:2B:10:18:37
X509v3 Authority Key Identifier:
keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.82.91.0/24
Signature Algorithm: sha256WithRSAEncryption
64:68:51:4e:9a:92:3e:70:3e:b2:2e:b9:b8:2e:e4:a6:84:da:
09:81:30:bb:75:ea:0b:7f:4a:de:5f:84:96:61:c8:46:e3:a2:
79:cf:d8:82:65:69:7f:b1:6a:f4:2e:9d:66:98:cf:e5:4e:85:
f6:ed:cd:14:e3:29:40:1a:a1:e7:3d:86:a1:27:b8:87:37:2e:
b5:f5:76:1d:6f:5a:20:98:b2:13:44:e1:ca:46:b4:35:6a:e0:
3b:20:db:ea:f2:ae:a1:99:5d:1e:d3:7e:0d:2f:ab:eb:ea:be:
8b:ad:2d:27:ce:80:cd:87:d2:27:ad:c4:d0:18:1d:ac:c1:89:
1b:bf:af:41:db:c5:e3:1b:2e:e0:1b:3e:46:a5:28:f0:a5:fb:
59:e3:5c:56:65:33:c9:dd:1c:9e:10:7d:8f:0f:b0:07:e3:c7:
71:a9:05:19:37:55:1d:bb:aa:5e:1a:d7:3f:74:0a:a5:fe:82:
16:7f:12:ef:52:fb:0f:eb:20:ff:ae:35:ff:23:b7:14:77:e7:
be:8f:c7:69:aa:53:6b:81:67:49:41:b2:bf:cf:0e:0a:54:fd:
a3:86:f4:ae:3f:07:0f:0c:89:bb:be:81:e0:6d:f8:cd:95:c9:
35:79:d1:e4:b0:52:09:3e:fd:36:63:b3:29:af:8f:c6:b3:c8:
d7:3e:b5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:10 2025 by rpki-client