Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e20333933353036.roa
File: 3139392e3230342e3136332e302f32342d3234203d3e20333933353036.roa (raw, json)
Hash identifier: RE3Nnx686+kXANo7HWgfJRDtLfCjdNFNKVA63xJ+7mg=
Subject key identifier: CF:06:FE:5F:BA:D1:A2:93:A0:AB:B3:BF:B3:D3:15:66:04:3E:98:EA
Certificate issuer: /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial: 3C4EAB40C0BA1FB459C4CD2F8F190A2E3482E085
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e20333933353036.roa
Signing time: Fri 03 Jan 2025 01:28:23 +0000
ROA not before: Fri 03 Jan 2025 01:23:23 +0000
ROA not after: Fri 02 Jan 2026 01:28:23 +0000
asID: 393506
IP address blocks: 199.204.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:4e:ab:40:c0:ba:1f:b4:59:c4:cd:2f:8f:19:0a:2e:34:82:e0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Validity
Not Before: Jan 3 01:23:23 2025 GMT
Not After : Jan 2 01:28:23 2026 GMT
Subject: CN=CF06FE5FBAD1A293A0ABB3BFB3D31566043E98EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:01:d3:15:af:07:91:ab:86:7f:50:14:d9:b1:
32:c2:8e:1f:66:2f:89:36:4a:2d:49:dc:ce:0b:e2:
ee:b4:fa:49:68:cb:27:f9:8b:42:7c:79:fb:48:56:
79:e0:0d:5f:fd:bd:75:f7:ed:19:c0:c1:61:14:e4:
22:52:01:cc:41:62:25:a2:82:6d:69:28:0d:27:dc:
f2:3a:1a:17:cc:71:4c:e4:24:0c:7c:ba:cc:ad:aa:
8c:5a:07:cd:21:e0:65:ef:f8:23:36:83:c5:c1:9b:
ba:10:f3:23:64:d0:f8:70:37:4d:c3:aa:b4:ca:d4:
db:3b:47:0c:9e:a8:36:05:59:72:55:2a:fc:eb:c6:
47:7f:b4:98:8f:35:f7:76:81:fe:2c:d7:6e:f7:5a:
11:45:a4:80:02:c9:22:8b:be:13:a1:79:b5:24:16:
36:e0:5d:21:56:b1:e8:95:17:f8:39:96:7b:c2:35:
c3:1c:0e:f1:74:32:b8:84:d8:ce:6c:9d:20:1b:5f:
62:0c:0a:71:66:52:b5:a3:88:4d:8b:2a:74:a0:84:
f2:89:a0:61:38:9b:72:19:6c:f3:aa:f3:14:54:33:
95:86:55:c8:76:9a:15:8c:8c:2f:cf:73:0b:01:16:
4d:4d:10:54:49:2a:4f:f8:5c:1d:a0:07:38:12:b5:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:06:FE:5F:BA:D1:A2:93:A0:AB:B3:BF:B3:D3:15:66:04:3E:98:EA
X509v3 Authority Key Identifier:
keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e20333933353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.204.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7c:10:bd:a7:b2:81:f3:ed:f3:71:e0:5f:fa:74:ba:4a:d4:
a9:fe:4e:07:ba:75:5e:63:8b:78:ea:b6:e8:b6:47:28:10:0a:
c6:12:42:b0:3d:ba:2b:e3:9f:ac:c9:1c:a8:51:40:77:e9:d8:
80:e4:15:01:f0:a6:5d:bb:b4:6a:46:69:1f:51:6d:45:59:cb:
1b:46:2a:bb:71:ed:b9:44:e6:2f:1a:24:b6:11:b2:19:8d:98:
af:41:05:37:97:53:db:6d:cf:fb:c6:b0:93:20:30:35:12:67:
2e:df:83:c8:ac:26:98:00:c9:e0:80:ef:c3:57:96:70:3f:f0:
2b:41:01:3b:f0:42:1f:02:af:95:61:e2:dc:4d:9a:96:cd:34:
98:b3:08:6c:d2:72:9a:0e:a8:02:26:d1:e9:60:29:6f:0d:3b:
ac:b8:8c:6b:34:2b:67:f9:e0:a1:2f:4c:25:62:55:be:55:b2:
b9:8c:1d:22:c8:66:37:96:4e:d0:36:44:95:71:be:0a:ab:01:
36:ee:52:17:85:5a:e1:3d:6b:16:d7:39:f5:d7:18:79:59:d7:
30:a8:3f:b7:99:29:51:f9:4a:d2:bf:01:fb:1f:ca:5a:65:59:
04:22:cf:05:5e:85:19:53:d3:4c:fe:a2:7a:23:6f:3b:ae:f7:
d7:98:83:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:30:02 2025 by rpki-client