Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e39392e33322e302f31392d3139203d3e2035363530.roa
File: 3137322e39392e33322e302f31392d3139203d3e2035363530.roa (raw, json)
Hash identifier: R3brfbqKVmXJYyTeADz0UtuWHCOz3A3xHlrKOMK5XVE=
Subject key identifier: A2:05:B5:EC:19:26:E9:CD:B1:33:34:D6:9A:83:67:C3:84:A3:76:16
Certificate issuer: /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial: 7F061393D0F4BD22CF0CB63738E16F992C8ECE0A
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e39392e33322e302f31392d3139203d3e2035363530.roa
Signing time: Wed 20 Mar 2024 04:12:57 +0000
ROA not before: Wed 20 Mar 2024 04:07:57 +0000
ROA not after: Wed 19 Mar 2025 04:12:57 +0000
asID: 5650
IP address blocks: 172.99.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:06:13:93:d0:f4:bd:22:cf:0c:b6:37:38:e1:6f:99:2c:8e:ce:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Validity
Not Before: Mar 20 04:07:57 2024 GMT
Not After : Mar 19 04:12:57 2025 GMT
Subject: CN=A205B5EC1926E9CDB13334D69A8367C384A37616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:1e:c5:dc:67:80:4b:49:16:1f:1d:20:f5:
0e:01:76:c6:c4:e7:10:04:a4:5c:d0:6e:49:d2:ce:
a9:84:40:96:ee:90:8c:ad:a9:3e:61:91:24:e8:60:
84:4b:3c:b9:9c:8e:85:a4:3f:a7:0c:07:91:48:e1:
4e:52:6a:a3:2c:65:1b:e0:7e:9e:4c:8b:f5:db:01:
25:b3:f6:3d:5f:6a:94:67:89:d9:72:30:a1:df:8f:
ca:a7:3d:85:d1:e0:d0:3d:29:c3:47:40:96:19:fd:
27:34:e0:00:ff:87:78:28:77:d6:f0:5a:3e:32:2b:
40:3b:16:48:3b:54:a1:0a:bb:1f:ff:58:65:0b:46:
50:82:e3:bb:ca:ef:63:5a:84:aa:62:43:58:38:4e:
d7:a0:f3:05:15:65:c2:1c:ef:26:ef:84:5e:6f:ba:
37:17:77:2c:2b:ff:bf:19:99:9e:bc:af:d4:ca:a5:
6b:79:ea:f0:7e:64:65:a9:e2:60:fe:bf:10:2a:a1:
1d:21:0c:11:9a:9a:b5:e6:a1:83:4c:99:e6:63:9f:
03:ac:8f:fc:b9:fe:4c:22:cd:3b:e0:1d:be:89:80:
49:c9:78:ae:07:da:8d:ce:59:bf:e9:e9:5d:ef:c3:
3b:0b:72:39:81:7d:d4:ba:8a:b9:9a:2c:e3:e5:e5:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:05:B5:EC:19:26:E9:CD:B1:33:34:D6:9A:83:67:C3:84:A3:76:16
X509v3 Authority Key Identifier:
keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e39392e33322e302f31392d3139203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.99.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:73:8a:18:29:f8:bd:40:f7:17:05:c5:50:8f:45:75:df:6d:
f8:c4:fc:2b:6d:30:6a:1f:b3:c1:76:47:68:d3:4d:8b:7f:14:
1f:3c:a3:c4:4d:b2:22:09:c2:36:50:85:54:56:d6:96:0a:77:
d8:74:a2:4d:7a:6b:88:07:63:2b:fd:f8:ae:23:91:81:bc:bd:
b0:e2:e3:9d:b3:72:ae:3e:eb:fb:36:d8:8b:59:c2:05:46:1a:
49:ad:9d:34:d3:35:ec:95:df:08:22:29:32:cf:b9:48:69:75:
aa:b6:09:46:f8:cc:ac:c6:1a:d2:ac:fd:f7:21:93:9e:a5:8a:
ea:af:da:19:52:2b:ec:ac:ae:92:8a:1b:17:5b:df:0e:56:91:
6d:34:06:6e:83:4c:ad:db:74:0c:be:7f:37:48:64:4c:51:f3:
b9:47:de:92:36:7a:64:28:8a:fe:a5:34:78:7d:33:56:34:14:
e8:32:73:14:2a:d6:a7:48:c3:61:bc:d7:5a:94:d7:24:14:cf:
39:f7:e2:9a:33:97:d3:ac:58:66:ae:f6:9f:e2:9e:b5:57:12:
9f:f2:de:f1:04:5e:46:ba:7f:26:db:25:25:d3:ce:6a:43:71:
2c:39:bb:c4:91:3c:7f:85:80:1f:3f:54:ba:24:59:c6:76:ac:
6e:37:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:37:11 2025 by rpki-client