Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139322e302e302f31362d3136203d3e2035363530.roa
File: 34372e3139322e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier: bq8SWinqO1LqAW9vi3JphEa7sNZt0MM4YGbVgPOnEeM=
Subject key identifier: 76:BA:24:23:38:CA:33:D9:AE:27:52:0E:0D:D6:41:7B:43:02:75:4C
Certificate issuer: /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial: 5A25BDFD17595C9F8D0087179B8E5C2356F4E005
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139322e302e302f31362d3136203d3e2035363530.roa
Signing time: Tue 26 Mar 2024 04:18:42 +0000
ROA not before: Tue 26 Mar 2024 04:13:42 +0000
ROA not after: Tue 25 Mar 2025 04:18:42 +0000
asID: 5650
IP address blocks: 47.192.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:25:bd:fd:17:59:5c:9f:8d:00:87:17:9b:8e:5c:23:56:f4:e0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Validity
Not Before: Mar 26 04:13:42 2024 GMT
Not After : Mar 25 04:18:42 2025 GMT
Subject: CN=76BA242338CA33D9AE27520E0DD6417B4302754C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:0e:8f:e0:7b:11:ef:38:04:e0:2d:54:2f:
28:24:73:2c:de:03:d7:f5:26:18:83:e0:e0:bc:f1:
80:8a:6f:7c:c2:89:2c:cb:81:ea:14:3c:ee:da:6a:
51:37:9b:09:ec:b3:4b:5c:96:9a:a3:42:d9:af:41:
11:69:10:41:12:a7:6d:03:55:34:10:28:49:99:30:
47:23:c7:f3:b1:02:c5:1e:64:02:0f:7d:d7:0a:0a:
95:a5:e4:7a:8f:c5:f7:77:3c:e3:af:10:07:37:17:
80:c9:17:87:a6:c2:df:d5:96:23:a2:0d:c8:26:57:
38:4f:ed:05:6b:bb:d0:56:e7:95:8e:80:fe:d2:b6:
e8:6f:83:eb:97:56:fe:a9:d2:08:50:37:3f:08:49:
69:e9:6d:e8:6f:95:9f:95:c3:d3:55:71:5a:0f:a7:
86:37:de:e9:f2:30:1d:8f:55:3a:80:31:72:6c:75:
39:a9:02:c8:65:e0:b5:23:dd:8d:57:8a:79:64:87:
14:9d:f5:76:42:83:b7:40:e6:80:e1:ad:93:42:b2:
57:af:0c:0d:4a:f9:0d:01:27:7e:78:2e:1e:df:0d:
19:f0:fd:a7:32:ce:5f:3a:13:0c:e3:c4:a2:b3:87:
5a:e7:b0:fd:0d:ce:a1:e3:7d:ae:25:ec:bc:03:e0:
cb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BA:24:23:38:CA:33:D9:AE:27:52:0E:0D:D6:41:7B:43:02:75:4C
X509v3 Authority Key Identifier:
keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139322e302e302f31362d3136203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:a5:e6:93:87:25:cf:d1:0b:99:22:1f:81:bd:fe:a4:c0:78:
df:e8:3c:4b:98:41:40:a5:2c:55:52:bd:b5:48:09:0e:bf:84:
fc:7e:58:63:70:30:8e:8f:a2:77:d0:c9:86:b8:25:a3:22:9d:
6e:1b:26:78:6b:92:2a:69:81:11:bc:06:fa:e1:36:38:0c:36:
dc:04:51:f0:f1:57:d4:5d:02:e5:6c:3e:d4:7e:63:77:e4:a3:
40:24:90:20:d1:a3:0f:92:96:d1:44:4e:2d:8c:16:de:06:35:
9e:26:88:02:9a:84:e1:60:8b:4a:5e:2a:8b:9b:73:98:d1:97:
55:c3:34:e1:06:34:bc:1f:a9:ca:59:9e:5d:32:cb:94:89:43:
f5:f5:2c:d5:b5:2f:29:3a:82:ab:90:94:f8:d9:e7:91:f1:94:
50:cd:c4:47:9e:2c:d2:e8:f0:92:7a:1f:30:92:2f:c6:c7:f3:
fd:4a:30:b5:78:7a:44:f5:c3:1e:f5:ab:93:da:88:15:4b:d2:
4a:0d:ce:e4:d3:f9:de:5b:d0:de:f9:92:da:8e:ce:b9:c6:83:
85:a3:4d:58:4f:11:67:d0:06:3f:39:bd:e2:04:1b:94:6a:2d:
30:15:e7:ab:fb:98:72:02:fd:d6:82:c1:34:60:24:f4:c0:3a:
58:b2:98:8a
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIUWiW9/RdZXJ+NAIcXm45cI1b04AUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx
N2I3MjY5NjIwM2RjODNhOTAwHhcNMjQwMzI2MDQxMzQyWhcNMjUwMzI1MDQxODQy
WjAzMTEwLwYDVQQDEyg3NkJBMjQyMzM4Q0EzM0Q5QUUyNzUyMEUwREQ2NDE3QjQz
MDI3NTRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrQOj+B7Ee84
BOAtVC8oJHMs3gPX9SYYg+DgvPGAim98woksy4HqFDzu2mpRN5sJ7LNLXJaao0LZ
r0ERaRBBEqdtA1U0EChJmTBHI8fzsQLFHmQCD33XCgqVpeR6j8X3dzzjrxAHNxeA
yReHpsLf1ZYjog3IJlc4T+0Fa7vQVueVjoD+0rbob4Prl1b+qdIIUDc/CElp6W3o
b5WflcPTVXFaD6eGN97p8jAdj1U6gDFybHU5qQLIZeC1I92NV4p5ZIcUnfV2QoO3
QOaA4a2TQrJXrwwNSvkNASd+eC4e3w0Z8P2nMs5fOhMM48Sis4da57D9Dc6h432u
Jey8A+DLdQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHa6JCM4yjPZridSDg3WQXtD
AnVMMB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv
ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw
MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzAvMzQzNzJlMzEzOTMyMmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAL8AwDQYJKoZIhvcNAQELBQADggEBAAyl
5pOHJc/RC5kiH4G9/qTAeN/oPEuYQUClLFVSvbVICQ6/hPx+WGNwMI6PonfQyYa4
JaMinW4bJnhrkippgRG8BvrhNjgMNtwEUfDxV9RdAuVsPtR+Y3fko0AkkCDRow+S
ltFETi2MFt4GNZ4miAKahOFgi0peKoubc5jRl1XDNOEGNLwfqcpZnl0yy5SJQ/X1
LNW1Lyk6gquQlPjZ55HxlFDNxEeeLNLo8JJ6HzCSL8bH8/1KMLV4ekT1wx71q5Pa
iBVL0koNzuTT+d5b0N75ktqOzrnGg4WjTVhPEWfQBj85veIEG5RqLTAV56v7mHIC
/daCwTRgJPTAOliymIo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:05 2025 by rpki-client