Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e302e302f31372d3137203d3e2035363530.roa
File: 34372e3139332e302e302f31372d3137203d3e2035363530.roa (raw, json)
Hash identifier: S7OYLoAxYXkl+0by07oIOHVDeoZ8LccKfeAs4QtNrZY=
Subject key identifier: D6:5B:C1:47:60:E5:E5:BA:88:93:A4:F0:77:A4:55:7F:8D:89:DD:DA
Certificate issuer: /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial: 635257B7FB17572FA7E0BC2F4268FCB1C72EE955
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e302e302f31372d3137203d3e2035363530.roa
Signing time: Tue 26 Mar 2024 04:12:25 +0000
ROA not before: Tue 26 Mar 2024 04:07:25 +0000
ROA not after: Tue 25 Mar 2025 04:12:25 +0000
asID: 5650
IP address blocks: 47.193.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:52:57:b7:fb:17:57:2f:a7:e0:bc:2f:42:68:fc:b1:c7:2e:e9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Validity
Not Before: Mar 26 04:07:25 2024 GMT
Not After : Mar 25 04:12:25 2025 GMT
Subject: CN=D65BC14760E5E5BA8893A4F077A4557F8D89DDDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:69:b0:91:d5:6b:33:f0:66:81:05:57:a9:
4b:7f:cd:44:e6:d7:37:b1:1c:0d:f5:05:9e:f0:36:
a3:b1:4b:fa:03:ca:96:e1:b2:52:5d:f9:aa:77:f8:
91:d5:22:03:c2:99:ae:ff:a9:a9:78:ee:2a:b3:c8:
cd:ad:cc:71:c4:8c:ff:03:d0:eb:4f:da:bb:fa:d3:
a4:4e:fa:34:46:9a:78:e7:2b:9a:41:f2:7c:0e:1b:
7d:df:7d:44:e3:19:d1:cf:3c:1f:8b:0c:63:62:a1:
57:f8:1e:61:ce:81:b1:0e:6a:d4:49:4a:5b:10:78:
19:30:e7:2b:06:dc:0a:01:89:0e:22:38:71:6a:90:
86:b8:63:a9:7e:89:4d:70:ba:dc:9c:82:f3:7c:6e:
a5:71:28:a8:01:ba:14:fb:f2:09:c3:9d:0a:ea:dc:
a6:39:fa:42:dd:8c:04:fa:95:bd:c6:02:66:27:2c:
cd:4f:be:cc:7b:e5:fd:dc:27:23:6b:8b:a8:2b:ed:
26:2d:47:34:2c:54:d4:22:9f:1b:c4:4d:34:df:02:
f5:10:1f:82:1b:a6:9d:be:49:b9:2d:f9:21:bc:70:
fa:28:df:f4:2d:7b:af:7f:87:df:37:3b:6f:ff:87:
64:df:f2:b6:a6:6b:90:e3:b9:6c:96:b4:c8:59:60:
b1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5B:C1:47:60:E5:E5:BA:88:93:A4:F0:77:A4:55:7F:8D:89:DD:DA
X509v3 Authority Key Identifier:
keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e302e302f31372d3137203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.193.0.0/17
Signature Algorithm: sha256WithRSAEncryption
44:68:90:ae:48:fc:9f:35:62:1a:21:23:50:2a:8c:ea:2f:2f:
80:05:3a:20:5b:bf:2b:64:26:a3:ef:d6:70:a2:c9:99:16:89:
e0:4e:95:f8:b4:e8:e1:c3:66:52:13:32:2e:1e:a2:e7:6c:dc:
3c:77:35:37:34:8c:51:31:d0:82:ad:c0:2a:70:6c:79:6c:aa:
ab:70:23:24:08:db:cc:2f:d4:20:a0:59:16:47:82:f9:51:d2:
72:a0:75:3b:ef:95:10:63:00:c2:97:d2:f3:29:0f:69:5f:db:
8e:16:1f:bf:d4:c9:ea:e7:67:da:37:a9:9d:5f:2f:97:da:e4:
d5:a5:3b:cf:ed:4a:66:df:52:37:de:b5:93:6b:93:80:e0:2c:
75:a7:cb:33:4c:4a:c5:4a:4a:fc:ab:1d:00:55:cd:2f:00:0b:
35:32:83:16:2d:65:d0:c6:6e:4b:c8:75:11:81:c8:d0:c4:3c:
2d:ee:4d:e7:3c:5a:fe:d7:53:df:ed:cc:9e:7e:77:06:a9:a6:
3f:3f:c5:6f:2f:4c:d1:68:8c:f8:01:27:ae:6a:d8:69:24:28:
b0:5e:b8:82:44:76:f0:79:49:5c:35:f5:f0:13:f2:88:8c:f0:
ee:6d:79:53:ed:51:c5:2c:a0:4b:8c:99:0c:23:59:b5:62:85:
41:ba:e2:d8
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUY1JXt/sXVy+n4LwvQmj8sccu6VUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx
N2I3MjY5NjIwM2RjODNhOTAwHhcNMjQwMzI2MDQwNzI1WhcNMjUwMzI1MDQxMjI1
WjAzMTEwLwYDVQQDEyhENjVCQzE0NzYwRTVFNUJBODg5M0E0RjA3N0E0NTU3RjhE
ODlERERBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgppsJHVazPw
ZoEFV6lLf81E5tc3sRwN9QWe8DajsUv6A8qW4bJSXfmqd/iR1SIDwpmu/6mpeO4q
s8jNrcxxxIz/A9DrT9q7+tOkTvo0Rpp45yuaQfJ8Dht9331E4xnRzzwfiwxjYqFX
+B5hzoGxDmrUSUpbEHgZMOcrBtwKAYkOIjhxapCGuGOpfolNcLrcnILzfG6lcSio
AboU+/IJw50K6tymOfpC3YwE+pW9xgJmJyzNT77Me+X93Ccja4uoK+0mLUc0LFTU
Ip8bxE003wL1EB+CG6advkm5LfkhvHD6KN/0LXuvf4ffNztv/4dk3/K2pmuQ47ls
lrTIWWCxkwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFNZbwUdg5eW6iJOk8HekVX+N
id3aMB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv
ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw
MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzAvMzQzNzJlMzEzOTMzMmUzMDJlMzAyZjMxMzcyZDMxMzcyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHL8EAMA0GCSqGSIb3DQEBCwUAA4IBAQBE
aJCuSPyfNWIaISNQKozqLy+ABTogW78rZCaj79ZwosmZFongTpX4tOjhw2ZSEzIu
HqLnbNw8dzU3NIxRMdCCrcAqcGx5bKqrcCMkCNvML9QgoFkWR4L5UdJyoHU775UQ
YwDCl9LzKQ9pX9uOFh+/1Mnq52faN6mdXy+X2uTVpTvP7Upm31I33rWTa5OA4Cx1
p8szTErFSkr8qx0AVc0vAAs1MoMWLWXQxm5LyHURgcjQxDwt7k3nPFr+11Pf7cye
fncGqaY/P8VvL0zRaIz4ASeuathpJCiwXriCRHbweUlcNfXwE/KIjPDubXlT7VHF
LKBLjJkMI1m1YoVBuuLY
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:46 2025 by rpki-client