Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20343030393538.roa
File: 3139392e39312e3130302e302f32342d3234203d3e20343030393538.roa (raw, json)
Hash identifier: +VOIA4b0uUKLNhYhFo7Uh5gwBwGquh/Xv/3aRJZG984=
Subject key identifier: B3:A4:73:6E:4A:FE:6B:9B:1E:DF:19:99:BA:9F:41:66:B1:66:CA:AC
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 79DC97E9D215B5A8584ECD61E39EA7F38483EB00
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20343030393538.roa
Signing time: Fri 29 Nov 2024 16:00:26 +0000
ROA not before: Fri 29 Nov 2024 15:55:26 +0000
ROA not after: Fri 28 Nov 2025 16:00:26 +0000
asID: 400958
IP address blocks: 199.91.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:dc:97:e9:d2:15:b5:a8:58:4e:cd:61:e3:9e:a7:f3:84:83:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Nov 29 15:55:26 2024 GMT
Not After : Nov 28 16:00:26 2025 GMT
Subject: CN=B3A4736E4AFE6B9B1EDF1999BA9F4166B166CAAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:09:5a:58:d0:41:aa:d1:82:52:9f:84:b9:37:
37:92:50:d9:13:03:a8:8e:fc:94:cf:ab:f3:76:31:
b6:5a:fb:5e:fc:37:05:b5:b6:72:c2:ad:f5:02:a0:
01:43:00:bb:35:9a:64:83:1e:fb:75:43:58:73:34:
10:47:d6:24:bf:21:7b:88:a9:be:76:22:f5:0a:44:
94:52:e3:39:c3:9b:77:3a:6e:06:15:c2:0d:c3:bf:
a5:f0:d7:bd:28:34:b1:ab:cb:05:a2:c2:b5:4e:42:
69:da:06:ed:cb:23:c4:2b:f4:d0:26:69:f5:b3:91:
a3:b2:3a:81:17:23:1e:8d:d6:ca:e5:d1:41:66:73:
d1:fe:53:5a:e7:83:de:9d:bf:94:93:0a:f2:43:24:
1b:77:a2:f7:f0:07:1a:6b:b6:4a:00:1d:cb:c7:20:
9a:f3:b7:61:3d:8b:18:2e:f1:ae:bb:d9:f5:f6:c8:
07:71:f8:52:92:d4:69:df:2a:c3:4c:07:d7:26:94:
51:1b:62:81:df:22:32:ea:0e:b0:44:ac:f8:5a:2e:
d7:65:c3:a2:0d:ae:ba:19:a2:31:8e:7b:0d:a3:7d:
ac:5f:1f:d6:fc:ca:58:f4:be:29:4a:a9:08:ab:4d:
f5:0b:25:01:a5:2d:c4:37:b2:b0:34:6d:86:ac:79:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A4:73:6E:4A:FE:6B:9B:1E:DF:19:99:BA:9F:41:66:B1:66:CA:AC
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20343030393538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.100.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ac:1d:ed:b2:cf:d0:6e:00:fd:51:50:19:97:cd:03:f2:6b:
9b:d1:7b:3a:98:24:34:0e:23:f9:69:92:bb:f6:f3:93:64:ea:
16:92:3a:51:3f:0b:4e:dc:8d:5a:42:cc:cf:17:c0:8d:b8:79:
14:9a:03:5e:c5:47:f1:54:82:c6:59:cb:b2:96:36:3e:05:6e:
52:c8:f9:d6:bf:49:13:bf:8d:96:fe:dc:c9:17:7d:4b:87:d5:
37:41:a1:56:ca:d7:67:73:86:27:c1:30:52:0d:9d:97:f7:5b:
21:59:2b:21:4f:56:8e:88:f5:d4:99:17:26:b9:34:80:56:fc:
5c:b9:f5:01:d0:21:3c:e0:ac:c0:74:c3:d1:64:64:76:53:97:
95:95:fe:a5:bb:c4:a7:7b:25:5d:8a:af:01:a8:96:17:cf:ae:
11:3b:c5:f1:10:ba:02:31:da:50:08:67:e6:c9:d2:5d:37:38:
d0:b2:0c:e8:fd:b3:f5:c4:1b:53:3f:fb:0f:75:a8:0c:69:a2:
0b:20:46:52:7a:09:c2:50:68:ec:ba:d4:80:d4:f7:25:c1:c4:
3a:fd:18:d5:9f:9a:b2:e8:2d:fe:b6:20:ac:44:e0:f8:74:39:
e9:73:56:29:4e:75:40:e6:7a:ae:05:86:8b:74:6b:ca:f9:95:
a7:04:e6:bf
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUedyX6dIVtahYTs1h456n84SD6wAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjQxMTI5MTU1NTI2WhcNMjUxMTI4MTYwMDI2
WjAzMTEwLwYDVQQDEyhCM0E0NzM2RTRBRkU2QjlCMUVERjE5OTlCQTlGNDE2NkIx
NjZDQUFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7glaWNBBqtGC
Up+EuTc3klDZEwOojvyUz6vzdjG2Wvte/DcFtbZywq31AqABQwC7NZpkgx77dUNY
czQQR9YkvyF7iKm+diL1CkSUUuM5w5t3Om4GFcINw7+l8Ne9KDSxq8sFosK1TkJp
2gbtyyPEK/TQJmn1s5GjsjqBFyMejdbK5dFBZnPR/lNa54Penb+UkwryQyQbd6L3
8Acaa7ZKAB3LxyCa87dhPYsYLvGuu9n19sgHcfhSktRp3yrDTAfXJpRRG2KB3yIy
6g6wRKz4Wi7XZcOiDa66GaIxjnsNo32sXx/W/MpY9L4pSqkIq031CyUBpS3EN7Kw
NG2GrHmp3QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFLOkc25K/mubHt8ZmbqfQWax
ZsqsMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTI3
MDRkNWYzMzJlYi8wLzMxMzkzOTJlMzkzMTJlMzEzMDMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMDMwMzkzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1tkMA0GCSqGSIb3DQEB
CwUAA4IBAQCFrB3tss/QbgD9UVAZl80D8mub0Xs6mCQ0DiP5aZK79vOTZOoWkjpR
PwtO3I1aQszPF8CNuHkUmgNexUfxVILGWcuyljY+BW5SyPnWv0kTv42W/tzJF31L
h9U3QaFWytdnc4YnwTBSDZ2X91shWSshT1aOiPXUmRcmuTSAVvxcufUB0CE84KzA
dMPRZGR2U5eVlf6lu8SneyVdiq8BqJYXz64RO8XxELoCMdpQCGfmydJdNzjQsgzo
/bP1xBtTP/sPdagMaaILIEZSegnCUGjsutSA1PclwcQ6/RjVn5qy6C3+tiCsROD4
dDnpc1YpTnVA5nquBYaLdGvK+ZWnBOa/
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:41:32 2025 by rpki-client