Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/3136322e3231312e3234382e302f32342d3234203d3e203131373735.roa
File: 3136322e3231312e3234382e302f32342d3234203d3e203131373735.roa (raw, json)
Hash identifier: f6/KLkhjAkexgm9QSYNhL4HMIMcxJWfxRUJSo31jZQo=
Subject key identifier: D5:CB:DF:4D:EE:CB:FA:05:6A:ED:44:4C:C9:30:9E:21:73:A6:71:4B
Certificate issuer: /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial: 1414948D195C92B3277A374CD8E376AF5543C1D8
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/3136322e3231312e3234382e302f32342d3234203d3e203131373735.roa
Signing time: Mon 06 Jan 2025 16:32:07 +0000
ROA not before: Mon 06 Jan 2025 16:27:07 +0000
ROA not after: Mon 05 Jan 2026 16:32:07 +0000
asID: 11775
IP address blocks: 162.211.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:14:94:8d:19:5c:92:b3:27:7a:37:4c:d8:e3:76:af:55:43:c1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Validity
Not Before: Jan 6 16:27:07 2025 GMT
Not After : Jan 5 16:32:07 2026 GMT
Subject: CN=D5CBDF4DEECBFA056AED444CC9309E2173A6714B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:dd:95:7a:50:32:dc:11:26:bd:91:da:c9:
3f:5c:d3:66:2c:13:7c:a3:c1:c7:ad:48:5e:02:d0:
35:24:ee:44:5d:4c:8e:2f:e5:99:b9:e2:20:fd:c0:
d0:f9:b8:33:27:af:a8:91:51:8d:3f:d8:d8:58:c3:
d4:82:78:e6:7d:33:15:67:85:a5:f4:ac:c8:e2:8c:
62:44:27:24:dd:8f:73:12:c2:7e:ab:0d:e1:09:34:
33:21:ab:8f:93:04:10:b1:c7:88:ea:12:af:d1:bb:
26:38:af:c7:8e:04:91:1a:79:06:61:8c:06:fd:38:
b8:a0:88:52:39:2b:e9:6b:3f:16:6e:3a:a3:b8:44:
16:5d:1c:5e:6f:02:b8:d0:ee:fe:b3:6f:08:b6:a2:
1f:9d:11:e1:a0:29:60:08:c7:fc:74:41:14:8b:a2:
a0:bb:84:1f:a6:9f:cf:47:48:35:cc:e5:73:d8:81:
0f:0e:d3:0e:b2:5f:43:c4:e0:7d:0c:a2:c6:95:8b:
31:e8:37:24:28:19:71:08:7d:66:5d:51:7c:32:3a:
ee:6f:f2:37:97:cb:29:37:8b:a4:d8:84:fd:9e:ed:
11:c5:ab:5c:3b:2c:55:00:25:ce:fe:bf:c0:ce:ac:
69:71:74:b5:ef:17:ed:80:95:6f:89:a9:dd:be:56:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CB:DF:4D:EE:CB:FA:05:6A:ED:44:4C:C9:30:9E:21:73:A6:71:4B
X509v3 Authority Key Identifier:
keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/3136322e3231312e3234382e302f32342d3234203d3e203131373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.211.248.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:c5:cb:28:8c:72:59:38:64:73:5f:c4:bb:6c:ec:de:f0:6c:
8b:87:4c:4d:e0:8b:d4:8a:96:5e:54:7c:a4:bd:b8:26:4e:82:
d0:db:bd:85:36:2b:9b:29:5e:5f:e4:25:c8:ed:6f:a8:78:52:
af:51:aa:a2:e4:6c:c5:85:ec:21:b0:de:92:96:4a:da:c3:49:
c8:d7:42:35:1b:e9:82:c0:cb:17:e8:5a:b4:c4:35:a2:df:ee:
e2:59:5a:67:2f:f8:a9:df:2d:f9:cc:29:bc:a8:8d:ea:df:c9:
b7:6d:cb:96:6b:bd:08:d5:93:68:ad:80:b1:e4:2a:43:f6:8e:
e0:60:70:cb:34:9d:d1:0e:68:f0:8e:d6:4e:aa:4f:97:e3:b9:
5c:ff:74:bb:da:7d:f0:90:8d:89:15:7d:72:fa:90:74:4b:77:
00:4b:ea:42:b6:05:4f:a9:23:6b:ed:e3:53:d9:74:be:6c:5c:
24:a5:ca:8e:02:91:7b:e4:cd:02:01:e5:bd:1b:7c:c9:e2:e0:
7e:af:e9:0a:41:96:d4:d1:fc:f0:13:8a:56:3e:e0:21:a8:67:
40:b0:6e:e7:c6:3f:52:12:ef:42:50:9c:b8:cd:5b:e3:a0:72:
13:f3:ab:02:5e:8c:d5:38:c0:e3:3a:3f:03:55:60:62:81:bb:
a9:7c:06:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:13:09 2025 by rpki-client