Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa
File: 3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: 7KPGTfR5UQfgsbbcwhG2rhvCf86DcODKNDBKg8Yug04=
Subject key identifier: B9:98:67:2B:34:A4:DF:CB:13:89:92:92:9C:A3:C1:2F:E9:BD:61:B8
Certificate issuer: /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial: 7D68137DA3EBDD262A419A9736CECFF0FD72A87A
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa
Signing time: Thu 10 Oct 2024 06:49:01 +0000
ROA not before: Thu 10 Oct 2024 06:44:01 +0000
ROA not after: Thu 09 Oct 2025 06:49:01 +0000
asID: 1239
IP address blocks: 199.101.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:68:13:7d:a3:eb:dd:26:2a:41:9a:97:36:ce:cf:f0:fd:72:a8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Validity
Not Before: Oct 10 06:44:01 2024 GMT
Not After : Oct 9 06:49:01 2025 GMT
Subject: CN=B998672B34A4DFCB138992929CA3C12FE9BD61B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1b:08:64:3f:96:84:53:48:98:24:92:af:c1:
d7:7c:a3:5d:0f:78:8d:be:3a:55:60:6d:47:68:88:
d6:26:72:f4:e9:25:86:ce:55:ca:b2:00:b2:87:ad:
34:e3:59:84:d7:f0:d6:0d:6d:08:45:3f:71:b8:f7:
3b:cc:27:71:b9:7b:c9:a4:20:7a:31:2c:c1:50:03:
93:1d:41:89:b6:95:c7:4a:50:76:7f:4e:35:26:30:
18:0a:4d:69:51:f2:5c:1f:e7:ac:e6:37:a1:cc:09:
d8:57:c6:ea:4d:e3:c0:37:d7:cd:0e:8a:79:62:fb:
68:ce:74:ba:11:bb:9d:39:5d:90:de:4e:f8:f9:a8:
ae:08:3b:2e:11:77:79:fb:db:c5:a3:c4:fd:6e:ff:
70:9d:bc:b3:91:87:d5:be:ff:be:ec:25:22:dd:79:
7b:59:75:00:c9:ee:2a:0a:5f:cd:72:1b:bf:e2:24:
81:04:4c:e4:1c:cc:be:57:3f:1c:cb:ad:cb:c4:30:
47:9b:e8:8c:7a:82:e4:77:ec:ab:54:d8:4d:68:08:
94:de:2b:cd:1a:81:12:19:67:c7:63:a8:c9:09:7c:
91:25:01:ee:6b:35:7e:b5:ae:3a:fc:c9:56:9a:75:
15:ab:ba:ab:35:7f:79:0d:91:b0:70:07:69:93:9b:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:98:67:2B:34:A4:DF:CB:13:89:92:92:9C:A3:C1:2F:E9:BD:61:B8
X509v3 Authority Key Identifier:
keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.101.171.0/24
Signature Algorithm: sha256WithRSAEncryption
50:84:be:11:be:6b:40:8c:61:70:4b:5b:1e:15:58:6b:d6:da:
ff:93:ac:11:cf:53:d3:00:db:68:e5:a8:7d:ba:13:2b:14:9d:
41:c2:32:ca:08:42:18:1d:8e:71:90:31:de:0a:49:e8:bc:ba:
47:4b:50:41:24:2b:54:d2:c9:28:ba:fa:ed:4c:2b:bd:c6:ef:
ea:45:d5:cf:98:53:8b:c6:22:68:48:d7:08:76:47:be:cd:cb:
5a:c5:cb:47:f8:ec:de:3e:6c:3b:75:e0:b6:29:c9:93:7d:cb:
62:5b:b5:e6:c8:a5:7d:e8:f8:30:3e:17:5d:63:48:68:1f:40:
25:53:69:39:4c:3d:5d:2a:ca:ce:48:3e:fc:df:0b:0a:52:ba:
b6:4b:27:bc:e1:34:ef:21:a7:0b:74:48:ae:c5:27:98:18:c9:
11:4a:40:f5:58:04:b8:b4:e3:6e:28:08:35:3d:3a:4a:c5:ed:
c0:f3:06:73:28:9c:0a:d9:03:e3:6e:5d:7c:44:b7:35:13:32:
2c:36:4f:f8:1a:c8:64:c0:77:0e:9e:15:8a:d2:8a:1c:69:61:
53:f9:a2:48:d6:78:80:61:3b:bc:f4:7c:f3:1a:68:b0:bf:c9:
bf:d4:f3:2c:60:86:a2:ea:a0:e0:42:96:46:b6:42:f9:e5:e0:
63:1a:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:31 2025 by rpki-client