Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa
File: 3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier: THZEewfWUhfC1yStCmZixtXUyzOwM6hxjQBA9O0joHI=
Subject key identifier: CB:B9:DC:70:0A:66:FA:6E:9A:18:00:1D:D9:F8:34:BA:9F:64:9F:89
Certificate issuer: /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial: 2B63CC6FAB9605B28596C1672FEB1F3E149B7802
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa
Signing time: Tue 12 Mar 2024 13:26:29 +0000
ROA not before: Tue 12 Mar 2024 13:21:29 +0000
ROA not after: Tue 11 Mar 2025 13:26:29 +0000
asID: 212384
IP address blocks: 104.254.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:63:cc:6f:ab:96:05:b2:85:96:c1:67:2f:eb:1f:3e:14:9b:78:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Validity
Not Before: Mar 12 13:21:29 2024 GMT
Not After : Mar 11 13:26:29 2025 GMT
Subject: CN=CBB9DC700A66FA6E9A18001DD9F834BA9F649F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:b4:01:e7:f4:1f:0d:ae:3a:7c:9e:ad:c2:
49:7a:ba:b5:af:a6:94:9d:ef:dc:36:76:f0:63:b4:
14:23:d4:da:df:bc:e0:7b:b2:c8:ae:4f:b9:4a:50:
5d:31:56:f1:6a:31:6e:6d:bc:d8:bf:56:bd:cd:ce:
f2:58:f6:88:bc:0b:c1:3c:38:c7:f5:1c:ef:f3:94:
a2:cb:b9:d7:be:29:32:1e:56:79:de:52:8e:45:a2:
17:97:ac:f5:9d:f4:95:7f:9e:c5:15:92:1a:ec:17:
01:de:c7:a5:6d:9a:03:5f:33:eb:63:2f:3a:8d:fe:
f9:45:15:92:90:54:90:b8:1a:7f:d1:4c:d3:bd:0c:
f2:af:1e:90:5d:b2:8c:c5:9d:b9:96:17:dd:fe:a7:
bc:11:34:4e:f5:f2:dd:70:c8:32:99:b4:8e:0e:06:
45:34:db:94:f3:31:da:ed:b0:84:77:bb:34:73:0c:
22:a5:e5:81:a6:7a:8f:d0:e4:47:c6:b3:63:2c:25:
3f:2c:a9:90:bb:9f:3c:71:93:7f:00:52:a1:fc:2c:
fc:33:cc:3e:1f:64:32:45:96:75:58:92:41:db:92:
76:ef:da:dc:c8:12:6d:a2:27:6f:c7:a1:c2:dc:13:
e2:3a:69:79:d3:70:bd:4b:0f:02:ac:c5:59:d6:ca:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B9:DC:70:0A:66:FA:6E:9A:18:00:1D:D9:F8:34:BA:9F:64:9F:89
X509v3 Authority Key Identifier:
keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.254.195.0/24
Signature Algorithm: sha256WithRSAEncryption
38:07:fe:fb:70:11:86:3e:6d:b3:8f:06:2a:fb:57:5a:9b:6f:
6f:dd:fc:4e:85:fd:d5:a1:12:9b:66:5f:cc:c9:71:ac:e9:1d:
52:39:47:2c:4e:2c:ad:a0:27:cd:13:58:be:97:12:4f:69:56:
78:e8:be:b4:75:98:f4:64:8c:2a:b8:d2:be:59:97:f0:0b:0b:
64:12:59:b6:d5:2c:86:2e:12:6d:0c:55:d4:27:6b:1e:04:2b:
e2:30:f8:01:be:1f:83:c1:fd:62:7e:de:1b:47:a3:08:37:36:
88:bc:fe:40:a1:8b:73:90:88:44:77:a6:07:42:ad:6e:ea:f9:
48:25:c2:2c:82:b5:a6:62:17:9a:bc:75:36:c3:dc:31:fa:95:
a0:79:80:95:e8:a1:51:fc:27:6f:61:8d:40:ed:79:c8:84:6b:
75:d9:fa:de:2b:ca:f1:29:c5:db:05:1b:fe:ad:90:ff:a6:bc:
00:69:f0:98:eb:f1:e7:bc:c4:d2:8b:77:dd:3e:16:04:d5:27:
41:92:39:b5:6b:34:48:89:4b:a7:90:83:a5:2e:ab:bc:9f:8b:
62:c5:eb:59:b4:fc:71:4f:a4:dc:7f:98:72:61:05:5a:03:9f:
9e:51:a5:ac:0c:bf:db:a1:8b:63:67:91:c0:c7:52:9f:98:a3:
35:04:82:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:17 2025 by rpki-client