Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136392e302f32342d3234203d3e203632323430.roa
File: 3231362e3135312e3136392e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: gZsKwmrONL8IHfMIXibgE3eN+IbfVKnNY+2PsQjw9FE=
Subject key identifier: 26:B3:2F:12:48:05:6D:03:7F:92:4A:2C:7C:CC:E3:00:97:65:C1:F8
Certificate issuer: /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial: 13B51AA7540B885436C49C47D2FB0F3FF18151B0
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136392e302f32342d3234203d3e203632323430.roa
Signing time: Thu 21 Nov 2024 09:01:09 +0000
ROA not before: Thu 21 Nov 2024 08:56:09 +0000
ROA not after: Thu 20 Nov 2025 09:01:09 +0000
asID: 62240
IP address blocks: 216.151.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b5:1a:a7:54:0b:88:54:36:c4:9c:47:d2:fb:0f:3f:f1:81:51:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Validity
Not Before: Nov 21 08:56:09 2024 GMT
Not After : Nov 20 09:01:09 2025 GMT
Subject: CN=26B32F1248056D037F924A2C7CCCE3009765C1F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:6a:22:d4:9f:6d:5e:45:69:07:7a:03:2e:
b7:21:f7:cc:94:bd:72:cd:58:85:d6:97:f7:29:49:
37:09:a8:37:44:17:d6:60:95:c0:8a:fd:9c:b7:9d:
3d:1a:35:83:f6:e1:a7:7a:cb:86:f6:6a:a1:57:f3:
32:8a:63:53:2a:95:bf:c3:9d:a6:15:cc:5b:30:26:
96:15:63:89:49:e6:4b:41:09:01:4f:e5:fb:d6:e3:
7b:ac:73:fe:a6:e4:48:e8:f9:26:ce:dd:83:4c:76:
c5:75:68:9e:e9:31:f3:a8:e7:21:ad:68:ed:f5:77:
74:08:df:7d:f7:05:c3:91:f7:e3:36:6d:64:b5:54:
29:2a:16:1a:f4:a1:9f:4a:65:8b:55:ae:71:0a:ad:
b4:d3:32:95:c0:a8:bb:f7:06:49:22:7a:91:61:76:
13:f4:05:b5:3b:ad:10:0b:ac:5a:5d:27:67:ed:3f:
36:b5:4e:f7:3a:07:02:54:9f:9e:81:74:71:3a:1f:
8d:ee:dc:d5:4c:7b:c0:75:bf:df:b7:26:c4:70:ae:
a8:4c:d7:1e:9b:f5:0e:a3:60:6d:df:ed:ff:8f:5a:
84:9c:f7:bd:1d:8e:21:e3:f6:48:0b:5f:13:9c:0f:
22:ba:f1:94:41:60:de:b8:fb:9c:84:56:5d:6f:3a:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B3:2F:12:48:05:6D:03:7F:92:4A:2C:7C:CC:E3:00:97:65:C1:F8
X509v3 Authority Key Identifier:
keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136392e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.151.169.0/24
Signature Algorithm: sha256WithRSAEncryption
32:eb:a3:0e:9f:6a:20:0f:06:04:78:36:f6:6e:a8:64:dc:b9:
2c:74:39:38:4c:22:5e:16:a9:b3:d0:63:42:e2:4b:bd:78:f1:
7e:b0:86:16:77:6a:8e:1e:71:9e:94:ca:15:04:23:70:be:94:
d7:b7:68:1d:b5:50:c4:2d:f5:6b:b6:b9:89:e2:f7:bb:44:5e:
4e:b6:7b:bd:4c:57:36:87:39:9f:c7:8f:6d:29:97:5c:04:f9:
3b:6b:5a:9c:ef:24:0b:b1:ac:f5:34:a7:d7:3b:59:1b:43:c3:
ea:f5:49:06:61:8e:66:64:2c:bd:b9:81:5d:e9:6d:cf:96:a9:
da:55:9d:30:f0:d2:fe:50:78:4a:a1:c0:f0:7c:df:34:2f:2e:
b3:60:aa:15:d8:7c:19:18:bc:3c:dc:b4:38:ac:f2:1c:09:d4:
71:0e:a4:2a:b0:07:aa:98:49:3f:b4:30:fb:9f:b7:27:13:d2:
8b:88:05:d1:29:ae:78:99:ee:48:9c:8e:3a:3b:56:87:be:49:
fe:b9:dd:40:45:4f:9d:6d:a8:be:5b:0e:14:52:a2:d1:fc:75:
f6:e3:80:d8:f1:be:be:81:ad:7c:71:63:f0:c9:cd:a4:33:ec:
a9:1e:99:98:af:b8:5d:0c:19:a1:3a:10:c1:33:07:46:fd:a1:
cf:e3:33:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:22 2025 by rpki-client