Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
File: 3139332e3138382e312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: jGIsRI0aMYSbZKlsTcSv5xF9b8/PScAVQ1zl16GQHmA=
Subject key identifier: FA:E8:84:DF:97:03:B4:A0:F0:3D:56:E4:E5:15:B4:84:BF:4D:9A:13
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 07E0881E5F55B3BC209245DC538FEBE54F297DA0
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 30 Sep 2024 12:49:00 +0000
ROA not before: Mon 30 Sep 2024 12:44:00 +0000
ROA not after: Mon 29 Sep 2025 12:49:00 +0000
asID: 212238
IP address blocks: 193.188.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:e0:88:1e:5f:55:b3:bc:20:92:45:dc:53:8f:eb:e5:4f:29:7d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Sep 30 12:44:00 2024 GMT
Not After : Sep 29 12:49:00 2025 GMT
Subject: CN=FAE884DF9703B4A0F03D56E4E515B484BF4D9A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:cd:24:5c:5c:e6:31:1a:de:a7:53:31:37:
31:22:af:8b:a5:f8:e4:12:36:8d:68:83:86:19:5e:
0f:59:1d:e0:04:c0:d0:d7:73:72:06:46:12:16:c0:
7a:2b:c2:f6:b6:ca:f4:9c:d1:ed:d6:f1:08:85:d9:
44:f8:35:3a:95:0c:cd:18:e8:1f:32:1b:d3:f7:47:
a0:53:2d:52:fd:07:f5:10:b0:cd:c1:66:cc:bc:95:
31:a9:69:02:d6:19:84:6f:d5:af:8f:13:51:ec:bf:
b9:ea:83:c4:0f:87:19:e0:09:53:1f:6d:13:b5:8e:
44:bb:e4:48:60:8f:4f:c9:7b:fb:27:78:8b:ed:a4:
f4:fa:f9:9a:29:09:dc:18:89:2c:9a:67:78:fc:f3:
7d:a9:35:e6:3a:b3:55:7e:12:53:8c:74:46:98:fc:
fd:c5:93:6d:77:04:e8:b9:a9:99:61:4a:16:f8:90:
be:2a:af:bc:ca:c1:3c:97:c6:e6:d1:2d:8e:88:3a:
36:05:dc:56:72:3e:6f:2d:fe:6b:8b:5e:53:45:ce:
a1:e8:ab:6a:af:27:b4:4e:23:37:6a:28:53:ae:dc:
ca:77:e5:74:9c:d9:b3:98:9f:f2:cf:54:27:f7:ab:
ab:16:a7:ec:61:bf:82:78:67:e9:8b:a9:cd:2c:f9:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E8:84:DF:97:03:B4:A0:F0:3D:56:E4:E5:15:B4:84:BF:4D:9A:13
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.1.0/24
Signature Algorithm: sha256WithRSAEncryption
10:cd:04:e4:6e:4f:bd:dc:9f:2e:cb:c8:2a:84:0a:06:bf:db:
9d:eb:4e:a8:e3:99:c6:bb:b1:36:33:5c:0b:69:29:b0:c0:78:
ef:97:88:05:22:0d:29:d8:8c:96:8b:bd:94:4a:1d:3e:be:c2:
5f:cf:c7:6a:b7:c4:de:01:bc:b8:8c:a3:f0:6c:b0:e9:d1:9c:
19:0c:a5:e5:b5:1a:5a:dc:21:a6:c5:47:cf:24:60:53:08:f2:
61:d6:2b:8a:9a:70:07:fa:88:ab:84:c8:30:fc:dd:f6:6b:8a:
fa:a4:dc:d3:a3:70:d1:8e:e5:c9:f2:74:b4:68:f6:e2:be:b7:
a4:f1:a7:66:5d:d1:f4:e9:43:a8:dd:ca:e1:9a:db:64:af:ab:
d2:6e:59:1e:f8:36:3e:9c:d2:db:42:db:a4:3a:ac:0d:da:75:
70:8e:2e:db:ab:c6:ba:ca:91:92:e4:8b:c4:12:da:9b:1a:86:
0e:87:35:45:b9:f1:7b:ee:2c:eb:f0:c9:a4:4c:7a:c5:cd:bb:
b4:99:25:50:53:46:2a:d0:b5:17:c3:71:b9:d8:25:82:4b:f1:
59:51:50:79:ba:e4:42:e4:08:2c:04:7e:a5:1e:dd:36:55:14:
60:8a:9b:28:da:fa:c2:bf:9b:5d:94:a0:b7:96:59:ff:07:09:
0c:aa:d3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:21:24 2025 by rpki-client