Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20393936.roa
File: 3139352e37382e35372e302f32342d3234203d3e20393936.roa (raw, json)
Hash identifier: NbhojVic11hT2eBWrZ/0PAqNLDM6KNTDLjLoHHYdeSg=
Subject key identifier: 1F:A3:E6:E8:CF:FF:52:74:DD:AD:1C:59:AC:51:93:18:E0:58:E0:D9
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 708937C190D7DC361E8A0DA7E97B3438300488EB
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20393936.roa
Signing time: Mon 15 Apr 2024 15:16:04 +0000
ROA not before: Mon 15 Apr 2024 15:11:04 +0000
ROA not after: Mon 14 Apr 2025 15:16:04 +0000
asID: 996
IP address blocks: 195.78.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:89:37:c1:90:d7:dc:36:1e:8a:0d:a7:e9:7b:34:38:30:04:88:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Apr 15 15:11:04 2024 GMT
Not After : Apr 14 15:16:04 2025 GMT
Subject: CN=1FA3E6E8CFFF5274DDAD1C59AC519318E058E0D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:37:bc:0a:61:0c:84:1a:89:02:9f:24:b2:
17:58:88:4c:ce:31:a6:44:88:26:1e:32:aa:e8:b1:
e7:ca:4e:14:00:70:18:4b:37:60:66:60:4d:a0:1f:
7e:1c:31:4c:f6:15:5a:fb:8b:4d:b4:6e:80:7b:ab:
3b:95:6f:10:2d:6f:ce:74:7b:74:0f:4d:41:f0:f3:
87:07:b2:5d:e3:93:28:fe:ad:c2:65:95:57:6e:7e:
5d:d9:64:ed:a7:62:09:ba:27:64:92:26:be:6b:5c:
b3:d4:b6:09:4a:b1:a8:50:25:87:13:e2:95:70:3c:
a3:b4:39:c2:33:96:18:92:93:e6:7e:50:74:d0:28:
21:68:52:34:df:8f:b7:5b:7f:3b:45:02:e2:d8:7b:
10:61:eb:82:24:d9:5c:c4:0e:86:c4:99:ce:db:69:
49:c2:02:54:f2:f3:a1:63:c1:8f:43:63:6b:35:60:
70:5a:4a:02:6d:07:1d:f6:47:7c:62:60:36:31:9d:
72:d1:f0:d4:50:ca:cc:61:ae:95:6b:c2:a1:91:2c:
a1:f6:c2:d0:50:71:74:e0:06:d6:42:96:54:88:9d:
67:dc:d7:42:a7:75:bb:5c:68:b6:3f:be:6c:0e:dc:
04:f5:58:43:5e:5f:f2:f2:93:c8:b4:c9:11:d8:96:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A3:E6:E8:CF:FF:52:74:DD:AD:1C:59:AC:51:93:18:E0:58:E0:D9
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.57.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8e:87:ff:d1:dd:18:b9:33:7e:84:cf:43:7f:0c:f9:a0:43:
02:fc:25:6a:c9:12:a7:ab:0c:67:34:66:e9:78:b2:94:b0:b8:
68:13:26:44:3f:cb:7a:65:63:02:4a:47:a0:6e:bd:3a:4c:1d:
d6:07:46:bc:0e:bb:48:cc:df:89:67:e3:21:13:40:bf:24:28:
0d:b3:c7:21:8a:50:66:af:43:e8:49:4a:57:c2:b9:a8:39:d3:
fc:fb:bd:45:a7:e7:89:16:ce:68:c4:c4:18:91:e3:bf:55:d4:
0d:8a:39:e6:b5:45:55:ff:58:c1:e1:2f:58:0c:c2:29:ec:80:
ab:19:f7:78:7d:df:24:c0:3a:0b:19:d8:00:d3:5a:41:4f:36:
d6:18:bd:8c:aa:73:a9:9f:0c:74:b7:6f:bc:5e:4b:1d:53:67:
0d:f0:8b:7f:d6:12:1e:07:a4:9c:58:51:c7:2d:ff:1d:08:89:
b7:94:cb:d6:2a:12:aa:6d:fe:41:3d:5c:b9:84:c4:2d:82:98:
84:fa:f4:d1:54:bc:dd:1a:6a:f0:70:a2:f4:0a:55:a0:3f:8d:
f9:28:52:be:83:fc:72:96:74:13:f0:ca:5d:27:64:0b:55:f5:
08:4e:9f:ba:6d:d6:64:2e:3b:b9:9f:32:2b:f3:e4:49:5d:f8:
67:0b:38:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:41:35 2025 by rpki-client