Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2039333132.roa
File: 37342e3132302e3132302e302f32342d3234203d3e2039333132.roa (raw, json)
Hash identifier: Pp8qqKzEJrkD5HVyQYq4RA8IwqPhZi5Rlb4pIoSBI3w=
Subject key identifier: 33:CE:CF:96:98:30:C2:CF:F3:ED:97:46:78:EA:95:AC:B3:C9:89:67
Certificate issuer: /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial: 4DEC23C266066D46460D6F7E552B6042DBE434
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2039333132.roa
Signing time: Fri 22 Nov 2024 20:49:22 +0000
ROA not before: Fri 22 Nov 2024 20:44:22 +0000
ROA not after: Fri 21 Nov 2025 20:49:22 +0000
asID: 9312
IP address blocks: 74.120.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ec:23:c2:66:06:6d:46:46:0d:6f:7e:55:2b:60:42:db:e4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Validity
Not Before: Nov 22 20:44:22 2024 GMT
Not After : Nov 21 20:49:22 2025 GMT
Subject: CN=33CECF969830C2CFF3ED974678EA95ACB3C98967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:24:67:a1:a2:19:35:ef:97:4b:8d:2b:6f:
df:cb:9e:d9:f3:27:73:ac:72:84:44:95:71:80:f7:
a9:e8:9a:2c:71:2c:0f:c3:c7:c1:e7:64:48:92:e8:
f8:be:fa:b2:61:a6:03:e8:45:fe:fb:a1:91:bb:5d:
b7:d8:3f:5e:b7:f2:f3:03:d3:d4:f0:75:35:dd:3c:
63:d0:34:2f:f5:ac:11:8b:19:9d:74:a5:1b:85:1c:
8a:6b:88:9e:d6:1d:06:97:68:cf:d5:0c:a1:6b:3e:
ec:8c:41:61:9d:8b:c0:78:15:7a:9b:1f:81:63:19:
7c:bb:5e:be:08:f2:95:39:c9:bd:f5:f4:b9:65:53:
2c:71:ca:70:9f:30:e1:c0:ab:90:e5:ce:ed:6d:1d:
21:6b:ab:66:37:1a:e8:c4:9a:66:80:c0:05:2a:72:
56:34:15:f1:86:fd:3a:a0:0b:37:cd:90:7d:91:c3:
c6:60:ad:f9:06:45:00:0b:e1:af:a9:76:b6:c6:ae:
18:35:85:fa:b9:9a:36:d4:11:9b:35:57:48:1c:41:
a6:38:fa:0f:97:f5:91:fa:2e:ec:06:ed:64:b3:da:
2c:3c:f7:51:5e:27:3c:55:0f:3c:1a:2f:40:59:a6:
72:8a:8a:29:16:d3:bd:d7:55:fe:99:5a:f0:cb:82:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CE:CF:96:98:30:C2:CF:F3:ED:97:46:78:EA:95:AC:B3:C9:89:67
X509v3 Authority Key Identifier:
keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2039333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.120.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ec:52:7c:2b:8e:50:e6:e3:38:e3:82:e7:08:7f:42:12:ed:
6f:66:d6:a0:37:90:ed:7c:ea:70:73:9c:e8:32:4e:81:9c:14:
5d:c7:c4:9a:3c:25:cb:a8:a0:71:be:3d:23:24:37:8b:48:0f:
f5:84:5c:7f:e3:44:57:27:a1:c5:09:66:31:c3:b0:4c:03:d1:
44:04:d6:ac:63:65:3c:77:c3:92:fe:a1:cb:cc:0b:12:88:fe:
01:95:64:f9:84:65:0c:b6:d5:44:e2:29:c9:84:d8:b9:f5:6f:
c3:e3:12:0a:e4:79:e6:0b:36:61:47:56:69:ce:66:df:fa:37:
47:46:98:48:c6:54:23:a5:3c:8e:ec:57:cd:89:34:11:90:bd:
48:c2:9a:37:cf:65:b1:63:da:11:67:a6:2d:2b:29:48:8f:9c:
0f:ae:87:7f:50:3a:a3:6e:5e:a7:df:42:c7:24:1e:16:61:25:
10:85:8c:21:48:e3:fb:cc:0f:24:8d:bf:d9:f7:fe:50:bb:1e:
48:ef:84:41:5c:4d:96:cb:6d:a9:09:4e:f8:09:f8:3e:8d:29:
5a:54:54:9f:8e:e9:ef:c6:47:19:1e:66:24:ad:02:92:5c:e1:
d8:1e:a0:e0:80:46:7c:a9:4d:65:a9:f3:af:27:6b:af:42:79:
fa:a0:33:cc
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgITTewjwmYGbUZGDW9+VStgQtvkNDANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI5OTk1YmEwNWU5MGFhMzk1MWQ5YWIzOWQ5MzU1YjZiNjgz
ZTMyZTZhMTlhZGYxNTNmMjAeFw0yNDExMjIyMDQ0MjJaFw0yNTExMjEyMDQ5MjJa
MDMxMTAvBgNVBAMTKDMzQ0VDRjk2OTgzMEMyQ0ZGM0VEOTc0Njc4RUE5NUFDQjND
OTg5NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+CRnoaIZNe+X
S40rb9/LntnzJ3OscoRElXGA96nomixxLA/Dx8HnZEiS6Pi++rJhpgPoRf77oZG7
XbfYP1638vMD09TwdTXdPGPQNC/1rBGLGZ10pRuFHIpriJ7WHQaXaM/VDKFrPuyM
QWGdi8B4FXqbH4FjGXy7Xr4I8pU5yb319LllUyxxynCfMOHAq5Dlzu1tHSFrq2Y3
GujEmmaAwAUqclY0FfGG/TqgCzfNkH2Rw8ZgrfkGRQAL4a+pdrbGrhg1hfq5mjbU
EZs1V0gcQaY4+g+X9ZH6LuwG7WSz2iw891FeJzxVDzwaL0BZpnKKiikW073XVf6Z
WvDLgiRvAgMBAAGjggKwMIICrDAdBgNVHQ4EFgQUM87Plpgwws/z7ZdGeOqVrLPJ
iWcwHwYDVR0jBBgwFoAUNRTu0O5cVTQjol8dfVb8JhMRoeswDgYDVR0PAQH/BAQD
AgeAMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0
L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTg4MDI5ZTAxODVkMDdjNWY2MDQ0ZWIvMC8z
NTE0RUVEMEVFNUM1NTM0MjNBMjVGMUQ3RDU2RkMyNjEzMTFBMUVCLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvOTA3ZTAxMDUtMzUxNi00N2EwLWE5YzItNWYwYjc3NjYxY2IxLzk5OTVi
YTA1ZTkwYWEzOTUxZDlhYjM5ZDkzNTViNmI2ODNlMzJlNmExOWFkZjE1M2YyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1ZDA3
YzVmNjA0NGViLzAvMzczNDJlMzEzMjMwMmUzMTMyMzAyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzOTMzMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEp4eDANBgkqhkiG9w0BAQsFAAOC
AQEAAOxSfCuOUObjOOOC5wh/QhLtb2bWoDeQ7XzqcHOc6DJOgZwUXcfEmjwly6ig
cb49IyQ3i0gP9YRcf+NEVyehxQlmMcOwTAPRRATWrGNlPHfDkv6hy8wLEoj+AZVk
+YRlDLbVROIpyYTYufVvw+MSCuR55gs2YUdWac5m3/o3R0aYSMZUI6U8juxXzYk0
EZC9SMKaN89lsWPaEWemLSspSI+cD66Hf1A6o25ep99CxyQeFmElEIWMIUjj+8wP
JI2/2ff+ULseSO+EQVxNlsttqQlO+An4Po0pWlRUn47p78ZHGR5mJK0Cklzh2B6g
4IBGfKlNZanzrydrr0J5+qAzzA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:06:07 2025 by rpki-client