Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e2039303039.roa
File: 37342e3132302e3132332e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: dTVHj+EBQkL3NdZdUjw7+4IRVk170/EjBuWzjpwLrgE=
Subject key identifier: 3D:05:B0:B1:EF:4C:1E:A5:10:1F:FE:1C:00:AD:4D:95:55:2B:03:66
Certificate issuer: /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial: 3BD6048D9C80025E29CAE52F51C64914615BFAF8
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e2039303039.roa
Signing time: Thu 23 Jan 2025 03:36:49 +0000
ROA not before: Thu 23 Jan 2025 03:31:49 +0000
ROA not after: Thu 22 Jan 2026 03:36:49 +0000
asID: 9009
IP address blocks: 74.120.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d6:04:8d:9c:80:02:5e:29:ca:e5:2f:51:c6:49:14:61:5b:fa:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Validity
Not Before: Jan 23 03:31:49 2025 GMT
Not After : Jan 22 03:36:49 2026 GMT
Subject: CN=3D05B0B1EF4C1EA5101FFE1C00AD4D95552B0366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:90:78:82:50:b4:9c:21:9b:2f:94:28:f7:b0:
ca:4e:80:8a:bb:56:f1:8a:85:33:68:44:66:56:e2:
ce:75:d8:8e:3b:a5:06:7a:98:a0:bc:1b:9e:70:e7:
d7:c3:74:79:69:26:7e:29:bf:11:8d:f7:0b:b7:b6:
95:c1:8d:03:d7:9b:a4:9d:59:0c:87:fe:c3:21:77:
a9:97:3f:d7:00:3b:f4:4e:9e:b4:ee:0c:b4:70:f8:
c1:88:2b:d7:03:23:f4:8a:d1:92:64:57:51:02:6b:
20:fb:51:b4:7c:5c:21:11:ea:8b:f9:9a:5e:5c:06:
98:e6:53:fd:b7:f4:e5:13:4d:47:77:7f:c1:74:14:
ff:54:2b:05:40:5e:c7:7b:33:85:18:81:50:b8:fe:
0a:88:23:98:d0:70:00:aa:4c:64:9c:7c:c2:85:63:
b6:7b:e1:a7:f9:6a:27:b1:16:11:a7:1a:00:76:fb:
77:22:8e:01:18:34:78:a3:7f:c7:bc:b3:d8:10:a2:
44:68:4f:c3:96:6a:8e:6e:4c:c4:a3:ab:64:9d:74:
d0:15:cc:02:74:b3:fd:46:af:51:32:74:10:6e:7f:
ea:7b:ea:02:d8:86:eb:96:e8:b3:af:d7:75:22:ef:
86:42:9d:06:66:37:2b:5f:7e:0e:51:25:31:9f:38:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:05:B0:B1:EF:4C:1E:A5:10:1F:FE:1C:00:AD:4D:95:55:2B:03:66
X509v3 Authority Key Identifier:
keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.120.123.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9d:34:09:a2:8e:f9:81:ac:f2:90:bd:7f:26:a5:d5:5e:bb:
fe:a7:aa:54:e2:0f:f2:43:77:46:fd:93:96:16:ae:0d:3f:fc:
29:72:f6:7d:4f:6a:c6:c5:56:10:69:6c:11:49:ed:1f:17:be:
08:ff:17:88:a2:8c:7b:e0:8c:81:c8:c6:5b:c1:22:9d:8c:59:
b2:65:97:82:f0:ba:4d:2e:32:13:ac:cd:1f:05:79:a5:22:41:
80:20:72:91:ee:f8:21:c1:5e:6f:8e:d5:2a:39:56:d6:c0:ba:
b5:2f:1e:6f:11:65:e2:6c:25:62:98:c0:89:f0:48:38:72:68:
7d:64:17:a2:e8:e0:54:26:a6:e5:53:99:0b:88:ac:10:9c:eb:
78:f9:5e:2f:8e:88:60:8d:c4:0c:2c:d9:1b:63:c3:4b:83:8e:
c7:86:93:28:e0:a3:96:86:8d:89:3a:b2:89:d8:08:a3:dc:50:
a1:e2:2f:94:49:b6:63:00:a6:22:72:22:ab:d8:6e:82:2d:2f:
a5:fd:0b:49:8e:25:02:d3:aa:12:5d:5a:d7:c4:55:73:51:b4:
28:9c:f0:bd:03:98:98:29:ee:cc:75:e8:04:3b:07:39:d6:d7:
d5:de:c8:7b:44:b1:67:ab:3d:14:16:8b:f8:ae:b4:70:8a:90:
99:9c:6c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:23:44 2025 by rpki-client