Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e20383334.roa
File: 3137332e3234372e3232352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: b0fmdoaXy91GZrdUivI0WMhg/viJ+MzfH/3nGEOLrw4=
Subject key identifier: AE:FA:60:99:77:25:27:A9:36:3E:B5:73:ED:67:BB:FB:4A:BB:17:A4
Certificate issuer: /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial: 744EF920DD7C97C68302CEA947C6B5CFD32D188A
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e20383334.roa
Signing time: Wed 22 Jan 2025 05:49:54 +0000
ROA not before: Wed 22 Jan 2025 05:44:54 +0000
ROA not after: Wed 21 Jan 2026 05:49:54 +0000
asID: 834
IP address blocks: 173.247.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:4e:f9:20:dd:7c:97:c6:83:02:ce:a9:47:c6:b5:cf:d3:2d:18:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Validity
Not Before: Jan 22 05:44:54 2025 GMT
Not After : Jan 21 05:49:54 2026 GMT
Subject: CN=AEFA6099772527A9363EB573ED67BBFB4ABB17A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:1a:2e:be:e9:9d:17:85:46:c0:14:a7:7e:
67:96:7c:5f:84:a6:23:38:68:01:a3:52:a2:09:71:
a1:36:b0:30:8c:c6:c8:a4:8e:e0:e3:16:73:db:64:
be:b0:fb:46:0c:35:98:84:52:cd:44:5c:0b:65:a1:
59:d0:df:9a:4f:11:25:bf:56:20:90:84:2c:2f:d9:
1f:55:c5:43:44:e2:33:5a:1c:40:44:cd:61:87:91:
06:fb:57:ff:23:e3:2b:e3:c6:e5:46:bb:8c:56:d8:
3e:16:93:8c:2c:f0:5e:d9:7e:27:38:fe:83:00:06:
8e:c1:20:5d:77:90:81:fd:b2:be:fa:64:e9:b7:bd:
8f:d8:d5:96:33:10:61:69:e3:f3:f9:bb:66:a4:00:
db:1f:03:fd:7e:57:5e:79:8a:65:be:28:48:92:11:
17:b0:cb:2c:27:cf:51:1c:c0:19:9b:94:eb:b9:c9:
34:ed:3c:8b:f1:b5:40:79:e4:90:a3:9f:6e:08:75:
ae:61:a5:6d:93:ce:f3:af:56:8f:b5:d5:08:2c:2f:
64:67:e6:34:bd:2f:fa:55:19:fb:7d:f5:a1:bb:03:
c4:d9:a0:35:63:92:86:7f:4a:cd:b6:af:68:d9:53:
5d:65:fb:2b:64:4f:00:8d:ec:4f:bd:c0:0d:f1:da:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FA:60:99:77:25:27:A9:36:3E:B5:73:ED:67:BB:FB:4A:BB:17:A4
X509v3 Authority Key Identifier:
keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.247.225.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e3:d4:64:46:cb:67:b9:6d:5c:b1:13:27:5e:77:66:5a:eb:
14:8c:63:8a:76:9f:75:a7:20:c3:74:7c:32:38:a3:33:a4:6e:
3c:60:1a:77:1c:cf:73:e1:2c:32:5f:9c:d0:a1:14:10:dc:f5:
26:81:5d:33:58:ae:d3:47:32:d2:e9:85:5b:c0:02:aa:8a:4c:
db:ce:f9:69:aa:2e:e8:84:8b:c9:bc:1d:57:76:7c:db:eb:37:
8f:af:17:98:e9:32:a9:b2:74:b2:0f:2b:fa:8c:de:35:c1:fa:
bd:9b:4b:39:b5:30:e4:29:91:3f:3e:48:73:bf:3d:7b:bb:5c:
f6:e0:bf:9c:c0:50:1e:99:bd:1c:13:16:4f:e0:50:33:63:40:
4b:08:0e:74:87:5a:50:84:a4:e3:65:7d:f5:2a:07:25:32:33:
eb:b5:11:43:3d:f3:cf:a8:a1:c8:32:ba:6e:b5:9e:c9:7e:9b:
b1:e6:0a:68:e4:7f:e2:b4:73:03:3b:d0:4f:c7:eb:d6:c8:08:
80:60:ff:53:e8:bd:8c:0e:01:fc:ea:da:4f:78:6b:bc:03:0d:
59:97:f6:92:84:d5:a4:22:cf:f8:30:0c:de:49:13:40:7b:fb:
cf:02:ac:72:0b:d0:13:b1:9f:41:a4:5b:d0:86:4c:43:d8:27:
59:5d:9d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:53 2025 by rpki-client