Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e2031323339.roa
File: 3137332e3234372e3233302e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: NxaREbjrQ+DNNozZp5Na/BCrmp0WzaGE0Ii+66lZY20=
Subject key identifier: D7:4E:0B:EC:B9:D6:A7:69:8E:8E:7B:13:93:7F:87:81:2C:1F:E2:88
Certificate issuer: /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial: 20A3EE19ABA2CCBC7D13E2D80CEF5F51E5F03FDE
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e2031323339.roa
Signing time: Sat 18 Jan 2025 20:36:44 +0000
ROA not before: Sat 18 Jan 2025 20:31:44 +0000
ROA not after: Sat 17 Jan 2026 20:36:44 +0000
asID: 1239
IP address blocks: 173.247.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a3:ee:19:ab:a2:cc:bc:7d:13:e2:d8:0c:ef:5f:51:e5:f0:3f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Validity
Not Before: Jan 18 20:31:44 2025 GMT
Not After : Jan 17 20:36:44 2026 GMT
Subject: CN=D74E0BECB9D6A7698E8E7B13937F87812C1FE288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:a6:59:7c:0b:a7:41:d6:4c:19:7c:92:b2:
2a:d9:95:20:ab:17:7c:15:05:84:94:73:e3:5d:bf:
f5:05:59:9d:3c:fc:63:5f:0c:b4:d2:75:ec:be:79:
a2:55:01:62:97:cf:d1:bd:1c:e4:a3:e6:24:8e:49:
c0:e7:ab:ac:c4:35:86:5e:4b:5a:f1:ab:18:0f:f8:
3c:3f:72:f6:01:f5:8c:04:5e:9b:fd:a2:f6:f9:6a:
4e:b2:03:2e:99:94:13:5f:6e:b8:fe:71:8e:a0:eb:
bf:36:8a:a4:7e:06:1b:20:d8:d4:4e:39:94:09:58:
8e:d2:a4:58:5b:8c:9b:cf:62:0c:0d:13:b2:ac:8a:
17:b1:e7:8d:40:0e:31:d9:69:fe:3b:6a:5d:cf:1d:
c2:d9:a6:3f:dc:b0:46:2d:8b:33:e9:18:cc:bc:cf:
19:d2:40:02:54:70:c3:15:f8:7b:4c:d2:2b:97:e7:
ef:2b:00:20:46:89:58:98:70:b5:e6:02:49:d3:0d:
f1:f8:f8:87:1c:9e:47:aa:f5:a4:41:ea:03:d3:7e:
21:70:7a:21:e1:b1:bd:ae:92:41:79:46:f6:2f:89:
b0:16:c7:dc:0f:fe:71:12:8f:af:73:27:a0:0b:84:
2b:12:1e:0e:55:dd:fc:fb:6a:a2:ef:fe:28:2f:02:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4E:0B:EC:B9:D6:A7:69:8E:8E:7B:13:93:7F:87:81:2C:1F:E2:88
X509v3 Authority Key Identifier:
keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.247.230.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d0:64:96:cf:cb:51:5b:98:67:e3:a1:38:83:05:e2:67:2c:
e7:7e:29:20:24:31:6e:94:f5:9d:76:bb:47:dc:c2:30:8a:9f:
ee:ab:2a:04:1b:ae:ac:aa:0d:f6:c8:b9:01:a7:6c:60:73:5e:
39:2e:6d:ab:4d:35:f9:29:1c:c3:ce:d9:96:0c:f5:a2:65:53:
c0:d6:a5:cb:c0:5d:f4:02:96:e4:6c:b0:1c:01:ec:91:d1:ad:
41:91:28:86:e0:01:8a:04:10:f3:31:ec:92:f5:c7:f5:fc:c4:
1d:f8:e1:ee:ef:70:b6:d8:d1:25:1f:d0:0a:4a:83:23:00:2c:
48:ea:c9:c1:6f:2c:ae:46:ca:89:09:e9:24:d1:f9:a7:9d:b6:
6e:fc:80:ff:85:b3:44:7f:03:04:c1:50:4c:74:61:ca:7d:33:
bf:30:95:32:5f:1c:45:33:b3:f7:b1:cc:02:62:a9:c9:70:b4:
ec:29:87:33:79:61:ec:68:43:19:22:ca:e1:f4:50:44:a4:06:
45:f5:d4:74:de:80:55:17:2b:e1:49:16:ff:00:44:91:82:6f:
e0:08:99:cf:d6:f7:33:6c:8b:0c:41:ba:b3:c1:61:fe:86:24:
1a:a3:22:80:30:ac:51:c6:d7:c6:a5:b9:82:5b:02:57:e3:91:
46:e6:f9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:18 2025 by rpki-client