Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233382e302f32332d3234203d3e20323035323230.roa
File: 3137332e3234372e3233382e302f32332d3234203d3e20323035323230.roa (raw, json)
Hash identifier: p2Sjzon26tQZ/w1+UU+pwIFGcYGwboBRaRT/s4Ba4TI=
Subject key identifier: 3E:05:76:F3:8C:3F:71:F1:82:BF:D9:24:29:16:64:B8:90:7A:CC:1F
Certificate issuer: /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial: 6F69FF43457B5A2475588FFF358374A47EDA0DD4
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233382e302f32332d3234203d3e20323035323230.roa
Signing time: Thu 16 Jan 2025 12:37:44 +0000
ROA not before: Thu 16 Jan 2025 12:32:44 +0000
ROA not after: Thu 15 Jan 2026 12:37:44 +0000
asID: 205220
IP address blocks: 173.247.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:69:ff:43:45:7b:5a:24:75:58:8f:ff:35:83:74:a4:7e:da:0d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Validity
Not Before: Jan 16 12:32:44 2025 GMT
Not After : Jan 15 12:37:44 2026 GMT
Subject: CN=3E0576F38C3F71F182BFD924291664B8907ACC1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:b1:e3:ff:e3:dd:00:0a:af:9b:cb:8d:e6:
03:02:12:63:b2:28:1d:b4:b0:99:23:8e:22:5c:07:
54:d8:bc:0a:50:e6:b3:58:fd:5a:5d:90:bd:51:85:
07:bd:13:b3:b5:69:11:f5:f3:01:f0:70:3c:ca:50:
b8:13:83:f1:44:7b:6e:79:15:51:88:73:45:ba:57:
de:b4:ac:57:82:b5:5d:40:18:bd:5a:3f:4d:0a:91:
75:f5:9d:a8:e2:d9:87:f8:08:9d:57:1f:86:2b:95:
88:2a:81:b6:10:e4:e1:4b:e9:3d:51:f6:40:a4:95:
4f:62:82:59:50:6e:20:3d:42:9a:09:68:03:22:a7:
8b:e5:f6:d7:64:d0:f9:80:be:58:1f:73:8d:c7:44:
ad:a1:ef:40:5a:0a:ea:e3:c2:a7:99:eb:ad:f5:5d:
f0:e0:5c:30:ca:92:bd:7c:2a:72:19:af:c7:7d:43:
7f:86:c2:c0:d1:aa:41:6c:b8:f7:95:ca:d8:ed:b3:
97:54:63:29:2a:00:16:65:a8:3b:a7:88:4b:fa:4a:
96:db:d0:35:c0:fa:4f:49:00:3c:74:18:50:07:a8:
a5:5c:e7:e0:6b:01:ee:f0:f5:05:4d:c3:ef:af:6a:
57:f0:f7:49:d8:fe:ba:c2:c7:d2:00:a5:22:79:e2:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:05:76:F3:8C:3F:71:F1:82:BF:D9:24:29:16:64:B8:90:7A:CC:1F
X509v3 Authority Key Identifier:
keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233382e302f32332d3234203d3e20323035323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.247.238.0/23
Signature Algorithm: sha256WithRSAEncryption
38:61:bb:e6:bd:4b:80:a9:16:22:6d:1d:29:55:d6:e2:5a:13:
3c:43:20:24:b5:51:b3:ae:0a:d9:91:7f:5c:42:df:69:93:15:
42:da:fc:79:38:48:c2:a5:e5:bd:2e:3f:47:03:b7:ed:b3:57:
f2:4c:50:41:ef:79:15:07:c3:f9:f0:38:e9:38:33:5a:c5:1c:
31:62:0c:8a:40:13:27:c3:cf:b5:a2:82:89:e9:46:14:d2:57:
d9:6f:df:49:9f:63:aa:d3:65:17:77:0f:11:3f:af:2e:5f:be:
1a:46:98:c7:19:8b:04:bc:e9:7d:a8:e0:06:69:41:48:e1:c7:
ac:8e:2a:c0:ef:6b:9d:14:6c:59:b6:54:44:94:8b:6b:a5:8e:
4a:13:16:c4:0f:64:c4:2c:de:70:94:bf:b1:fb:5d:eb:f6:d9:
90:eb:0c:8e:06:24:f2:cf:3f:7b:fb:50:07:02:9b:e3:23:be:
0d:e9:6e:f5:dc:14:9b:95:ea:92:3d:e6:3b:a8:2f:f0:ae:bc:
34:34:7d:da:10:d4:e3:a4:9e:5c:b3:4f:8b:24:03:c1:75:5f:
89:4c:b1:b5:6f:48:5e:8a:26:a4:c0:0b:14:9c:85:f0:8c:d6:
5f:09:dd:a9:07:bb:ce:45:1e:6b:5f:29:61:32:98:00:4a:75:
f3:c0:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:28:04 2025 by rpki-client