Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20323134303235.roa
File: 3139322e3230382e31352e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier: U0DaN+daFUWkRpNnDuKLe4JJ38hcoaffURuOLBK7FHE=
Subject key identifier: 50:87:15:C3:1A:06:D4:FE:FF:8E:11:5C:76:22:76:16:C1:F4:C5:03
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 7EC8E07DC4679F528859F9BF31B32733CE0584CD
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20323134303235.roa
Signing time: Thu 28 Nov 2024 12:00:51 +0000
ROA not before: Thu 28 Nov 2024 11:55:51 +0000
ROA not after: Thu 27 Nov 2025 12:00:51 +0000
asID: 214025
IP address blocks: 192.208.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c8:e0:7d:c4:67:9f:52:88:59:f9:bf:31:b3:27:33:ce:05:84:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Nov 28 11:55:51 2024 GMT
Not After : Nov 27 12:00:51 2025 GMT
Subject: CN=508715C31A06D4FEFF8E115C76227616C1F4C503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:02:d2:d0:28:79:96:f7:d0:87:a4:4c:29:
60:02:13:57:74:ad:c2:7c:66:48:93:0a:36:02:bd:
13:4f:27:72:af:18:54:4a:70:04:73:61:c4:48:77:
3d:ee:1c:a1:55:a1:d1:c1:0a:a9:63:09:87:44:3a:
63:f5:66:5f:47:70:65:2e:59:d1:3a:65:eb:ef:e3:
45:a4:10:b8:8d:22:6b:b5:99:2e:c1:c5:6a:0c:80:
7d:f2:a6:c1:6a:e0:cb:3d:d7:2f:7f:b8:b9:86:ed:
73:14:75:45:17:40:a4:23:08:06:2f:09:17:bc:90:
66:61:77:3a:81:9c:5f:03:c2:19:09:21:6d:31:7d:
e2:9a:94:39:70:26:ea:3e:f8:fa:e7:a9:8f:e3:0f:
98:09:87:d9:b3:a2:89:da:51:c0:86:7b:83:c7:7b:
d1:67:5c:68:d6:c1:5f:9c:62:c8:57:0d:8b:2f:f5:
cd:67:ba:64:07:82:6a:27:b8:88:b1:85:2a:7f:f4:
7c:2d:99:4a:92:dc:c4:0b:df:e9:0d:c3:a5:e3:99:
8e:a4:7c:8f:36:15:ae:59:01:b8:23:10:22:0b:bf:
16:ff:15:61:b1:e7:db:ec:ca:2e:03:e0:6d:a8:84:
72:5e:06:7b:cb:7b:b0:fb:a4:4a:f3:4c:46:cc:1a:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:15:C3:1A:06:D4:FE:FF:8E:11:5C:76:22:76:16:C1:F4:C5:03
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20323134303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.15.0/24
Signature Algorithm: sha256WithRSAEncryption
25:33:f0:c0:fb:34:a3:f7:74:48:1e:d1:55:47:4e:c7:58:96:
f8:6c:d8:e4:6b:43:46:c5:a6:cf:3e:58:99:37:e8:5b:90:59:
00:be:24:4d:b1:76:31:90:45:6a:50:1f:26:9e:6f:7c:fc:19:
fc:52:ac:da:1c:d3:46:66:23:de:29:e6:ff:88:72:54:e3:83:
2f:7e:5c:5b:54:ea:1a:1a:05:89:9e:6a:3d:78:25:fa:9c:84:
42:c8:60:12:45:36:9b:09:dc:59:9b:e2:25:42:d3:23:5e:d3:
70:d1:80:17:f5:15:6c:8e:81:b3:f1:3d:a7:53:85:d4:70:ee:
57:e9:f3:85:35:ab:92:b4:b2:2f:90:ef:20:c5:b9:3e:d6:5b:
f7:8c:f0:59:f5:c7:ca:f7:ac:93:67:ab:29:66:18:a7:c0:e9:
0a:1b:95:b5:90:77:b3:88:a4:ee:c4:f1:e9:03:98:52:8e:ea:
e2:3f:89:bc:28:c1:45:65:b9:64:8d:b2:28:0a:26:6c:be:12:
ff:ed:72:d2:43:5b:df:9a:82:62:bf:40:c8:4d:24:97:88:89:
45:bb:13:06:10:68:29:c5:f5:27:73:63:82:8c:07:79:2b:10:
38:4b:e7:fb:7a:cb:8d:23:6d:b0:b4:da:09:b9:2e:f3:ce:40:
a2:97:b4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:36:37 2025 by rpki-client