Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e20383334.roa
File: 3139392e3233312e36362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 43hxU5NgNmQdS0OcujH7j8wJ8iT415Zt2yC4kxAS3bs=
Subject key identifier: CD:99:30:FB:35:8E:C5:20:38:0E:08:9D:1E:66:3B:CF:5A:E0:CA:9F
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 71FE0CA98C8DC015FD2F3E853708DA0B79AE8C9D
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e20383334.roa
Signing time: Tue 24 Dec 2024 10:59:08 +0000
ROA not before: Tue 24 Dec 2024 10:54:08 +0000
ROA not after: Tue 23 Dec 2025 10:59:08 +0000
asID: 834
IP address blocks: 199.231.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:fe:0c:a9:8c:8d:c0:15:fd:2f:3e:85:37:08:da:0b:79:ae:8c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Dec 24 10:54:08 2024 GMT
Not After : Dec 23 10:59:08 2025 GMT
Subject: CN=CD9930FB358EC520380E089D1E663BCF5AE0CA9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:66:5b:7d:4c:6b:73:e5:27:a5:e9:89:a7:
bd:5a:02:2b:48:b3:74:9d:3d:24:ba:07:e2:5b:1f:
9f:5d:a8:ff:b8:76:6a:15:db:35:41:30:6d:e1:f8:
f1:c5:3a:8d:df:a2:b7:f0:86:f2:22:71:2e:11:28:
f6:c9:b1:5b:47:96:9d:dc:91:71:27:0a:80:07:07:
d6:af:e5:1e:58:44:26:6b:ee:a6:e6:91:9e:dd:db:
ca:46:5d:ae:3c:fb:95:b7:53:77:7c:5a:99:53:5b:
03:e4:bf:5b:cc:69:9a:cb:f6:0f:05:1d:55:be:56:
0a:6b:b9:07:55:58:b2:61:d0:2a:45:1d:ae:5b:f9:
22:69:a7:ef:19:d0:18:56:80:45:fa:a4:79:ba:d8:
b2:d2:d4:50:e6:30:e0:5f:4a:cd:45:37:73:c1:08:
c3:cd:68:f8:c6:6b:a6:c0:f4:6d:00:41:e6:77:73:
6a:2c:e2:09:65:af:7c:9e:ee:c3:bc:7a:c9:4a:bf:
68:e2:b6:72:83:00:ad:b1:93:a1:50:60:95:a1:8f:
8f:30:f9:22:f2:39:58:0f:b2:e7:a8:aa:b1:94:bf:
b3:7c:b7:3e:6f:32:55:17:c3:45:06:aa:de:33:6d:
ad:52:a7:ee:ba:25:12:b0:7a:3b:00:a9:4b:45:3e:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:99:30:FB:35:8E:C5:20:38:0E:08:9D:1E:66:3B:CF:5A:E0:CA:9F
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.66.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:8f:6d:86:ce:6b:33:75:47:73:40:8b:18:88:8c:b1:f3:5f:
14:af:30:9c:f3:5c:2a:ca:ae:30:9a:db:15:6d:71:fb:72:f9:
f5:35:bc:a1:d6:c7:1d:4b:fb:1a:35:7c:07:66:84:ae:2e:55:
40:89:d8:6d:d3:d8:0e:20:63:94:72:d8:68:c4:67:17:a0:55:
1f:e4:9a:bd:0b:c2:68:08:0d:f9:b7:47:f2:ca:09:06:71:1b:
98:c6:96:cb:2f:22:03:89:75:75:22:c7:f9:15:f9:31:c2:4c:
58:1f:c8:9b:e5:ae:f9:3f:7e:31:49:20:4a:02:85:a3:29:03:
25:77:9f:c8:e2:a4:74:5d:4b:73:85:09:84:c7:f6:74:50:6a:
0b:39:0a:ab:c4:3d:aa:ff:29:96:2b:e9:f6:bb:00:72:6e:13:
80:64:c1:09:02:5f:cb:cd:61:5d:8f:27:02:9f:e1:79:ee:1b:
cd:3a:5c:31:c0:f4:0f:fb:7c:38:fb:ce:9d:2f:67:42:a9:45:
62:33:f8:cf:14:f9:72:ff:6b:dc:4d:10:09:28:bb:e8:b7:bd:
bc:72:b6:26:d0:2d:53:a7:6c:39:89:94:28:af:1f:ae:ea:5d:
0a:8a:be:e9:44:ec:4f:aa:b4:75:68:c5:68:9c:0b:eb:b8:b6:
e9:04:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:57:29 2025 by rpki-client