Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e20383334.roa
File: 3139392e3233312e36372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: jkJNW/BZmWC+dyYrgmEgQauOOGe1HZ6j6jCEatj5aIw=
Subject key identifier: B5:7D:4B:42:7D:10:76:A6:AC:5F:08:CA:B5:8B:D7:1E:34:10:77:E8
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: E5F4541850BAF400002F5EB9F2681D81779F2C
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e20383334.roa
Signing time: Tue 24 Dec 2024 10:59:14 +0000
ROA not before: Tue 24 Dec 2024 10:54:14 +0000
ROA not after: Tue 23 Dec 2025 10:59:14 +0000
asID: 834
IP address blocks: 199.231.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e5:f4:54:18:50:ba:f4:00:00:2f:5e:b9:f2:68:1d:81:77:9f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Dec 24 10:54:14 2024 GMT
Not After : Dec 23 10:59:14 2025 GMT
Subject: CN=B57D4B427D1076A6AC5F08CAB58BD71E341077E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:25:5c:cc:e1:d9:0e:cc:a0:60:cc:39:1f:
ee:5c:28:a9:ab:63:7e:bc:f1:c5:1d:29:f3:44:33:
e5:87:1a:f3:ad:1b:a0:05:55:8f:41:4a:b1:1c:8c:
30:c7:a0:77:95:20:ec:d7:9f:94:46:39:48:4e:1d:
9f:34:40:70:0a:8e:4f:f9:31:16:a9:c1:26:56:bb:
68:64:ca:06:c5:cd:c5:09:07:cf:ee:65:94:74:54:
a8:ef:ae:15:f6:b3:11:20:87:30:5f:89:eb:bd:b3:
f3:36:d9:b6:01:a0:f5:4a:2e:1c:b2:20:e4:27:e5:
91:db:45:96:84:78:71:c6:f6:69:33:08:92:b2:3c:
90:a4:a0:14:8e:a3:c2:13:6b:ea:cc:b3:e0:53:b8:
6c:06:bd:be:f0:7d:0e:96:44:cf:37:d0:7a:5d:3f:
0a:d6:86:47:07:77:8a:83:05:65:5a:91:f8:b0:a5:
4a:5f:5d:81:a5:e9:c4:df:b1:3d:12:96:02:d6:a1:
95:1b:11:98:5e:7e:b2:27:0f:c1:1d:30:25:f2:57:
a9:f0:1b:6b:f0:5b:bc:4a:9e:ea:cb:b7:20:d5:fd:
97:7e:f9:28:24:4d:60:6e:fc:7b:7f:c8:20:7c:41:
cb:03:31:1b:cb:37:1d:4f:08:12:71:12:8b:d1:79:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7D:4B:42:7D:10:76:A6:AC:5F:08:CA:B5:8B:D7:1E:34:10:77:E8
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.67.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a8:95:42:a6:1a:f0:85:ca:a2:7d:83:26:19:0f:e2:3c:b4:
c4:ab:61:ad:59:51:a9:5a:fc:ce:f2:57:2d:34:de:57:24:c8:
c1:33:b4:ff:8e:d4:78:c9:d2:11:85:9d:21:dc:88:6e:2e:84:
66:0f:98:85:25:e7:ff:c6:86:02:f8:bc:65:14:99:d9:da:9f:
81:c6:f7:54:6a:77:c0:7b:62:2d:ab:63:22:2d:07:dc:ef:35:
de:ab:78:14:a3:45:1a:0a:90:6d:f1:12:19:12:ee:5e:b4:ff:
2e:a0:d0:23:0f:99:6b:34:1b:45:39:4b:ee:27:e5:80:62:05:
68:cd:d3:6a:a1:2c:92:e6:cd:03:55:9e:c0:27:b1:d9:1d:ce:
04:22:6c:50:ea:01:9e:d8:8f:5e:69:3c:df:a0:48:63:d5:57:
ba:e2:12:1e:a5:e2:2f:be:b2:fc:70:09:99:39:d6:14:a7:30:
da:3d:ba:e5:55:0b:1d:f8:93:3c:52:7b:16:9b:db:bd:e7:bc:
e9:3a:a0:fd:90:85:9c:04:e4:d6:3e:f7:86:93:c0:6a:dc:54:
a7:d0:79:b8:0f:b9:74:7c:99:48:ce:c9:f4:e8:6a:db:fd:0e:
9c:88:f2:3a:b1:18:b9:d1:d7:1c:80:96:50:95:74:76:b2:19:
6f:56:03:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:29 2025 by rpki-client