Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e20333939343939.roa
File: 3137322e38322e38392e302f32342d3234203d3e20333939343939.roa (raw, json)
Hash identifier: cbtUKaQTFe6TJT7QXe6bCa6RnI/21LPAs3GqArGBoOg=
Subject key identifier: 83:25:65:40:82:80:21:F6:31:9D:D8:70:DE:83:14:6F:6F:C4:D6:BD
Certificate issuer: /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial: 21655C75C9002F426F9CB096FD5134C40A462FF0
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e20333939343939.roa
Signing time: Mon 14 Apr 2025 19:25:45 +0000
ROA not before: Mon 14 Apr 2025 19:20:45 +0000
ROA not after: Mon 13 Apr 2026 19:25:45 +0000
asID: 399499
IP address blocks: 172.82.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:65:5c:75:c9:00:2f:42:6f:9c:b0:96:fd:51:34:c4:0a:46:2f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Validity
Not Before: Apr 14 19:20:45 2025 GMT
Not After : Apr 13 19:25:45 2026 GMT
Subject: CN=83256540828021F6319DD870DE83146F6FC4D6BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d4:bc:06:21:d9:14:fe:ce:85:47:80:f7:f7:
df:e6:47:c0:90:ef:53:d2:67:4b:84:29:5a:25:31:
be:5c:e1:6d:4b:02:c0:f0:76:a5:a7:de:16:d0:99:
21:27:f8:00:22:0b:db:b7:dd:93:19:75:71:9b:12:
03:88:9e:2e:02:22:ec:4c:43:7e:9c:57:de:6e:6b:
5a:fe:f9:26:71:11:a3:d4:96:f8:77:12:3c:d8:25:
c3:5f:ed:3a:59:99:d0:74:f0:72:b1:a7:a2:d1:f8:
a2:7d:4c:40:f4:46:4a:cf:15:c1:55:a9:0a:88:0b:
7f:b1:58:2d:52:e6:76:c0:72:8e:53:99:79:7f:5f:
4b:b9:d4:8d:66:05:ec:9a:64:21:c9:77:5a:2e:62:
ae:c3:26:2c:e9:b4:f9:d1:1c:d6:88:c3:40:76:52:
f4:d4:f1:f0:4b:4e:eb:86:11:15:85:86:7b:80:44:
b4:d6:66:dc:24:c7:3b:16:7e:f5:d0:13:91:a8:ab:
55:56:aa:e4:22:6f:63:04:53:29:dc:6d:e9:a5:22:
b7:c5:73:a0:61:a7:40:48:5f:ec:62:46:31:37:e9:
c4:89:05:95:08:05:0d:1d:17:b7:2f:aa:47:41:0c:
ae:af:b3:2c:54:b1:2e:2e:5e:d6:2b:d0:9b:de:c3:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:25:65:40:82:80:21:F6:31:9D:D8:70:DE:83:14:6F:6F:C4:D6:BD
X509v3 Authority Key Identifier:
keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e20333939343939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.82.89.0/24
Signature Algorithm: sha256WithRSAEncryption
45:08:fe:53:c7:61:47:ff:fa:fc:f3:e6:26:72:f5:17:48:e0:
27:7a:81:77:26:e7:e9:a9:34:6f:11:37:d0:0c:b0:f9:e1:7e:
e3:db:6a:1e:e8:55:2a:54:1d:99:60:22:53:42:3b:c8:67:24:
95:97:23:8b:39:3c:30:75:de:b2:59:e2:c2:4d:bd:3e:34:d1:
20:ca:03:51:f0:9e:d4:b3:e5:83:2a:4d:2c:38:df:fd:d9:cc:
8e:26:98:e0:cc:d5:b3:fa:a5:b5:44:58:b8:9e:f0:f0:8f:76:
7e:5c:0e:71:ad:db:24:70:a5:eb:cd:d3:f9:77:eb:a8:df:f8:
fc:e7:91:15:88:b0:37:b6:e7:5c:dd:64:95:47:b8:71:59:eb:
57:b6:21:b7:34:5b:9c:e8:fd:5f:9a:5b:8b:71:2d:de:51:77:
d4:58:98:77:f4:68:ea:f2:5a:32:58:6f:14:43:a2:ea:11:71:
56:65:a4:8b:07:80:e7:4c:86:44:95:1d:be:38:d6:94:b8:1e:
10:38:25:88:3c:9a:3f:21:32:17:b7:f1:25:8d:9b:1d:ae:db:
51:81:d0:87:55:b7:10:d6:84:99:af:e9:0b:53:98:00:3e:9b:
11:89:81:94:8d:0a:67:9c:09:2b:2f:8a:53:be:82:f1:95:37:
f8:bb:26:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:48 2025 by rpki-client on console.sobornost.net