Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20383334.roa
File: 3139392e39312e3130302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: r2HbaKiuk1cHnSXxfsv6mVxKZM6OqRh2AUDJeKz5gxU=
Subject key identifier: 3E:44:51:40:B0:66:72:9C:70:4B:C0:DE:23:37:22:A5:29:83:03:C4
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 5B5B6D601F3C0BD800055CC267A968643B06FD3F
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20383334.roa
Signing time: Tue 18 Feb 2025 12:16:18 +0000
ROA not before: Tue 18 Feb 2025 12:11:18 +0000
ROA not after: Tue 17 Feb 2026 12:16:18 +0000
asID: 834
IP address blocks: 199.91.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5b:6d:60:1f:3c:0b:d8:00:05:5c:c2:67:a9:68:64:3b:06:fd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Feb 18 12:11:18 2025 GMT
Not After : Feb 17 12:16:18 2026 GMT
Subject: CN=3E445140B066729C704BC0DE233722A5298303C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:1d:2a:2a:a9:71:47:4f:4f:c6:51:69:16:
35:55:7c:b8:63:8d:9f:6a:f3:06:bc:a4:31:1a:44:
b0:1b:5d:fa:53:5d:ef:b0:04:39:14:58:f6:b2:75:
c3:3e:2a:a1:7b:04:f1:b2:14:01:0b:e5:cb:3c:84:
a6:1b:32:37:de:54:23:50:3e:20:4c:aa:a8:d3:1b:
cf:b3:d6:9e:1c:41:dc:49:aa:c0:5d:87:ab:f3:c8:
77:42:63:b9:93:9c:11:3a:8e:a0:a9:28:d1:85:45:
ae:65:29:0f:e6:36:1f:a0:30:49:c7:f3:88:6f:16:
35:d5:b8:7f:0c:73:ff:ee:eb:f6:25:c6:dd:07:ab:
e5:87:4b:5b:e6:33:5f:89:4b:6b:01:00:1b:82:b6:
ab:a5:8c:fc:86:ff:de:b3:a8:c0:69:7a:54:cb:8c:
76:5c:72:5d:78:b1:b1:69:3a:97:75:bf:37:2f:0c:
69:3c:b1:6b:b8:51:83:63:dd:7f:78:f1:4b:11:cd:
9b:00:a1:11:6c:aa:98:89:09:2d:2b:cd:53:53:b0:
5d:bd:13:19:98:90:86:3c:bf:01:9c:0e:1b:f4:4f:
2b:f9:a7:dd:51:67:ea:3d:66:72:5f:e2:9e:42:8c:
f5:2a:9c:5e:7f:6e:17:e3:ae:38:7c:57:6d:e9:e0:
df:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:44:51:40:B0:66:72:9C:70:4B:C0:DE:23:37:22:A5:29:83:03:C4
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.100.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0b:3c:e3:bf:bc:69:32:08:3e:d8:d1:59:22:01:7c:19:7e:
25:a8:bc:68:08:fa:84:39:44:72:49:28:8d:23:29:1d:d9:94:
b4:db:58:c2:25:7b:92:b1:30:3d:cf:f3:48:70:36:80:56:6b:
6b:af:84:99:4c:45:c5:1d:a9:64:c9:e1:4e:14:b3:05:0e:3b:
ee:8b:31:70:08:91:13:75:0c:4f:67:b4:27:f6:8c:df:c5:d9:
a8:15:05:5c:4d:dd:ca:89:79:1b:96:04:12:e8:c0:89:0e:11:
18:81:e5:7d:9b:c7:4e:03:b9:ac:03:24:74:2f:b6:01:a5:89:
f5:03:3a:71:23:76:25:0c:4e:b8:c8:90:8d:4c:c3:ba:ac:ea:
69:27:29:30:b0:c4:6e:0f:9c:e8:57:9d:a3:0b:d6:a6:d6:e9:
cc:34:e7:44:62:10:ba:69:f9:67:3b:d0:02:a7:40:25:f4:f6:
dd:8f:16:37:3a:81:42:b5:8b:5a:f8:90:5c:3b:32:83:61:e5:
fe:83:6c:6a:fc:cc:e7:1a:45:ce:0a:f2:a4:11:ec:5d:ea:8b:
94:d1:db:3b:5a:da:63:ab:ef:e5:81:48:c9:c2:da:85:6a:85:
cc:76:52:5a:77:aa:af:a3:91:ba:07:31:d5:ac:05:eb:14:61:
40:62:87:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 03:29:12 2025 by rpki-client on console.sobornost.net