Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20313430393032.roa
File: 3139392e39312e3130332e302f32342d3234203d3e20313430393032.roa (raw, json)
Hash identifier: tvBRni8FseV4rQqH6xuOTbzJsqwlybIF/pt3e1WxRV8=
Subject key identifier: 37:88:A1:3C:AE:08:46:C2:80:FB:30:B2:BA:47:EA:60:D9:77:D0:9F
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 606273BE0F13EFC369D87F4CC10975E425107E68
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20313430393032.roa
Signing time: Thu 26 Sep 2024 08:48:59 +0000
ROA not before: Thu 26 Sep 2024 08:43:59 +0000
ROA not after: Thu 25 Sep 2025 08:48:59 +0000
asID: 140902
IP address blocks: 199.91.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:62:73:be:0f:13:ef:c3:69:d8:7f:4c:c1:09:75:e4:25:10:7e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Sep 26 08:43:59 2024 GMT
Not After : Sep 25 08:48:59 2025 GMT
Subject: CN=3788A13CAE0846C280FB30B2BA47EA60D977D09F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:bb:59:79:49:8a:7a:40:11:47:f7:2f:7f:
91:11:5c:1d:73:63:c3:80:27:02:68:51:77:67:ed:
f0:36:81:5a:16:9b:f9:5b:94:20:60:3f:5a:77:3a:
fa:ac:db:17:64:ba:cd:ac:b1:cb:76:d0:9c:91:cc:
81:9d:3b:cd:60:23:d9:97:96:28:03:98:bf:fb:fb:
39:51:75:cf:81:e2:64:41:da:6f:dc:ac:d3:1e:62:
ec:cd:99:29:a2:e1:28:4b:84:e3:57:4a:1d:49:57:
b1:32:c2:63:7f:62:d2:90:3f:58:da:b9:de:79:f0:
25:a7:43:83:49:16:0c:cc:60:c6:77:b8:05:21:62:
ea:75:67:c6:8e:f4:ac:7c:4c:62:42:7e:24:62:4d:
34:9d:01:f0:db:41:56:8e:3c:92:93:2c:29:a1:88:
ec:ee:79:0c:56:0e:55:3d:33:83:f9:fe:fc:4e:05:
e6:70:c0:e6:2c:61:71:96:2e:57:99:f0:0e:09:2e:
c3:37:11:bf:e3:f1:8c:6f:0b:de:ed:67:5d:ca:4f:
d1:1d:03:27:52:51:19:2e:4c:d8:90:e3:45:81:8f:
bd:4f:5d:d5:6d:da:13:ad:93:01:bb:e4:81:21:4e:
b2:21:90:84:80:9f:98:62:ca:00:e2:25:9c:3f:a7:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:88:A1:3C:AE:08:46:C2:80:FB:30:B2:BA:47:EA:60:D9:77:D0:9F
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20313430393032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.103.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d4:df:76:ef:41:1b:58:63:d0:be:e4:82:60:f0:08:a3:50:
6b:4e:d1:12:bd:df:6a:61:52:56:b3:79:c1:f2:0a:8c:a7:36:
15:ad:31:2f:10:f2:72:2b:fd:67:55:4d:29:18:23:b2:08:d5:
6e:1c:a8:ca:2a:1a:b6:2c:55:3d:2d:68:c8:ed:e3:df:c0:b5:
55:09:02:5e:4a:62:d3:51:a5:9c:72:a0:7c:fc:22:95:da:6b:
2b:77:80:ec:22:30:94:41:8b:0f:8d:ac:2d:83:3b:a6:46:51:
12:0e:af:d0:a2:c1:1c:84:93:30:18:4f:b2:2e:2d:90:6c:b5:
44:8c:e1:be:f5:89:60:c0:09:a4:2a:b3:8f:c6:95:1f:16:77:
d4:e4:f3:c0:5f:f2:60:21:11:7a:0c:23:bc:01:7f:74:dd:38:
13:5a:9b:dd:5b:38:5f:f9:aa:22:fb:e1:93:be:3f:5c:9b:51:
1d:9b:69:df:bb:69:8a:c6:f7:b5:cf:b6:0f:69:b9:9f:2e:8f:
62:3e:b9:d8:c8:a4:6f:a0:29:90:e8:18:de:1e:a1:18:61:eb:
84:4e:bf:a7:ce:af:46:a8:0c:40:ca:23:c3:6c:fa:cf:f4:07:
01:09:db:7f:cb:52:db:0c:62:da:65:43:5d:cb:60:5d:4f:ef:
35:32:1b:e8
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUYGJzvg8T78Np2H9MwQl15CUQfmgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjQwOTI2MDg0MzU5WhcNMjUwOTI1MDg0ODU5
WjAzMTEwLwYDVQQDEygzNzg4QTEzQ0FFMDg0NkMyODBGQjMwQjJCQTQ3RUE2MEQ5
NzdEMDlGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5G7WXlJinpA
EUf3L3+REVwdc2PDgCcCaFF3Z+3wNoFaFpv5W5QgYD9adzr6rNsXZLrNrLHLdtCc
kcyBnTvNYCPZl5YoA5i/+/s5UXXPgeJkQdpv3KzTHmLszZkpouEoS4TjV0odSVex
MsJjf2LSkD9Y2rneefAlp0ODSRYMzGDGd7gFIWLqdWfGjvSsfExiQn4kYk00nQHw
20FWjjySkywpoYjs7nkMVg5VPTOD+f78TgXmcMDmLGFxli5XmfAOCS7DNxG/4/GM
bwve7Wddyk/RHQMnUlEZLkzYkONFgY+9T13VbdoTrZMBu+SBIU6yIZCEgJ+YYsoA
4iWcP6eiMwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFDeIoTyuCEbCgPswsrpH6mDZ
d9CfMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTI3
MDRkNWYzMzJlYi8wLzMxMzkzOTJlMzkzMTJlMzEzMDMzMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzNDMwMzkzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1tnMA0GCSqGSIb3DQEB
CwUAA4IBAQBb1N9270EbWGPQvuSCYPAIo1BrTtESvd9qYVJWs3nB8gqMpzYVrTEv
EPJyK/1nVU0pGCOyCNVuHKjKKhq2LFU9LWjI7ePfwLVVCQJeSmLTUaWccqB8/CKV
2msrd4DsIjCUQYsPjawtgzumRlESDq/QosEchJMwGE+yLi2QbLVEjOG+9YlgwAmk
KrOPxpUfFnfU5PPAX/JgIRF6DCO8AX903TgTWpvdWzhf+aoi++GTvj9cm1Edm2nf
u2mKxve1z7YPabmfLo9iPrnYyKRvoCmQ6BjeHqEYYeuETr+nzq9GqAxAyiPDbPrP
9AcBCdt/y1LbDGLaZUNdy2BdT+81Mhvo
-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:21 2024 by rpki-client on console.sobornost.net