Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20323135323837.roa
File: 3139392e39312e3130332e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: 65mmMrBN1W5f8+IPKVzTGWgBQhWdSSs/owPrqmbyu3s=
Subject key identifier: 39:4A:76:14:F8:DF:C6:E9:5B:8C:5C:FE:24:3B:DD:EC:9D:43:B8:54
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 754F5A388E9D03B3C60D5D547E915E85E14DD094
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20323135323837.roa
Signing time: Wed 27 Nov 2024 13:05:20 +0000
ROA not before: Wed 27 Nov 2024 13:00:20 +0000
ROA not after: Wed 26 Nov 2025 13:05:20 +0000
asID: 215287
IP address blocks: 199.91.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4f:5a:38:8e:9d:03:b3:c6:0d:5d:54:7e:91:5e:85:e1:4d:d0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Nov 27 13:00:20 2024 GMT
Not After : Nov 26 13:05:20 2025 GMT
Subject: CN=394A7614F8DFC6E95B8C5CFE243BDDEC9D43B854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:60:6b:fc:a5:75:fc:97:c3:e5:71:98:48:
2a:6b:29:af:3a:eb:3e:a6:06:a0:38:d2:a5:81:44:
e4:08:6f:e8:45:14:24:60:59:dc:dc:a3:13:7d:24:
e1:c7:23:7b:32:02:70:74:7a:8b:d8:26:43:c0:24:
80:f7:71:a8:2d:d2:5b:7b:07:b8:47:0e:5a:97:84:
41:e5:ba:5b:0a:8b:ed:f3:41:63:e0:9b:70:d8:ae:
4a:fc:00:b7:b8:0a:54:a7:5b:77:31:8c:39:37:32:
2d:f6:79:47:6e:8b:cd:9f:24:2c:d5:dd:d6:57:79:
93:45:14:58:4c:82:01:e6:35:d2:9e:df:f9:ac:45:
e5:21:7a:df:06:ec:c1:25:e8:5c:a7:40:b6:e2:ff:
5d:10:1e:53:b4:3d:3b:fa:81:57:61:8d:cb:3a:e0:
b4:c2:56:f9:e4:d2:98:9e:f0:54:6a:5e:d9:9f:8c:
b8:7b:de:e5:6c:64:b8:79:a2:3f:ec:40:11:fe:a9:
b6:e2:ae:c2:be:b2:d8:5c:fd:1c:f2:0a:39:f9:8a:
d2:ea:32:65:df:fd:c4:7c:d8:91:3b:20:94:fe:57:
60:18:02:96:6d:c5:ed:07:ca:c2:46:df:56:29:74:
af:b7:7a:42:1e:c8:92:24:cc:ad:67:f7:82:81:14:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4A:76:14:F8:DF:C6:E9:5B:8C:5C:FE:24:3B:DD:EC:9D:43:B8:54
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.103.0/24
Signature Algorithm: sha256WithRSAEncryption
24:df:f8:3d:6a:0a:11:a6:a5:c4:74:30:e7:0a:b0:5b:68:4c:
80:6a:12:a8:1c:74:f9:8b:dd:dc:25:44:3e:aa:85:91:2e:b7:
26:d3:86:e8:78:c0:9d:54:fc:12:26:db:45:f6:07:34:df:fc:
be:fe:0e:d8:bc:90:62:da:37:1c:81:8c:68:68:98:f9:5c:ff:
7d:b8:73:3f:b1:03:9a:37:08:20:ad:93:39:0f:01:84:90:2a:
aa:90:fa:77:17:e6:ef:8b:9d:7c:6f:63:c2:06:88:cc:84:5c:
f6:3b:90:f8:06:e9:bf:4e:e2:28:10:33:54:56:a9:97:79:5a:
2b:3b:34:69:89:46:62:d4:ea:1d:13:3a:a0:11:d8:c1:bc:af:
85:ad:e2:49:50:b7:4a:a0:6c:b9:70:57:33:2f:0b:0e:0e:85:
51:75:db:79:b1:d9:9e:48:ca:6b:2d:c8:f0:8f:4f:81:38:dd:
be:42:e8:83:53:7f:db:12:7a:98:35:7b:b2:af:57:0f:46:5d:
5d:18:31:f7:54:76:1e:83:08:63:da:63:04:c6:1e:aa:37:df:
42:96:a0:97:a6:82:fd:f3:0b:9c:85:68:69:fd:ab:89:b8:52:
28:56:fd:c0:e1:b1:f3:7b:87:48:92:d2:f5:08:98:4c:d1:2c:
06:26:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:40 2024 by rpki-client on console.sobornost.net