Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e20313734.roa
File: 3139392e3130312e3137312e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: t1IuRKZY/ftsZ8XqFWtEIewFbtOGVZb27UdXqxHBPuI=
Subject key identifier: 9C:8D:5C:78:81:41:5E:B1:43:14:4D:5E:81:D9:6D:D2:09:A4:89:3A
Certificate issuer: /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial: 1C1D1E9AA4115AAA3DEC1033802DB6D9471397D7
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e20313734.roa
Signing time: Wed 25 Sep 2024 16:11:16 +0000
ROA not before: Wed 25 Sep 2024 16:06:16 +0000
ROA not after: Wed 24 Sep 2025 16:11:16 +0000
asID: 174
IP address blocks: 199.101.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1d:1e:9a:a4:11:5a:aa:3d:ec:10:33:80:2d:b6:d9:47:13:97:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Validity
Not Before: Sep 25 16:06:16 2024 GMT
Not After : Sep 24 16:11:16 2025 GMT
Subject: CN=9C8D5C7881415EB143144D5E81D96DD209A4893A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:74:d9:df:2a:13:c1:34:2f:da:9e:f7:49:
35:6b:c7:ee:40:c7:ec:28:17:0c:26:fb:97:bd:ea:
36:d8:8b:23:be:34:7e:28:17:83:08:d3:36:b8:bd:
b1:6f:f3:04:39:6e:3b:f5:b3:5e:14:5b:e8:96:cf:
e9:2c:c9:39:d5:e6:12:8f:e6:63:1d:e9:ed:56:2d:
f9:96:35:08:cf:10:64:80:ba:97:74:a1:d9:ae:8e:
60:2a:bd:36:6e:27:82:a3:f9:41:b5:b7:d1:54:9b:
fc:a8:84:77:e9:88:39:02:c8:a7:4d:82:92:4f:78:
23:e9:b0:8c:55:4a:b1:d4:d8:18:db:e4:38:1a:8f:
81:0f:13:b3:c7:0f:e9:19:57:a5:dd:73:a5:72:06:
33:1e:c9:4b:6a:54:75:42:63:2e:bb:bb:f3:35:63:
52:3d:eb:29:09:e6:0f:fe:b6:69:50:ae:cc:00:74:
06:6e:02:2a:65:f8:26:86:f2:50:a6:f6:8e:26:01:
8d:d3:f4:69:92:49:b2:3a:75:6a:0b:3d:a6:b0:cd:
10:e8:dd:e6:fc:b1:ac:9c:42:5f:82:ef:a1:2f:c3:
21:43:fd:f2:43:3e:f6:86:30:7e:5f:d9:39:06:52:
26:06:c9:80:9b:ee:03:69:9d:1d:7e:d8:d6:c9:aa:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8D:5C:78:81:41:5E:B1:43:14:4D:5E:81:D9:6D:D2:09:A4:89:3A
X509v3 Authority Key Identifier:
keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.101.171.0/24
Signature Algorithm: sha256WithRSAEncryption
60:bb:b1:5c:c6:5d:27:b6:4c:5f:66:99:9a:3c:41:b5:27:80:
ea:d5:c4:86:5f:16:18:f6:e9:79:cc:5d:ee:d2:87:a1:40:11:
09:74:91:a5:01:01:61:a2:8a:0b:ac:85:df:75:99:29:5a:f1:
58:8f:9c:92:c0:a0:09:b1:a7:b8:a3:53:fa:b4:34:e0:1b:e6:
8f:e1:c7:90:25:ca:94:be:e8:f1:89:07:93:3e:8e:12:d5:93:
f8:3b:f0:00:6b:35:55:63:33:58:42:00:fa:f9:b7:46:01:06:
3b:2e:28:75:9d:21:51:65:f2:50:74:14:f2:33:fa:a8:f2:eb:
a7:22:1f:a2:77:be:ef:ca:1f:b5:b6:ed:76:eb:00:5b:58:db:
01:c9:bb:a4:46:65:47:0c:4c:03:c5:08:f5:9a:2c:f6:c9:65:
80:6c:37:bf:b5:1a:50:54:eb:7f:48:c1:66:b0:94:81:9f:c9:
fa:9b:50:5e:c2:45:71:03:7c:76:28:0c:53:df:e4:33:87:ae:
48:ac:80:c5:8f:48:70:31:b5:d7:8e:16:eb:5f:73:63:37:34:
0c:71:bd:d4:80:f9:eb:86:91:26:9f:b9:9f:8b:24:b4:28:45:
df:63:18:66:d9:76:fe:51:1d:dc:a5:50:10:9d:ab:6a:61:0d:
61:4a:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:08:49 2025 by rpki-client on console.sobornost.net