Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e20313337353137.roa
File: 3231362e3135312e3136302e302f32342d3234203d3e20313337353137.roa (raw, json)
Hash identifier: Clde0/dHtcGVKH4rjkmndu5iS1tfU3ZCZXsTbyWJ6es=
Subject key identifier: 33:FA:94:48:37:DE:74:9C:19:91:56:E5:9E:2E:76:B3:6C:FF:95:52
Certificate issuer: /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial: 2DBA15FC839DDE3F7AA77CCF0665A2566901EA72
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e20313337353137.roa
Signing time: Tue 15 Apr 2025 14:06:40 +0000
ROA not before: Tue 15 Apr 2025 14:01:40 +0000
ROA not after: Tue 14 Apr 2026 14:06:40 +0000
asID: 137517
IP address blocks: 216.151.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ba:15:fc:83:9d:de:3f:7a:a7:7c:cf:06:65:a2:56:69:01:ea:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Validity
Not Before: Apr 15 14:01:40 2025 GMT
Not After : Apr 14 14:06:40 2026 GMT
Subject: CN=33FA944837DE749C199156E59E2E76B36CFF9552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:a3:87:ee:22:d8:ae:b7:8a:5f:5d:a9:39:
44:b4:ff:4d:3d:12:bd:f8:15:1e:03:1e:2c:1d:f4:
2c:8d:74:cf:05:f1:d9:a4:1f:86:b8:b3:3d:ef:40:
39:49:86:bf:02:25:b9:c7:56:39:da:cd:b2:33:68:
af:50:c0:16:8d:c3:7b:c3:1b:a7:c1:97:bf:c8:5a:
7c:9f:98:7a:48:9e:fa:1e:a6:8f:12:f4:e9:ef:9d:
9f:71:e1:b3:77:d6:9c:b4:15:fd:96:9c:60:eb:36:
e0:cd:78:20:76:70:5b:5f:ee:17:34:70:bd:91:5b:
6f:96:29:f6:87:79:e9:61:28:cc:18:5a:52:29:32:
f8:e4:22:ba:09:79:85:39:be:40:00:03:53:1e:e0:
e5:91:fd:fa:c9:52:db:d5:5b:e7:ed:dc:03:fb:3d:
e3:58:91:9e:d5:ca:c0:fd:a3:02:a2:9c:82:62:a8:
81:a4:10:c4:3b:08:f8:fd:02:e6:d7:20:73:80:1d:
c5:11:e5:8e:ae:21:7e:bc:bd:5f:3d:3a:e8:b8:96:
ff:7b:a6:24:f2:c3:f9:68:93:3b:21:f8:29:eb:e8:
d5:a8:6c:13:02:dc:d0:de:47:a6:62:cb:3e:ed:d2:
e7:03:e0:c1:51:34:0d:a6:96:18:f7:af:13:c2:ac:
7d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FA:94:48:37:DE:74:9C:19:91:56:E5:9E:2E:76:B3:6C:FF:95:52
X509v3 Authority Key Identifier:
keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e20313337353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.151.160.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3a:29:22:0a:d1:d6:1d:fb:a2:63:2e:83:27:a3:c6:94:1b:
98:90:4d:5c:3a:0b:69:43:40:88:61:75:94:ba:d7:1d:82:54:
f4:8d:37:47:e3:64:27:26:f0:6a:db:e1:8d:33:c0:f5:ec:08:
ba:a9:71:24:3b:e2:81:d8:85:d9:5b:1f:8e:e0:a3:1e:75:61:
82:aa:b5:55:1d:b4:ea:ce:61:f0:39:f9:9e:10:70:9e:c5:79:
fe:8a:28:e8:eb:2a:84:fa:34:41:5d:3f:99:5d:c6:7f:14:50:
e5:19:68:b6:e5:21:09:7c:d5:e4:e1:cc:c4:7b:7e:56:ba:05:
03:4e:89:9f:a8:27:d6:54:68:c9:1b:e6:52:cd:c8:3f:0d:b5:
f3:23:96:11:db:2f:82:aa:63:51:33:f5:f8:7e:f2:6d:fd:9c:
de:ab:c4:a5:b6:d4:bf:b1:56:28:3d:97:21:bf:34:43:48:01:
57:e6:a2:a2:bc:52:9e:75:6a:ff:99:4f:bb:fd:12:49:f6:a8:
ef:e7:7d:63:cd:2b:34:d9:31:42:38:82:9a:fb:e6:4a:75:85:
2f:9b:46:d2:83:fc:ca:91:f1:a2:04:10:ce:81:05:3a:4f:67:
c5:bf:36:39:db:6e:76:28:d8:e7:b3:14:52:66:34:bb:02:1a:
42:af:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:18:56 2025 by rpki-client on console.sobornost.net