Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa
File: 3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: ndlkxjc2hSF0av1Sd1RqGsRZY5o8m8oYSRBMwXyUXyo=
Subject key identifier: 72:65:C6:B6:5C:C0:E7:E7:A2:26:AC:28:D0:46:14:92:C0:26:58:0D
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 7ABAF09D76538D18D9B9C57F5FE2EC71B9A22B42
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 30 Sep 2024 12:49:00 +0000
ROA not before: Mon 30 Sep 2024 12:44:00 +0000
ROA not after: Mon 29 Sep 2025 12:49:00 +0000
asID: 212238
IP address blocks: 192.109.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ba:f0:9d:76:53:8d:18:d9:b9:c5:7f:5f:e2:ec:71:b9:a2:2b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Sep 30 12:44:00 2024 GMT
Not After : Sep 29 12:49:00 2025 GMT
Subject: CN=7265C6B65CC0E7E7A226AC28D0461492C026580D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b7:cd:6c:e2:4d:3b:31:6c:ed:10:c6:6f:ba:
10:29:15:cd:cf:b0:69:32:41:a3:6a:2a:05:6f:15:
0d:50:2c:4d:3b:c5:39:2c:35:d1:77:36:59:ea:c3:
85:31:d6:aa:67:7e:80:3d:bc:cc:69:28:6e:cd:40:
d7:51:1c:4c:c6:7e:9b:a6:fc:2b:89:4c:14:0b:33:
3a:4d:2b:81:66:db:7e:cb:0c:c5:61:b5:b5:50:7b:
37:35:57:51:3a:34:16:be:b0:1d:67:6d:18:fe:29:
d8:1e:ff:68:1d:d7:cc:86:47:45:ef:b1:6a:19:45:
da:35:07:0d:15:67:03:c4:4c:d4:23:15:b0:a3:55:
5d:18:be:55:39:89:55:52:ed:df:11:2d:7b:bf:44:
45:c0:af:d3:21:4a:a9:db:77:2e:ad:e2:95:4f:a4:
d3:27:78:3b:0e:aa:ac:a0:ce:9b:5b:eb:e6:02:b9:
64:c6:ae:ba:03:7f:43:34:40:d4:97:89:5e:b8:fa:
48:ae:6e:35:12:c9:09:2b:5c:c5:0e:b1:0b:a8:94:
ed:b4:1d:9d:53:11:b4:23:38:05:fe:24:dc:6a:69:
3d:6a:85:2d:0a:8e:40:de:8b:21:84:8a:5f:08:39:
4c:d6:89:d0:2e:b7:82:bb:47:36:76:73:3b:40:6d:
e0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:C6:B6:5C:C0:E7:E7:A2:26:AC:28:D0:46:14:92:C0:26:58:0D
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.159.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d2:09:e0:32:b1:1a:72:eb:45:f1:0f:74:3e:5b:6f:b7:68:
c9:66:59:d6:5e:d5:fe:0f:b6:90:9e:13:9a:5c:fc:18:73:3d:
9e:de:2c:b9:7c:eb:f6:21:26:a6:93:98:ce:7f:c1:cc:59:b0:
aa:39:4b:c0:65:02:85:b0:d3:59:aa:21:ab:5e:1f:de:e8:d3:
55:1d:92:53:5f:f8:46:2c:05:1c:ac:4c:66:99:f3:2e:94:39:
6c:12:6a:e6:e2:78:4c:b8:ad:8f:cd:f5:cf:f9:d2:98:4a:f6:
53:88:2c:81:2b:f9:a3:e7:b1:c8:88:d3:f5:6b:01:60:c3:0b:
92:bb:aa:e8:dd:6b:27:5c:6e:d3:7f:44:77:ee:db:5c:a1:99:
af:86:f9:7b:ea:21:6d:71:5a:41:1c:4c:dc:90:e7:d4:44:a2:
f1:fa:b0:9d:c5:0c:2f:c5:5a:f5:45:c5:ee:70:3c:ce:c2:40:
85:93:95:b4:f3:d2:63:5a:f8:f9:39:df:ff:4b:e9:11:8c:4c:
7d:e6:7f:58:e5:f1:4f:f2:12:30:3f:6d:08:5a:fe:34:79:9f:
14:dc:e6:34:b2:d5:43:55:01:2f:cf:80:78:b9:04:44:c8:a6:
7e:8b:f2:f3:3e:d6:82:25:b7:c3:db:d1:ec:7f:4d:97:0d:ce:
59:9b:8a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:48 2025 by rpki-client on console.sobornost.net