Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa
File: 3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: CE7MBl4bLtNauWg/iAYQC5rr+yKumdH0ROyuzOv9xX0=
Subject key identifier: 29:AE:CC:87:ED:DE:A9:79:ED:3F:BF:90:74:AC:E0:1F:8D:6A:73:D3
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 7BB149864F19D34599DCD768B2C4F0B901A86A07
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa
Signing time: Mon 20 Jan 2025 01:45:57 +0000
ROA not before: Mon 20 Jan 2025 01:40:57 +0000
ROA not after: Mon 19 Jan 2026 01:45:57 +0000
asID: 61138
IP address blocks: 128.254.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b1:49:86:4f:19:d3:45:99:dc:d7:68:b2:c4:f0:b9:01:a8:6a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Jan 20 01:40:57 2025 GMT
Not After : Jan 19 01:45:57 2026 GMT
Subject: CN=29AECC87EDDEA979ED3FBF9074ACE01F8D6A73D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:c2:12:44:45:e6:e7:be:ea:ec:51:a3:38:
8f:08:51:7d:71:4a:01:61:f3:0c:db:1f:b2:8c:c9:
12:2e:f6:c1:7b:7b:96:e8:d2:5e:df:14:19:73:65:
15:4c:f6:d9:2a:41:ba:2c:e7:0c:a3:64:cf:6d:e2:
cc:63:55:25:63:e6:88:ab:0e:02:0e:14:ee:fa:02:
6b:f9:07:03:66:23:ae:61:f9:ff:1a:8d:23:31:d3:
26:ca:d7:2a:4d:df:dc:a0:b7:0f:49:63:2f:06:5f:
64:c7:35:94:29:95:04:ce:c2:1b:4d:98:8d:52:09:
5c:93:b1:21:eb:1d:c2:64:87:d1:e6:13:96:5c:40:
fc:77:eb:25:e7:a8:e3:97:f5:2c:25:28:ae:c6:11:
c2:8c:f3:1f:11:c1:04:f1:b9:ac:cb:b8:0e:dd:2b:
82:c7:30:45:3f:f7:90:11:c0:65:28:d6:ac:9e:35:
25:50:a5:89:b8:1f:2e:11:eb:ff:77:66:c0:0d:18:
c8:0e:43:97:e0:cd:a6:cf:bc:9e:20:6c:b7:14:9e:
55:84:06:ae:f7:8b:6d:8a:b0:d9:7c:06:ba:aa:0c:
15:39:4a:5d:b0:2e:7e:3f:98:7e:08:32:f4:88:46:
92:f6:16:83:67:33:e9:07:60:09:f2:b0:3a:6b:fe:
bd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AE:CC:87:ED:DE:A9:79:ED:3F:BF:90:74:AC:E0:1F:8D:6A:73:D3
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.254.204.0/22
Signature Algorithm: sha256WithRSAEncryption
be:e0:ba:ef:0d:0a:fe:24:59:3d:19:25:59:dd:40:ae:2c:e2:
d8:4d:0b:8b:dd:a3:f2:d4:b1:b9:de:64:bb:f9:aa:de:b0:96:
fa:62:33:ae:7a:63:17:d0:4f:29:42:7e:bb:f1:a3:c4:ea:7c:
90:dd:ca:ad:87:bd:38:fe:7e:27:a2:d4:b4:50:41:42:c6:3c:
4f:32:aa:03:7c:70:70:03:3e:74:da:18:3a:f5:67:51:dc:7f:
91:b2:ba:78:8c:54:96:b6:a7:9c:d3:a7:df:93:41:b6:6a:ec:
31:d9:dc:d8:21:74:9c:8a:07:bf:29:29:10:57:ca:c6:63:2c:
22:25:54:82:10:0d:e1:b5:0b:f6:15:d4:d3:be:83:46:82:c0:
ec:d1:45:dd:0f:b7:26:b3:ac:8b:4c:ed:93:25:33:0c:b4:f3:
b8:2c:0b:ca:b0:d0:40:de:bf:9c:a4:03:19:68:8f:6f:a9:66:
84:e9:d8:ab:e2:72:24:9f:70:05:a3:26:43:fe:ab:4f:af:38:
d2:c3:4c:a2:b4:0e:c8:43:22:cc:44:bf:c6:c8:b0:b3:83:88:
f0:6c:b5:73:25:1f:18:f3:9f:ec:36:aa:77:81:7d:89:7a:9a:
52:58:31:03:89:57:6d:d7:06:a6:ea:29:31:fd:08:52:02:b9:
b7:92:20:e2
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUe7FJhk8Z00WZ3NdossTwuQGoagcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjUwMTIwMDE0MDU3WhcNMjYwMTE5MDE0NTU3
WjAzMTEwLwYDVQQDEygyOUFFQ0M4N0VEREVBOTc5RUQzRkJGOTA3NEFDRTAxRjhE
NkE3M0QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfXCEkRF5ue+
6uxRoziPCFF9cUoBYfMM2x+yjMkSLvbBe3uW6NJe3xQZc2UVTPbZKkG6LOcMo2TP
beLMY1UlY+aIqw4CDhTu+gJr+QcDZiOuYfn/Go0jMdMmytcqTd/coLcPSWMvBl9k
xzWUKZUEzsIbTZiNUglck7Eh6x3CZIfR5hOWXED8d+sl56jjl/UsJSiuxhHCjPMf
EcEE8bmsy7gO3SuCxzBFP/eQEcBlKNasnjUlUKWJuB8uEev/d2bADRjIDkOX4M2m
z7yeIGy3FJ5VhAau94ttirDZfAa6qgwVOUpdsC5+P5h+CDL0iEaS9haDZzPpB2AJ
8rA6a/69DwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFCmuzIft3ql57T+/kHSs4B+N
anPTMB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMxMzIzODJlMzIzNTM0MmUzMjMwMzQyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzNjMxMzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP7MMA0GCSqGSIb3DQEB
CwUAA4IBAQC+4LrvDQr+JFk9GSVZ3UCuLOLYTQuL3aPy1LG53mS7+aresJb6YjOu
emMX0E8pQn678aPE6nyQ3cqth704/n4notS0UEFCxjxPMqoDfHBwAz502hg69WdR
3H+Rsrp4jFSWtqec06ffk0G2auwx2dzYIXScige/KSkQV8rGYywiJVSCEA3htQv2
FdTTvoNGgsDs0UXdD7cms6yLTO2TJTMMtPO4LAvKsNBA3r+cpAMZaI9vqWaE6dir
4nIkn3AFoyZD/qtPrzjSw0yitA7IQyLMRL/GyLCzg4jwbLVzJR8Y85/sNqp3gX2J
eppSWDEDiVdt1wam6ikx/QhSArm3kiDi
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:18:56 2025 by rpki-client on console.sobornost.net