Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e203130313033.roa
File: 3230382e39312e3139302e302f32342d3234203d3e203130313033.roa (raw, json)
Hash identifier: +wYVzxmXPkkrrVQjegU+Q97FIT4vxrrY8fpf4ToW1HI=
Subject key identifier: CD:83:06:85:3B:3D:86:DA:83:B6:85:68:DE:C4:24:F5:77:FF:5C:C6
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 6DFD1CB97F3DF61371E77CEDD3073BE263BEC5A5
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e203130313033.roa
Signing time: Tue 03 Sep 2024 05:44:55 +0000
ROA not before: Tue 03 Sep 2024 05:39:55 +0000
ROA not after: Tue 02 Sep 2025 05:44:55 +0000
asID: 10103
IP address blocks: 208.91.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:fd:1c:b9:7f:3d:f6:13:71:e7:7c:ed:d3:07:3b:e2:63:be:c5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Sep 3 05:39:55 2024 GMT
Not After : Sep 2 05:44:55 2025 GMT
Subject: CN=CD8306853B3D86DA83B68568DEC424F577FF5CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9e:80:41:c6:26:28:45:dc:59:84:6e:03:01:
f1:1f:cb:3c:32:c1:69:91:f4:28:58:b9:af:ef:d5:
0c:b8:32:b7:96:95:f4:93:aa:94:77:81:2b:e8:49:
f6:9b:8f:a6:38:61:9d:b1:7e:3d:41:af:36:58:24:
73:11:77:c4:26:d6:3f:cb:f2:47:10:72:d4:47:60:
be:64:38:99:13:ed:7c:06:9f:75:e9:8e:49:dc:59:
bb:d8:e4:57:57:87:3d:31:27:52:77:2d:b6:7d:5d:
5e:3a:26:fd:2e:61:40:05:ba:a5:cc:75:82:2c:16:
db:8f:bf:d4:23:5a:0b:2a:61:fe:f6:04:df:e6:46:
32:c9:4a:6b:4a:e2:02:94:ec:6c:6c:dd:02:2d:78:
49:3a:c6:f9:c7:5f:20:63:71:7d:5d:9c:37:59:98:
be:76:38:89:40:32:79:25:dc:4e:1a:fe:f2:a9:1f:
74:ae:c9:dd:d9:95:d4:e0:86:1c:48:d4:41:ac:d5:
29:50:b5:73:00:f1:68:5d:32:fa:77:7d:f7:55:dc:
c8:a1:75:d1:3e:bf:7b:cf:24:8d:e3:c8:6c:10:dd:
a7:c4:45:25:db:d5:e1:f2:1d:f1:0c:80:61:03:12:
c7:a0:48:be:6d:e3:50:c5:76:04:e2:28:ae:4b:66:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:83:06:85:3B:3D:86:DA:83:B6:85:68:DE:C4:24:F5:77:FF:5C:C6
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.190.0/24
Signature Algorithm: sha256WithRSAEncryption
92:79:02:d2:59:52:51:d9:37:98:f5:30:64:a7:a3:19:76:85:
05:6f:fe:db:aa:ae:fc:55:64:c6:a0:44:a7:cb:eb:57:78:dd:
a1:49:26:b3:a8:90:cd:d8:7e:37:f4:6e:0c:d2:64:b7:00:ea:
3d:cd:b6:69:ff:df:e8:84:d2:ab:90:c8:ac:c6:cd:7d:81:11:
de:95:ad:98:01:36:81:e7:4e:1b:02:d9:3a:57:30:54:b2:c8:
09:ab:72:bd:58:ee:2a:d5:61:46:b4:32:9b:c4:d9:ed:7e:34:
a0:f9:16:2e:92:90:78:29:46:c8:b1:a5:cf:11:86:b8:c4:6c:
7e:61:3e:1f:fe:f3:22:04:35:12:7d:5c:31:30:4f:51:0f:ab:
78:cb:29:57:07:24:d3:63:d1:78:0a:c4:ed:ea:e4:5f:e9:5d:
61:7d:e7:58:f1:c0:b5:41:c9:57:ef:c4:b4:1d:07:8d:45:a6:
85:f0:de:a7:4a:20:bb:65:eb:e5:e4:9b:0c:ac:63:c2:01:56:
8c:6d:d0:6a:07:13:28:c5:4e:f0:07:5b:06:d5:33:35:95:3b:
26:dd:90:67:cc:2e:35:45:9f:c6:6a:e2:ab:9d:f8:f3:c7:e5:
8d:39:79:46:e8:5c:b1:e2:5a:45:78:78:c1:55:18:75:5a:4e:
13:30:45:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 08:32:16 2024 by rpki-client on console.sobornost.net