Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e203231383430.roa
File: 3230342e31342e37322e302f32342d3234203d3e203231383430.roa (raw, json)
Hash identifier: P+qH+xYZpofR6LJur9s2TvU+3hU3XJNK6fsHz/vQBsw=
Subject key identifier: 38:C3:BF:C0:20:14:F4:68:BD:85:A4:41:A9:96:FF:B4:20:8E:8C:C1
Certificate issuer: /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial: 4D20EDB44A9A3DB9D53CD055EACD2E9DFE62F420
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e203231383430.roa
Signing time: Fri 11 Apr 2025 10:21:10 +0000
ROA not before: Fri 11 Apr 2025 10:16:10 +0000
ROA not after: Fri 10 Apr 2026 10:21:10 +0000
asID: 21840
IP address blocks: 204.14.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:20:ed:b4:4a:9a:3d:b9:d5:3c:d0:55:ea:cd:2e:9d:fe:62:f4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Validity
Not Before: Apr 11 10:16:10 2025 GMT
Not After : Apr 10 10:21:10 2026 GMT
Subject: CN=38C3BFC02014F468BD85A441A996FFB4208E8CC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:f4:04:3c:03:a5:86:c9:97:fc:7f:e0:66:
a6:52:1c:73:df:68:fe:1d:86:70:4d:87:6c:3b:1c:
4d:f6:99:66:99:8c:3b:43:7f:ea:6a:27:ab:2b:c4:
bc:db:e3:77:b5:4b:4e:8f:e2:11:1a:13:73:13:64:
15:bb:51:f9:3e:1d:02:d9:ae:36:0e:9d:1a:c3:b6:
4e:df:68:d4:0e:f3:f9:77:a2:ac:22:0d:5e:f2:25:
ee:e7:19:fa:a0:65:31:8e:82:bb:49:b2:34:4f:ed:
0c:56:f3:f5:da:7c:fd:72:a8:91:27:7c:73:d8:13:
84:5c:68:04:06:fb:39:14:b0:1f:bc:c6:b3:5c:0d:
ca:8d:03:40:51:03:5f:43:1a:24:7b:da:aa:75:07:
89:6a:11:c8:08:ed:e3:12:d7:71:2a:bb:d4:e9:57:
9d:50:c8:41:bd:41:43:34:5d:1e:45:e5:a5:91:30:
fd:79:c5:43:1f:07:ff:49:11:85:1d:17:8f:e0:09:
05:0c:19:77:5d:c3:fa:9d:03:b9:20:57:24:e7:65:
b1:f2:74:a3:03:0a:d6:0e:ba:2b:bd:00:b2:0b:23:
af:20:5f:82:a9:3e:9a:d7:f9:45:aa:45:66:37:e0:
c6:82:d2:85:e4:2f:9e:3b:28:55:26:89:ad:90:42:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C3:BF:C0:20:14:F4:68:BD:85:A4:41:A9:96:FF:B4:20:8E:8C:C1
X509v3 Authority Key Identifier:
keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e203231383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.14.72.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:55:d9:49:b2:b6:aa:80:be:9d:f7:c5:e2:91:89:39:30:44:
47:bd:ca:ea:45:82:51:68:f8:40:bc:aa:0b:8a:7f:1b:a2:37:
3f:e4:0a:aa:84:3b:0f:1e:14:fb:27:36:a4:d3:79:83:de:bb:
ca:b8:e0:43:d8:4b:ba:3f:3d:a1:71:5f:32:34:49:90:89:50:
a7:b2:2d:e2:5e:5f:ae:24:cb:fa:95:77:12:fb:46:3d:bd:d7:
8b:85:16:e9:5f:9d:b9:f2:6b:b8:52:4d:e4:f5:10:2c:a8:0f:
68:d8:b5:e3:02:81:3f:2a:2b:74:a4:91:75:7d:69:cb:40:a1:
25:f9:0b:48:a9:06:40:3f:20:25:26:f0:41:8a:87:40:89:e2:
7c:5a:5b:89:b4:69:f8:3a:02:4d:a7:97:f6:f4:84:28:90:59:
cf:4f:39:28:7b:6e:cd:60:d2:fb:3a:b6:2d:30:f9:06:14:ac:
14:63:6e:1a:59:6b:9b:59:93:0e:da:e6:78:25:f9:97:3c:9b:
4e:b1:77:c4:9a:ae:9d:29:f8:46:2e:d8:20:c5:8d:dd:55:9f:
f0:dc:66:8e:92:3c:66:b3:8a:cf:c5:0c:5e:4e:c9:f4:18:bb:
74:ee:f3:2e:be:4f:ca:93:32:a6:73:aa:4d:27:a7:82:9e:ec:
fc:63:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:08:49 2025 by rpki-client on console.sobornost.net