Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230382e302f32342d3234203d3e20343031323934.roa
File: 37342e3132342e3230382e302f32342d3234203d3e20343031323934.roa (raw, json)
Hash identifier: ii+VjITbEAMvn/DhV2r3lOuvGvpZL2o6/pjD8aogoJI=
Subject key identifier: 24:60:E1:FB:CB:30:53:13:B6:3A:78:0F:82:A3:37:C5:8A:74:45:81
Certificate issuer: /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial: 3FA852AA7712205C39A35F57859E37743F07DACA
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230382e302f32342d3234203d3e20343031323934.roa
Signing time: Sat 08 Feb 2025 20:46:41 +0000
ROA not before: Sat 08 Feb 2025 20:41:41 +0000
ROA not after: Sat 07 Feb 2026 20:46:41 +0000
asID: 401294
IP address blocks: 74.124.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:a8:52:aa:77:12:20:5c:39:a3:5f:57:85:9e:37:74:3f:07:da:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Validity
Not Before: Feb 8 20:41:41 2025 GMT
Not After : Feb 7 20:46:41 2026 GMT
Subject: CN=2460E1FBCB305313B63A780F82A337C58A744581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:2f:c6:68:6d:f5:2a:e7:09:5a:5a:dd:dc:
9d:b2:95:1f:aa:07:73:8c:53:38:0e:11:c8:6e:b3:
08:d5:7e:2b:de:40:b0:3a:1b:36:05:b4:e2:fc:a5:
3a:63:93:1d:ed:a1:cb:44:8e:ec:6c:8c:b7:3f:2d:
1a:e9:0a:1d:cc:3e:48:35:5b:0d:48:5e:59:4f:1a:
92:b5:8c:48:ed:bb:36:04:00:c6:e0:89:dd:45:a6:
27:cb:29:53:8b:4e:69:98:34:0e:7d:fd:a2:de:1c:
5c:ef:50:cf:4e:58:51:d5:c6:90:b1:3e:e9:f5:13:
e5:e6:33:1c:a3:51:77:ae:0b:96:22:58:07:92:93:
a6:3b:6b:2e:c2:de:8d:19:70:7a:ac:4a:96:49:2f:
4d:47:6b:09:02:09:aa:fc:c6:5f:c6:fd:ac:53:83:
d1:be:03:c7:02:ca:af:cb:45:a2:6e:86:8b:7d:df:
63:0a:a3:cf:09:a8:96:8e:a9:8b:90:ce:0f:2b:1d:
44:83:2c:ff:8c:76:c6:c1:e4:f8:b1:d6:4e:d8:a9:
de:6d:03:a4:11:7c:be:b4:d2:0e:4c:3b:6f:95:b6:
1a:57:45:40:70:f2:67:3d:5e:d9:0a:01:52:84:3f:
7b:e5:5c:cb:02:ff:55:e3:b1:b4:0f:f4:0c:98:bb:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:60:E1:FB:CB:30:53:13:B6:3A:78:0F:82:A3:37:C5:8A:74:45:81
X509v3 Authority Key Identifier:
keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230382e302f32342d3234203d3e20343031323934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.124.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:aa:24:10:40:20:15:84:3c:f4:d4:5d:b0:4b:d0:06:7c:c6:
46:4d:3a:44:7b:d4:b1:31:e2:65:02:58:11:f8:79:69:91:3d:
e1:45:2e:df:1b:00:1e:ba:0b:e4:42:a4:14:16:1a:9b:9e:94:
03:c7:40:6b:0f:a3:18:ea:6d:5d:ae:7d:bc:6a:d7:ec:6a:14:
bd:3c:67:fa:74:d3:67:9e:99:0a:4b:4d:ab:ba:86:f3:ae:d9:
a5:80:0b:77:26:cf:e1:53:d8:41:eb:f8:26:1e:f6:8f:07:2f:
5d:f5:5f:f1:07:a9:ad:d9:77:f1:a0:14:a4:7b:e6:cd:65:8e:
ed:3b:9d:b5:43:ea:5f:4c:8d:8d:ed:5b:7c:4d:b0:46:08:f4:
a3:89:cf:cd:56:d0:53:1f:c1:b6:fd:07:68:87:50:e0:d5:55:
dc:b2:ca:33:2f:a1:ee:7a:ce:ff:49:04:f9:80:20:ae:fa:38:
c2:bd:98:3d:43:85:7d:ef:67:3a:e5:18:c0:c7:ac:0a:a1:10:
59:d1:ec:13:a1:50:29:e0:d6:55:c5:d3:30:c5:ee:77:6a:f7:
0c:0f:b3:80:ee:ae:ed:b9:af:3f:6e:d6:b5:7d:5e:7d:23:11:
07:69:99:4b:39:94:5f:db:24:c5:b8:66:8a:4f:56:86:c0:23:
eb:21:a2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:47 2025 by rpki-client on console.sobornost.net