Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32302d3230203d3e203131323832.roa
File: 3139322e302e31362e302f32302d3230203d3e203131323832.roa (raw, json)
Hash identifier: /ePkpbtjKD9dg38ms0Nq4MriOZ/hss8d/qT+nva10E8=
Subject key identifier: 03:AE:2A:8C:BB:AD:8A:48:0C:8A:76:6C:30:F5:40:B9:02:8E:52:11
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 793DD50F5858414B1E29CFBCFC011EA4D4D5C9E4
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32302d3230203d3e203131323832.roa
Signing time: Mon 23 Dec 2024 19:52:25 +0000
ROA not before: Mon 23 Dec 2024 19:47:25 +0000
ROA not after: Mon 22 Dec 2025 19:52:25 +0000
asID: 11282
IP address blocks: 192.0.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:3d:d5:0f:58:58:41:4b:1e:29:cf:bc:fc:01:1e:a4:d4:d5:c9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Dec 23 19:47:25 2024 GMT
Not After : Dec 22 19:52:25 2025 GMT
Subject: CN=03AE2A8CBBAD8A480C8A766C30F540B9028E5211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:ee:c9:4e:f2:96:73:e1:50:63:49:55:40:
e5:20:22:c0:ca:03:86:7b:ba:08:81:b3:7f:a1:bf:
89:21:3b:56:f1:6a:ed:49:0e:19:52:ac:08:9b:cd:
6f:bd:21:36:33:72:4e:ee:ed:a3:8b:4c:52:73:e0:
8c:ca:0c:d4:20:22:bd:61:64:32:fa:0f:e5:8e:79:
a6:71:de:95:de:fe:a8:98:42:7b:85:ad:d6:62:b4:
f0:c3:bf:c3:49:18:8c:bb:8c:e0:18:e3:96:5f:4e:
0b:30:bd:00:6f:b1:44:6c:d3:bd:4f:06:f8:e8:1f:
23:15:ba:88:22:52:3b:c3:41:8b:4b:25:c5:e2:3a:
65:74:d2:a1:e0:c2:fe:12:64:1c:a0:49:ff:ac:55:
73:c1:09:7c:e7:bc:f8:e6:13:72:2c:bc:5a:bc:d5:
57:54:ff:f2:03:bb:63:8a:61:fa:c2:d1:00:9d:22:
d1:79:6a:e4:6f:39:6b:64:3d:ab:c1:cc:1c:66:32:
9f:98:23:c8:c6:25:aa:9a:06:62:a1:2e:22:3d:7c:
89:24:03:03:a8:33:14:bf:a2:2b:af:51:61:63:2a:
a9:8c:be:1f:0a:31:a8:64:43:20:4b:2c:1c:ac:24:
57:3f:16:10:d9:5f:02:d9:9a:58:7c:5d:21:38:d3:
cf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AE:2A:8C:BB:AD:8A:48:0C:8A:76:6C:30:F5:40:B9:02:8E:52:11
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32302d3230203d3e203131323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.0.16.0/20
Signature Algorithm: sha256WithRSAEncryption
19:b0:e8:1d:46:60:c9:67:b0:26:ba:d5:ca:b9:45:18:b2:7a:
c8:bf:ab:f0:b9:cd:12:57:f2:93:52:d0:81:e2:e5:12:bc:97:
4e:72:8d:22:62:c0:33:0c:59:78:f4:a3:9b:7b:56:a7:08:9a:
a7:44:b5:99:78:f7:98:47:ab:53:bc:ec:26:66:0c:93:8a:36:
a2:f1:f8:5c:35:95:b9:fe:ff:6d:97:a9:69:f8:11:5a:71:a7:
62:bc:0c:9e:b5:da:f5:15:98:a2:64:9b:c8:71:12:df:22:e1:
81:fa:3f:17:86:b4:57:48:09:01:1b:5d:03:f5:f3:27:f8:1e:
a1:65:77:ca:24:f9:7d:af:a2:e9:2c:2f:11:22:a4:a7:ef:5a:
7d:10:11:54:18:ff:3f:c1:11:9e:9e:87:33:1b:6b:e7:ab:91:
02:ec:6a:9c:e7:03:3d:84:6e:2d:f5:d5:37:00:18:02:1b:e4:
89:27:b3:5a:ae:76:22:94:dd:df:ae:08:f0:1d:28:f2:ea:6a:
82:fe:93:27:25:cd:db:24:f4:09:52:4e:28:93:83:4d:28:a1:
72:d4:93:b3:51:6d:0a:30:c1:a4:2a:e3:80:49:5f:93:e2:10:
70:2c:64:11:23:f5:d0:bb:df:66:27:f5:9f:32:82:43:ee:96:
60:df:1c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net