Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32312d3234203d3e20383334.roa
File: 3139322e302e31362e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: rB/58XQdlKxJEbjyepvlYSwZSg7hegVMORj4hhP1oAg=
Subject key identifier: 3A:0B:44:32:65:E8:D5:5A:B7:DF:49:06:E8:1C:F5:E4:0A:C7:A2:36
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 1CE5AF61157EEAB5F310D6B12C27967124446E48
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32312d3234203d3e20383334.roa
Signing time: Tue 08 Apr 2025 06:55:58 +0000
ROA not before: Tue 08 Apr 2025 06:50:58 +0000
ROA not after: Tue 07 Apr 2026 06:55:58 +0000
asID: 834
IP address blocks: 192.0.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e5:af:61:15:7e:ea:b5:f3:10:d6:b1:2c:27:96:71:24:44:6e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Apr 8 06:50:58 2025 GMT
Not After : Apr 7 06:55:58 2026 GMT
Subject: CN=3A0B443265E8D55AB7DF4906E81CF5E40AC7A236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:03:75:ed:54:85:e9:0f:22:cd:60:a5:6b:
de:cd:ac:60:d7:1a:ce:b8:e0:dc:ab:f1:28:bc:48:
1a:27:a8:fc:36:f3:ab:ad:9b:f7:ab:4d:e1:57:fe:
3c:2f:b9:e3:00:34:6c:0a:54:d0:e2:61:1d:47:fe:
5b:4c:85:76:0e:40:29:4c:6c:86:94:1e:a0:5e:d9:
ef:ec:93:39:36:13:db:cc:b4:5a:c6:28:23:a9:fb:
18:63:6a:0e:96:15:4b:3c:d7:a6:17:2c:d9:60:36:
13:9c:9d:fb:95:51:67:d3:c1:e4:d4:3e:03:57:ca:
f2:61:57:c8:e8:14:cb:7c:a6:a4:1e:da:80:24:ee:
a8:d8:ec:48:bb:15:c7:48:f3:8c:ed:79:6f:c3:79:
e0:d4:66:91:6f:26:b0:6c:90:83:46:78:d9:73:cd:
9a:4e:26:2b:6f:fd:0d:a9:7d:b3:1a:11:5a:9d:55:
dd:b4:22:3e:68:a9:3a:81:02:5a:c3:ed:9d:73:5d:
0d:cb:ff:f3:82:6c:e1:66:7e:97:f5:e6:3c:5c:cd:
29:85:13:02:0d:67:0c:fa:ad:4b:b4:85:95:af:0f:
37:00:87:37:bf:a8:be:81:0a:4a:39:dc:96:82:dd:
17:aa:c7:6e:bd:26:ae:ca:ad:21:48:b7:e6:3e:16:
68:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0B:44:32:65:E8:D5:5A:B7:DF:49:06:E8:1C:F5:E4:0A:C7:A2:36
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.0.16.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:08:63:e0:44:41:19:cd:cb:82:98:7f:cc:7c:9f:8e:61:f4:
16:65:66:cb:a1:44:d4:51:28:21:45:38:04:f9:ea:e8:bc:0c:
f0:4c:8e:1e:21:43:f4:a1:85:d5:55:c8:39:82:03:30:61:3c:
69:30:8f:7d:47:89:c7:c7:89:1c:9c:3e:1a:98:5c:d2:a6:d5:
a0:7d:0a:d2:e9:b4:a8:dd:36:ff:48:b2:d0:6b:1a:6b:12:9f:
ed:f7:67:07:48:89:96:cb:51:c8:da:ee:ab:aa:4b:1a:d5:6a:
74:7c:85:f1:70:7d:d6:28:e0:b4:4d:30:36:0a:e7:a4:54:f5:
85:08:b9:e6:bb:aa:da:64:18:80:54:38:8a:8a:b8:4c:5f:ef:
5c:77:55:29:d5:f9:74:62:76:4d:0d:9c:ed:b8:74:97:34:0d:
03:d4:3b:bd:3b:0a:05:5c:5d:0d:db:82:6f:0f:d9:93:f5:66:
9f:ef:d3:c7:cd:31:7f:07:1b:f1:14:67:d1:97:52:11:73:1e:
92:8c:14:33:60:7a:ae:ba:5f:20:5d:56:aa:14:e2:c4:29:91:
73:9e:e9:c3:58:7e:d8:95:55:e0:e4:6e:fc:c7:10:d6:8e:76:
88:f8:1b:a7:9c:d6:99:1b:da:11:05:ec:6e:50:89:83:93:d3:
d7:02:96:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:47 2025 by rpki-client on console.sobornost.net