Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32342e302f32312d3234203d3e203534303034.roa
File: 3139322e302e32342e302f32312d3234203d3e203534303034.roa (raw, json)
Hash identifier: yfM/J0UttVTAlQIrHCjx/UTzySvnQ/QVvqnBooBTCWM=
Subject key identifier: 0B:9D:C9:5E:70:AE:5B:C1:E3:73:46:48:09:2C:5A:24:44:02:F9:3A
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 4932D36023902A3AA52C2E9BC9790995B2227172
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32342e302f32312d3234203d3e203534303034.roa
Signing time: Tue 08 Apr 2025 06:55:16 +0000
ROA not before: Tue 08 Apr 2025 06:50:16 +0000
ROA not after: Tue 07 Apr 2026 06:55:16 +0000
asID: 54004
IP address blocks: 192.0.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:32:d3:60:23:90:2a:3a:a5:2c:2e:9b:c9:79:09:95:b2:22:71:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Apr 8 06:50:16 2025 GMT
Not After : Apr 7 06:55:16 2026 GMT
Subject: CN=0B9DC95E70AE5BC1E3734648092C5A244402F93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:87:00:f1:26:9e:13:39:46:66:11:0f:b2:
41:bf:c7:16:57:92:56:f0:1a:b9:da:17:90:cc:3c:
54:82:88:ad:45:89:86:45:76:83:52:37:ec:2c:a8:
44:38:fb:94:80:39:70:09:9a:e6:b2:30:85:f0:5b:
fd:e1:4e:52:40:69:c1:6b:f1:4a:88:11:c2:87:1f:
ef:f7:c6:c5:d4:c7:bf:f7:df:b2:df:7b:b1:6c:84:
fc:3e:db:26:70:56:0f:a7:3f:5d:68:cc:7c:fe:db:
0c:1d:02:d5:05:6b:a5:2c:ce:e4:ef:2e:75:cc:40:
ca:3c:98:36:e9:f7:af:ea:22:7b:27:8f:9b:8f:39:
f5:97:76:5d:ef:1f:5b:82:ae:12:db:08:1a:31:4e:
1a:86:5d:0d:de:8c:f0:af:c2:ce:69:3c:59:b4:91:
02:2c:ca:27:cd:ad:23:40:6f:92:f1:f2:d7:72:b8:
b0:87:6f:9e:d1:bf:77:cf:bf:a5:f7:73:ae:65:2e:
34:e7:8b:72:35:c2:e9:13:2c:8f:7b:86:80:e4:c4:
14:44:ae:e9:33:f8:ab:ac:2e:ab:57:79:40:3b:2c:
5a:00:50:36:4e:58:f2:14:8b:5d:e6:61:09:58:87:
e1:a3:e7:f3:17:e5:dd:ae:22:99:ec:3d:51:5a:bd:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9D:C9:5E:70:AE:5B:C1:E3:73:46:48:09:2C:5A:24:44:02:F9:3A
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32342e302f32312d3234203d3e203534303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
00:eb:d4:01:70:4f:a9:f9:3c:80:6b:bd:c3:5d:d7:ec:84:05:
4c:99:0e:a2:50:a1:0d:c5:59:de:bc:6e:80:cd:82:9d:75:86:
82:7b:a6:61:11:f6:e5:dc:60:d0:50:a9:89:0a:38:0b:4f:4d:
9b:97:2e:1b:8d:f9:b2:d3:74:e7:86:c9:17:58:28:c5:ca:55:
17:c4:49:db:f0:a1:27:70:18:be:c9:0b:7b:f0:5d:84:41:5d:
bf:96:47:85:c4:06:13:9c:5e:32:51:7f:a5:d9:fb:7d:ef:c0:
25:6a:09:12:c3:03:76:9f:f3:50:d7:d0:04:cc:de:42:2c:c2:
3f:bd:e6:b4:f2:bf:7c:d0:54:7f:67:68:f6:33:19:34:7f:14:
35:49:b1:7a:15:8e:a7:dc:ac:dd:59:a1:0c:d7:e6:a3:f3:d1:
7e:f4:91:43:6b:8c:28:1f:96:1d:7c:6d:d6:07:0c:0d:e5:ee:
7a:04:67:50:22:27:f2:96:b2:b7:68:55:65:3a:ad:8d:f5:9b:
ea:d0:dd:88:f3:1b:30:6f:99:b9:ef:6c:79:9d:18:19:d8:91:
26:62:d7:1b:01:75:05:83:f9:40:ea:a4:ab:32:7f:27:32:81:
86:47:94:b8:23:3e:33:15:3e:0d:14:24:1d:e9:7b:77:77:cc:
b5:7d:d3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:47 2025 by rpki-client on console.sobornost.net