Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e20383334.roa
File: 3139392e3233312e36382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: xi7I5Z8NCogzJPSfLIxYwiIHWU/uH0+6PtvRrmfF6vY=
Subject key identifier: 82:5D:8A:E9:25:4F:B7:25:AE:24:B7:9E:85:68:AF:5A:F4:07:32:95
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 70A848983A76F3C012B556C25BCD4219EA0ECEC7
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e20383334.roa
Signing time: Tue 24 Dec 2024 10:59:00 +0000
ROA not before: Tue 24 Dec 2024 10:54:00 +0000
ROA not after: Tue 23 Dec 2025 10:59:00 +0000
asID: 834
IP address blocks: 199.231.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a8:48:98:3a:76:f3:c0:12:b5:56:c2:5b:cd:42:19:ea:0e:ce:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Dec 24 10:54:00 2024 GMT
Not After : Dec 23 10:59:00 2025 GMT
Subject: CN=825D8AE9254FB725AE24B79E8568AF5AF4073295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:1f:ff:b9:66:32:27:e0:e6:8e:ad:3a:d0:
b4:08:cf:4a:88:ba:1c:56:d3:d1:bd:7a:5b:65:1c:
bb:0c:f0:82:fe:96:3b:3c:9a:fa:6e:a6:e4:4e:c7:
70:93:3d:29:7f:c8:c4:25:b5:7e:07:f2:7a:40:5b:
a7:47:e2:81:d4:79:26:f4:25:16:58:63:d8:74:e6:
08:b4:00:78:2d:25:96:49:7a:82:e3:73:c5:5e:91:
0a:79:e3:ac:6f:ff:59:ae:53:60:df:db:76:f9:ac:
b9:3d:e0:f7:38:f9:44:5b:8a:52:a5:99:3e:65:e2:
8a:6b:3e:97:a8:a7:4c:01:a1:6f:8a:76:1a:16:a7:
f0:09:8e:58:a3:46:38:a4:29:ae:92:c6:2f:3e:cd:
48:a2:d2:ce:7b:e0:f4:0d:29:a2:30:96:8f:c5:35:
b9:9c:ae:d3:bc:89:b9:8f:04:76:17:89:9c:5c:36:
a5:54:43:f6:83:be:86:b9:24:67:1e:e1:6c:87:22:
98:83:30:6e:3e:7d:94:31:02:ff:f1:a2:a5:dd:30:
a1:4b:d4:fb:9c:88:cc:c5:0e:96:9b:37:e0:d7:a0:
74:5a:7f:b1:ca:8c:64:56:e7:e2:34:58:7e:b3:28:
a1:28:6c:d7:84:cc:49:ae:0c:fd:d7:d4:8e:44:06:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5D:8A:E9:25:4F:B7:25:AE:24:B7:9E:85:68:AF:5A:F4:07:32:95
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.68.0/24
Signature Algorithm: sha256WithRSAEncryption
62:31:ce:1b:10:5a:aa:35:76:e4:29:c5:9d:1e:50:9b:21:f4:
34:73:30:51:c1:3d:63:89:32:48:31:4e:84:de:6f:40:e9:82:
98:36:6e:19:46:ab:9b:01:c3:b4:b6:f5:cf:7c:8c:5c:62:99:
74:b2:96:06:9c:a0:b3:f3:40:8c:44:e3:95:87:be:36:7a:a7:
5f:1c:63:7d:0e:25:73:96:ff:34:9c:7f:5a:41:f7:a8:d5:2f:
8f:f3:a1:95:e9:96:cd:fa:cf:0f:d0:26:ec:96:b4:bd:6e:0a:
f9:2b:e2:62:f3:bf:52:bd:ae:04:54:97:12:fc:03:6b:47:6d:
0c:74:e9:d6:50:e9:90:94:48:85:c0:cf:02:2f:61:0a:07:55:
88:08:5a:a8:bb:5a:e6:7c:fb:84:09:fc:f7:05:7c:d2:09:6a:
eb:f6:22:f7:34:1f:01:08:a0:45:89:09:46:54:21:d9:b1:b7:
10:9f:99:e6:27:9c:12:ac:43:78:0e:77:57:e5:95:5a:04:57:
58:6b:f5:a5:46:8c:bd:13:bd:7c:70:59:51:68:a9:ed:e6:ae:
2e:0c:0a:e5:52:59:4c:1f:25:9b:81:76:6f:4d:41:2e:14:f8:
65:6e:b3:c5:5a:d2:c1:94:55:e7:92:0a:ff:ea:79:86:12:9d:
52:b7:08:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net