Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e20383334.roa
File: 3139392e3233312e37302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: AlPc/Bjd683NSLLUfzLLyGwg/wGukaQ6HewTf02Vyxo=
Subject key identifier: 09:29:71:87:29:8A:01:68:B2:D8:2E:F9:33:DD:4C:51:3E:7A:4A:93
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 2BF4E74D49C9F8A7C3B2E167FD30250C6DCB77C4
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e20383334.roa
Signing time: Tue 24 Dec 2024 10:58:53 +0000
ROA not before: Tue 24 Dec 2024 10:53:53 +0000
ROA not after: Tue 23 Dec 2025 10:58:53 +0000
asID: 834
IP address blocks: 199.231.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f4:e7:4d:49:c9:f8:a7:c3:b2:e1:67:fd:30:25:0c:6d:cb:77:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Dec 24 10:53:53 2024 GMT
Not After : Dec 23 10:58:53 2025 GMT
Subject: CN=09297187298A0168B2D82EF933DD4C513E7A4A93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:35:ae:80:17:7b:e9:d6:c6:65:81:41:b4:
30:cd:8d:3b:8e:03:16:00:f1:1c:e9:b9:42:f7:15:
be:44:be:9e:6f:45:b3:78:65:55:66:25:7d:e9:df:
86:70:51:23:bd:c3:13:05:89:00:fa:49:a4:5c:70:
49:f4:71:7c:b1:49:1a:5e:91:e5:a6:cf:34:9b:82:
0c:2d:bb:c1:55:3d:61:35:1e:73:45:a8:c0:50:7a:
59:60:b4:35:02:28:dc:16:6f:0a:5f:35:bc:68:1c:
52:de:cf:f4:72:97:11:b0:74:ec:7a:b8:cc:76:44:
5c:24:87:97:52:3a:cc:1f:e4:64:da:e7:6b:3a:9d:
a5:40:f4:63:be:fc:96:36:f6:fc:1d:2f:9c:6f:8f:
bb:5c:85:81:e9:ab:04:cd:f8:90:71:32:6c:5d:78:
ef:94:ae:a6:ea:9f:fa:8a:b2:73:ac:33:4e:fa:79:
5e:2b:7b:41:78:a0:9d:98:f3:a6:c6:db:40:27:a4:
17:39:05:ba:bd:8e:fa:5b:3f:f8:96:43:f3:b8:79:
63:29:2b:a2:31:b1:5d:76:12:59:06:a7:80:87:0f:
e0:38:36:4c:59:86:41:2b:50:ec:10:59:fa:04:a8:
c4:f4:56:49:62:14:ba:5c:f6:42:c0:b1:9e:bc:19:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:29:71:87:29:8A:01:68:B2:D8:2E:F9:33:DD:4C:51:3E:7A:4A:93
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.70.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:93:35:4d:c7:82:d2:36:c6:aa:6c:4b:8c:34:ad:62:8c:8d:
2e:a0:3c:bb:88:1c:64:c9:44:aa:57:2f:51:14:cd:61:c4:cd:
ec:94:28:5f:0f:ba:5a:7d:94:5b:0d:c7:bf:0f:47:cd:9d:fb:
62:99:e1:b9:fc:cd:71:6f:65:f2:ee:ab:42:d2:f4:a8:59:3f:
d2:cf:76:01:83:a2:fe:cd:8e:a4:07:69:48:14:76:25:db:a1:
43:3e:53:b8:5d:b4:22:c6:31:bf:96:7f:2d:23:e9:fe:2c:75:
61:63:07:dc:ff:41:ea:93:c5:93:27:b2:57:14:9d:7b:19:a9:
16:9f:16:fb:1a:a4:a2:e3:c2:47:03:86:85:ec:60:8c:94:a4:
a7:b4:f6:1e:cf:0d:80:5e:c9:57:a0:a8:a8:ba:46:87:60:59:
9a:92:e5:c3:8c:2e:3e:0e:34:fc:d6:d6:80:36:0f:74:c3:cc:
d2:96:c7:dd:1c:9c:8b:c3:b0:46:46:1d:d1:05:18:42:85:3f:
a5:54:a0:19:85:bf:ea:5b:9f:9c:c1:9c:8b:66:ee:da:bf:09:
35:cd:a8:61:4a:36:a8:12:41:66:9e:ad:55:5c:f5:20:c9:c1:
04:09:4d:fd:6c:1a:97:d7:c9:5f:07:4b:23:27:ad:f5:9a:aa:
69:c8:93:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:41 2024 by rpki-client on console.sobornost.net