Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/32332e3137322e3132302e302f32342d3332203d3e203437323732.roa
File: 32332e3137322e3132302e302f32342d3332203d3e203437323732.roa (raw, json)
Hash identifier: oIbOgfmWQctoMtNnGRDLP7Do5bQgfEKVLxsaTcPmQWg=
Subject key identifier: 8C:F0:BD:82:BD:3A:80:E7:9F:D4:62:66:9E:DB:23:C2:94:71:FD:9E
Certificate issuer: /CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
Certificate serial: 3F57D87F2DB89115D3FBD4DADDA7ECECC74EACC9
Authority key identifier: 19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/32332e3137322e3132302e302f32342d3332203d3e203437323732.roa
Signing time: Wed 02 Jul 2025 19:33:01 +0000
ROA not before: Wed 02 Jul 2025 19:28:01 +0000
ROA not after: Wed 01 Jul 2026 19:33:01 +0000
asID: 47272
IP address blocks: 23.172.120.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:57:d8:7f:2d:b8:91:15:d3:fb:d4:da:dd:a7:ec:ec:c7:4e:ac:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
Validity
Not Before: Jul 2 19:28:01 2025 GMT
Not After : Jul 1 19:33:01 2026 GMT
Subject: CN=8CF0BD82BD3A80E79FD462669EDB23C29471FD9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:92:53:2a:71:56:d9:5a:76:06:51:9c:3f:
72:01:fd:ad:41:a5:0a:ad:ca:2d:14:2c:ff:51:af:
53:0b:7e:54:ff:16:d8:a2:34:96:67:a3:5c:b2:b7:
da:a0:47:a7:9c:ae:0a:b1:61:e7:cc:f2:0a:79:de:
bf:9e:68:59:c0:1f:df:dc:48:55:78:50:c1:cd:d7:
aa:31:e8:cf:69:d0:c7:4a:f9:9c:b9:a1:0a:cb:e9:
0f:49:2b:45:b7:59:2e:36:5f:b3:5c:26:12:17:7b:
b3:ff:cf:07:8b:c0:8f:44:8b:d9:38:9e:ef:49:80:
31:10:c4:ea:ac:60:d0:f2:6c:60:d4:b6:46:21:4a:
c7:4d:2a:79:ea:00:67:34:e3:d4:44:5e:a0:58:9a:
db:06:5a:35:98:78:6b:c2:75:93:1d:e9:0e:a7:4b:
ca:0a:ba:5c:66:ac:cc:4f:0d:c4:74:d0:ae:92:a3:
4e:ba:3a:8a:6a:25:98:ff:99:96:0c:4c:94:94:91:
92:12:90:fb:2c:b1:9c:a7:3f:4a:bd:fd:55:b5:37:
9e:91:aa:6e:ec:0d:62:08:35:54:14:4e:fd:6a:12:
83:b2:16:0d:83:85:e4:f5:7c:4e:7a:cb:0b:ef:d7:
16:81:e4:bb:7f:22:c6:1f:8c:79:9b:0d:6a:67:34:
0a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F0:BD:82:BD:3A:80:E7:9F:D4:62:66:9E:DB:23:C2:94:71:FD:9E
X509v3 Authority Key Identifier:
keyid:19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/19FE4134530A27259A084190FB0C86EBC90E9709.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/32332e3137322e3132302e302f32342d3332203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.172.120.0/24
Signature Algorithm: sha256WithRSAEncryption
82:1d:c6:80:72:a5:2d:6b:39:e2:b7:e5:65:40:31:f0:5b:ec:
ae:6c:d0:8e:25:9e:31:cf:6c:b2:e7:67:3c:5d:38:82:78:0f:
e7:61:f9:0e:40:5c:b5:ba:e0:79:07:f7:3b:e5:48:96:bc:0e:
0a:a2:fe:9f:cb:94:37:0a:3b:e2:f8:a9:73:0c:3a:c3:66:58:
73:03:1f:07:f6:fe:50:94:9b:ca:29:88:93:a6:2b:53:65:22:
79:d0:b4:4b:33:d5:b1:0a:59:df:f8:d6:32:5d:e9:d7:59:d7:
5b:87:68:2b:a3:64:6f:dd:01:dc:31:c3:0d:f7:a1:a3:6c:37:
69:d8:da:fa:40:ff:fb:9a:00:d4:34:3b:63:e5:69:ad:43:62:
88:41:72:da:91:52:ff:9a:f9:b4:a4:f2:0a:ac:17:09:be:2c:
c3:11:d5:64:ea:09:f2:5e:42:7e:0f:5e:1d:22:1b:b8:8f:12:
d7:58:1f:7d:a3:88:7d:dd:3f:8c:6b:29:f6:6f:fe:91:c6:6e:
ac:f6:90:fc:97:77:1a:a0:4a:a9:65:32:fa:81:31:43:5f:0d:
46:2a:c3:3c:14:4f:1c:80:29:3d:60:1a:c7:52:3f:dd:12:c9:
0c:01:76:e5:bf:bc:e7:fc:f8:b2:00:bf:9a:53:4b:47:e4:ea:
6e:72:91:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:31:29 2025 by rpki-client