Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f1ee568b0a17/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa
File: 32332e3134322e32342e302f32322d3234203d3e20323035363633.roa (raw, json)
Hash identifier: EVHcv0PUNOxq5/Dns+6A41bmq82fPlZMlHTdqs+w7kM=
Subject key identifier: C1:52:CB:7C:7C:88:74:7B:DF:1F:3C:CA:EF:66:AB:91:77:5D:5C:2D
Certificate issuer: /CN=6916ebca5871d7f8806c45997a4b03dfa6f58ff7b97ddd0d8a
Certificate serial: 7F17679FFB04015E60A9D52AE42F52216470CA71
Authority key identifier: 37:1B:53:09:88:6D:59:77:85:A9:2F:76:8A:03:AC:28:F8:79:E4:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5871d7f8806c45997a4b03dfa6f58ff7b97ddd0d8a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f1ee568b0a17/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa
Signing time: Thu 08 Dec 2022 13:32:08 +0000
ROA not before: Thu 08 Dec 2022 13:27:08 +0000
ROA not after: Thu 07 Dec 2023 13:32:08 +0000
asID: 205663
IP address blocks: 23.142.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:17:67:9f:fb:04:01:5e:60:a9:d5:2a:e4:2f:52:21:64:70:ca:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6916ebca5871d7f8806c45997a4b03dfa6f58ff7b97ddd0d8a
Validity
Not Before: Dec 8 13:27:08 2022 GMT
Not After : Dec 7 13:32:08 2023 GMT
Subject: CN=C152CB7C7C88747BDF1F3CCAEF66AB91775D5C2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:12:37:67:a6:29:f7:45:9d:64:6e:23:73:
8a:bd:43:05:26:6a:61:aa:77:49:f2:97:b4:e6:b1:
9a:5d:d0:60:44:3d:e0:eb:8e:06:21:9e:54:6c:0c:
b4:e9:dc:f6:be:b7:27:a6:80:d3:8e:f2:63:f1:ac:
4b:b8:ec:1f:b0:ba:2d:7a:77:24:3c:84:d4:95:22:
52:da:35:0e:6e:6b:01:1b:a4:f1:2d:9e:2c:ca:80:
0e:99:2a:df:57:b3:c2:0e:a7:93:f8:5e:9d:05:c4:
7f:19:7b:4c:51:af:b7:96:46:40:63:bd:3a:03:1a:
ba:4e:71:ad:0d:cd:43:cd:f7:5d:32:f6:b6:12:75:
14:c5:58:9d:7f:bb:d2:66:41:a3:10:68:ba:b6:c7:
a7:35:85:d3:f8:c7:7a:ab:b7:b5:66:10:6f:d3:74:
71:58:21:c6:0c:67:0e:8d:2a:45:4f:f7:c7:17:9f:
8e:0c:0c:5f:94:f7:41:97:a3:da:9b:85:3d:69:aa:
cf:2e:33:00:4b:ac:89:fe:20:f7:28:82:9e:37:e0:
27:c6:3b:8d:9a:00:40:f1:1d:ec:67:89:af:04:ef:
a3:b4:3b:b0:9a:22:b2:28:06:0b:30:43:b6:59:45:
75:83:b5:84:f7:fc:ac:fb:7e:28:34:7c:fc:69:09:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:52:CB:7C:7C:88:74:7B:DF:1F:3C:CA:EF:66:AB:91:77:5D:5C:2D
X509v3 Authority Key Identifier:
keyid:37:1B:53:09:88:6D:59:77:85:A9:2F:76:8A:03:AC:28:F8:79:E4:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f1ee568b0a17/0/371B5309886D597785A92F768A03AC28F879E4E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5871d7f8806c45997a4b03dfa6f58ff7b97ddd0d8a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f1ee568b0a17/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.142.24.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:b7:9e:dd:c5:91:33:63:86:7b:a5:0a:38:28:c2:ae:9d:53:
b2:a1:74:c5:63:53:50:77:8c:e9:0e:1e:55:c3:62:6a:cf:be:
92:74:58:b6:4d:37:d9:1c:f9:4f:96:fa:1a:ee:52:c5:77:fb:
5f:2d:bf:d0:5d:ef:8a:e6:93:dd:1a:f1:f3:46:ac:11:8e:c4:
a5:f2:50:fd:2a:41:8c:5b:ee:2b:a5:b7:d9:c7:de:ec:44:a1:
fe:82:c7:86:a4:36:f0:fb:bd:3d:b7:e3:c4:fa:67:bd:4c:a1:
58:6d:60:ec:ca:9c:1f:96:42:3f:9e:6f:db:6a:b6:01:96:1f:
71:b2:19:6d:6c:bf:ad:9e:86:7f:09:d5:74:37:81:cc:78:1a:
51:2d:91:5f:d6:51:05:e7:88:38:5c:a5:d4:02:b2:09:d2:c4:
de:b1:6e:6e:a1:3f:40:8d:3d:e9:71:9d:ad:5e:0d:2c:06:0f:
9a:ac:c1:56:83:2b:97:4d:96:a2:a7:5d:29:36:f7:07:49:21:
46:01:c3:82:1b:22:9b:9e:db:9a:40:b2:63:2a:eb:8d:bf:91:
1c:fd:84:69:f1:6e:0a:ac:fb:0e:03:e6:38:7c:ff:8b:48:a7:
e1:c0:39:e7:dd:30:b7:ef:fe:da:06:c9:ed:73:67:b6:f0:35:
81:93:b9:d5
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUfxdnn/sEAV5gqdUq5C9SIWRwynEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjkxNmViY2E1ODcxZDdmODgwNmM0NTk5N2E0YjAzZGZh
NmY1OGZmN2I5N2RkZDBkOGEwHhcNMjIxMjA4MTMyNzA4WhcNMjMxMjA3MTMzMjA4
WjAzMTEwLwYDVQQDEyhDMTUyQ0I3QzdDODg3NDdCREYxRjNDQ0FFRjY2QUI5MTc3
NUQ1QzJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcQSN2emKfdF
nWRuI3OKvUMFJmphqndJ8pe05rGaXdBgRD3g644GIZ5UbAy06dz2vrcnpoDTjvJj
8axLuOwfsLotenckPITUlSJS2jUObmsBG6TxLZ4syoAOmSrfV7PCDqeT+F6dBcR/
GXtMUa+3lkZAY706Axq6TnGtDc1DzfddMva2EnUUxVidf7vSZkGjEGi6tsenNYXT
+Md6q7e1ZhBv03RxWCHGDGcOjSpFT/fHF5+ODAxflPdBl6Pam4U9aarPLjMAS6yJ
/iD3KIKeN+AnxjuNmgBA8R3sZ4mvBO+jtDuwmiKyKAYLMEO2WUV1g7WE9/ys+34o
NHz8aQnPbwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMFSy3x8iHR73x88yu9mq5F3
XVwtMB8GA1UdIwQYMBaAFDcbUwmIbVl3hakvdooDrCj4eeTiMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjFlZTU2OGIwYTE3LzAv
MzcxQjUzMDk4ODZENTk3Nzg1QTkyRjc2OEEwM0FDMjhGODc5RTRFMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzMwOThmYzE0LTI5YzktNDkxNi1iMDNhLWFlNGEyYWYxMDFjZC82OTE2
ZWJjYTU4NzFkN2Y4ODA2YzQ1OTk3YTRiMDNkZmE2ZjU4ZmY3Yjk3ZGRkMGQ4YS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGYx
ZWU1NjhiMGExNy8wLzMyMzMyZTMxMzQzMjJlMzIzNDJlMzAyZjMyMzIyZDMyMzQy
MDNkM2UyMDMyMzAzNTM2MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAheOGDANBgkqhkiG9w0BAQsF
AAOCAQEAKree3cWRM2OGe6UKOCjCrp1TsqF0xWNTUHeM6Q4eVcNias++knRYtk03
2Rz5T5b6Gu5SxXf7Xy2/0F3viuaT3Rrx80asEY7EpfJQ/SpBjFvuK6W32cfe7ESh
/oLHhqQ28Pu9PbfjxPpnvUyhWG1g7MqcH5ZCP55v22q2AZYfcbIZbWy/rZ6GfwnV
dDeBzHgaUS2RX9ZRBeeIOFyl1AKyCdLE3rFubqE/QI096XGdrV4NLAYPmqzBVoMr
l02WoqddKTb3B0khRgHDghsim57bmkCyYyrrjb+RHP2EafFuCqz7DgPmOHz/i0in
4cA5590wt+/+2gbJ7XNntvA1gZO51Q==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:00 2025 by rpki-client