Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3137322e39392e3233332e302f32342d3234203d3e20333938333935.roa
File: 3137322e39392e3233332e302f32342d3234203d3e20333938333935.roa (raw, json)
Hash identifier: f1yX7bTe/0FKM7ST6ayVcuMFoQNorIXFNKvxsVmESU0=
Subject key identifier: 3D:40:7A:BA:5A:CE:04:45:6E:7A:F7:DB:06:68:68:77:CD:DD:C4:45
Certificate issuer: /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial: 589D51DF6F3914331EDC344063EFDC0BD90A7161
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3137322e39392e3233332e302f32342d3234203d3e20333938333935.roa
Signing time: Wed 04 Jan 2023 18:24:27 +0000
ROA not before: Wed 04 Jan 2023 18:19:27 +0000
ROA not after: Wed 03 Jan 2024 18:24:27 +0000
asID: 398395
IP address blocks: 172.99.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9d:51:df:6f:39:14:33:1e:dc:34:40:63:ef:dc:0b:d9:0a:71:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Validity
Not Before: Jan 4 18:19:27 2023 GMT
Not After : Jan 3 18:24:27 2024 GMT
Subject: CN=3D407ABA5ACE04456E7AF7DB06686877CDDDC445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:36:10:5f:5c:89:0c:2c:e8:63:e5:88:83:
f6:f4:aa:fc:f9:5d:ac:13:82:fb:66:d8:82:ba:ec:
80:88:58:d5:98:dd:ac:aa:86:7b:a1:ec:92:f7:6d:
dd:a6:e0:69:2f:12:eb:01:2a:2f:78:43:5b:96:9d:
d0:0a:10:d6:91:ba:09:3c:b8:e3:68:59:7f:cb:d6:
1a:e9:9c:46:55:4d:4e:04:42:7b:12:6c:a7:83:ad:
2d:60:fa:b9:13:b5:03:21:26:9b:c7:36:89:92:8b:
7b:a5:06:0a:64:61:00:1a:43:df:1e:b8:d4:7a:8e:
e5:31:8c:01:24:c1:68:1d:9c:95:1c:d2:09:f2:9c:
e2:46:84:8c:c8:df:e3:d7:5c:3a:5f:e2:e4:d5:96:
a8:95:3f:9e:d5:22:bf:d6:47:b6:4d:dc:54:b3:42:
94:a8:17:c2:c6:a7:8b:ee:e4:34:99:31:2f:d9:bb:
bf:b7:5c:1a:ae:30:42:a2:47:2f:e0:41:0f:0c:38:
1c:64:dd:51:a3:4a:2a:a2:9a:cf:06:fd:be:e8:29:
a0:67:5c:44:d8:98:1f:72:ea:c7:26:15:0b:2b:ba:
d2:ad:20:54:50:11:11:16:6c:42:c0:82:ff:74:98:
c9:1e:69:28:e5:12:7d:28:4b:ce:c0:aa:c2:9b:bd:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:40:7A:BA:5A:CE:04:45:6E:7A:F7:DB:06:68:68:77:CD:DD:C4:45
X509v3 Authority Key Identifier:
keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3137322e39392e3233332e302f32342d3234203d3e20333938333935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.99.233.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:32:2a:f5:3e:94:bf:52:1e:58:39:21:1c:f4:89:44:bd:bf:
1f:e8:d8:c9:a6:f3:6f:e5:90:03:4f:0a:b1:4d:22:06:a3:59:
d5:95:67:df:9c:23:e0:15:5c:ec:96:85:33:ed:e6:b4:e6:a5:
70:00:0f:ed:25:14:2a:19:02:7c:a8:e2:a7:21:fd:df:56:65:
42:5c:58:45:48:c7:f1:98:de:34:b3:2a:20:2e:32:3e:1d:a5:
b2:62:bd:0d:e3:38:c0:7c:54:83:dd:2a:a7:6f:9e:97:f3:b8:
29:8b:5a:dc:0b:a1:d2:da:35:37:52:c3:96:0c:5e:2f:52:4a:
ee:fd:8b:0f:be:e6:bb:af:98:c3:f9:08:2b:90:43:97:8d:c0:
b7:21:78:78:3e:e6:87:ff:c1:b7:69:a2:e1:0c:b0:c0:da:93:
ac:cc:8f:89:79:8e:e1:40:8d:68:5b:94:55:b3:6f:ff:a4:2e:
bd:9c:f3:91:43:eb:f5:43:15:b5:bd:0b:27:72:48:0f:dd:cc:
83:29:4d:db:2e:f4:de:04:79:57:29:26:5a:6e:4e:ef:f1:6c:
84:8c:38:be:48:9c:ad:ab:89:12:4a:97:20:83:75:35:68:2b:
b9:ab:a7:db:b7:c8:b8:c0:30:84:c6:c4:3b:3e:c4:44:a2:b2:
d0:56:97:29
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUWJ1R3285FDMe3DRAY+/cC9kKcWEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzhmNTcxY2Y5MmYyOTY5NTA5ZmZkZWZj
ZmZmNDQ5MzZkODczYmJkYTUwHhcNMjMwMTA0MTgxOTI3WhcNMjQwMTAzMTgyNDI3
WjAzMTEwLwYDVQQDEygzRDQwN0FCQTVBQ0UwNDQ1NkU3QUY3REIwNjY4Njg3N0NE
RERDNDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IU2EF9ciQws
6GPliIP29Kr8+V2sE4L7ZtiCuuyAiFjVmN2sqoZ7oeyS923dpuBpLxLrASoveENb
lp3QChDWkboJPLjjaFl/y9Ya6ZxGVU1OBEJ7Emyng60tYPq5E7UDISabxzaJkot7
pQYKZGEAGkPfHrjUeo7lMYwBJMFoHZyVHNIJ8pziRoSMyN/j11w6X+Lk1ZaolT+e
1SK/1ke2TdxUs0KUqBfCxqeL7uQ0mTEv2bu/t1warjBCokcv4EEPDDgcZN1Ro0oq
oprPBv2+6CmgZ1xE2JgfcurHJhULK7rSrSBUUBERFmxCwIL/dJjJHmko5RJ9KEvO
wKrCm72o9wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFD1AerpazgRFbnr32wZoaHfN
3cRFMB8GA1UdIwQYMBaAFH6b12PWGJJO7yk4woPME16QCDhTMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjdhMjhhY2YxMjFmLzAv
N0U5QkQ3NjNENjE4OTI0RUVGMjkzOEMyODNDQzEzNUU5MDA4Mzg1My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1hMWNkLTEyMjZlYTNjNDc5Ny83YWZh
ZjFjMWI3OGY1NzFjZjkyZjI5Njk1MDlmZmRlZmNmZmY0NDkzNmQ4NzNiYmRhNS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGY3
YTI4YWNmMTIxZi8wLzMxMzczMjJlMzkzOTJlMzIzMzMzMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzOTM4MzMzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGPpMA0GCSqGSIb3DQEB
CwUAA4IBAQArMir1PpS/Uh5YOSEc9IlEvb8f6NjJpvNv5ZADTwqxTSIGo1nVlWff
nCPgFVzsloUz7ea05qVwAA/tJRQqGQJ8qOKnIf3fVmVCXFhFSMfxmN40syogLjI+
HaWyYr0N4zjAfFSD3Sqnb56X87gpi1rcC6HS2jU3UsOWDF4vUkru/YsPvua7r5jD
+QgrkEOXjcC3IXh4PuaH/8G3aaLhDLDA2pOszI+JeY7hQI1oW5RVs2//pC69nPOR
Q+v1QxW1vQsnckgP3cyDKU3bLvTeBHlXKSZabk7v8WyEjDi+SJytq4kSSpcgg3U1
aCu5q6fbt8i4wDCExsQ7PsREorLQVpcp
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:22 2023 by rpki-client on console-ams.rpki-client.org