Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3230342e31302e3139342e302f32342d3234203d3e203631303033.roa
File: 3230342e31302e3139342e302f32342d3234203d3e203631303033.roa (raw, json)
Hash identifier: G7fDrDXgudaGuMj9J3ktCx2PUuL5R1fVIP+bdVgleEg=
Subject key identifier: C0:85:30:27:C2:55:40:B4:FB:6A:2D:46:76:8B:0B:71:7C:DB:E3:3E
Certificate issuer: /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial: 225E6179A8830406A5B91EBEDA731685857F0673
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3230342e31302e3139342e302f32342d3234203d3e203631303033.roa
Signing time: Wed 05 Apr 2023 05:19:54 +0000
ROA not before: Wed 05 Apr 2023 05:14:54 +0000
ROA not after: Wed 03 Apr 2024 05:19:54 +0000
asID: 61003
IP address blocks: 204.10.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:5e:61:79:a8:83:04:06:a5:b9:1e:be:da:73:16:85:85:7f:06:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Validity
Not Before: Apr 5 05:14:54 2023 GMT
Not After : Apr 3 05:19:54 2024 GMT
Subject: CN=C0853027C25540B4FB6A2D46768B0B717CDBE33E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:e6:a4:87:d3:58:18:20:69:7e:3b:14:71:
30:ef:86:f5:d0:b5:4f:25:bf:b0:29:6d:11:00:f4:
bf:1c:3a:b2:38:2f:5c:6c:fc:da:24:60:c0:71:36:
c3:18:61:c3:6e:c7:33:36:96:91:e7:33:3b:9f:2f:
ce:9f:ac:7d:ea:fb:4d:06:9d:8b:d5:ce:d9:f7:07:
93:a8:4e:2d:7a:b1:91:6b:fa:0f:53:f2:09:f8:fc:
e5:82:6b:54:d7:18:fc:9e:f8:2a:fa:da:40:bb:2b:
17:fa:69:3e:fb:a0:64:9c:8b:34:d5:95:6e:56:7c:
eb:c9:b6:8c:0c:5b:24:24:de:ab:79:ed:d4:9b:9d:
24:46:2f:0f:7e:c2:1f:3b:2e:81:b1:9b:f0:c2:c3:
40:92:8b:f7:7c:fb:b3:06:6e:ac:00:fc:7b:74:6c:
42:cc:a6:c3:b0:88:08:e0:a2:fa:90:7c:ee:75:69:
04:18:90:00:6c:99:43:c4:a0:3b:92:95:34:aa:28:
5e:02:51:ad:71:ea:5b:0a:9c:18:ce:01:ca:55:02:
94:c5:90:5e:3d:a2:7f:aa:15:cc:52:78:68:32:2d:
62:98:0e:78:7b:f6:75:eb:45:48:c8:f9:85:42:ae:
45:77:ff:c9:3e:21:de:78:d7:95:53:bd:54:fd:7a:
99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:85:30:27:C2:55:40:B4:FB:6A:2D:46:76:8B:0B:71:7C:DB:E3:3E
X509v3 Authority Key Identifier:
keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3230342e31302e3139342e302f32342d3234203d3e203631303033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.10.194.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:28:b6:2b:df:28:90:f3:9f:68:6b:0d:35:db:b2:b4:d5:b2:
a4:ce:a1:29:a5:30:ee:12:78:4c:31:9f:04:8f:58:bf:e7:3b:
6b:7f:3c:a2:c7:74:20:9f:5e:42:d0:4f:46:28:e9:05:37:3b:
01:d7:f3:47:5d:d2:a8:b1:19:5c:8a:3f:d8:d7:dc:95:cb:ac:
ee:35:75:94:c0:1f:bb:7f:c9:b3:93:a8:33:ba:83:1c:0c:aa:
5f:3f:4c:5b:5c:55:a7:a1:3d:09:1a:3f:a5:0f:b0:3f:fb:6c:
27:a9:7a:c8:80:a5:88:c3:69:49:68:92:57:fa:31:a0:6c:4d:
f5:a6:98:c3:b0:92:64:35:17:8f:ef:8f:8d:61:33:88:04:50:
a6:c0:7c:80:2f:38:48:42:66:56:6c:e0:fe:cf:bd:8f:70:72:
69:91:3c:ea:1d:e9:85:ec:5d:79:d0:e3:a2:68:0a:f4:f7:71:
eb:cf:bb:f6:b2:35:af:27:61:7e:1d:9b:2d:db:c5:85:82:2e:
08:ae:a4:c3:7e:4a:c1:80:d2:b7:a8:fc:b3:03:4d:7b:34:45:
d0:b4:46:14:59:22:a3:2d:c5:cf:c8:24:0c:c9:96:c3:40:23:
a0:ad:ba:0a:df:5a:f6:04:99:e6:72:1b:23:86:ab:0f:65:99:
bd:24:66:30
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUIl5heaiDBAaluR6+2nMWhYV/BnMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzhmNTcxY2Y5MmYyOTY5NTA5ZmZkZWZj
ZmZmNDQ5MzZkODczYmJkYTUwHhcNMjMwNDA1MDUxNDU0WhcNMjQwNDAzMDUxOTU0
WjAzMTEwLwYDVQQDEyhDMDg1MzAyN0MyNTU0MEI0RkI2QTJENDY3NjhCMEI3MTdD
REJFMzNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+7mpIfTWBgg
aX47FHEw74b10LVPJb+wKW0RAPS/HDqyOC9cbPzaJGDAcTbDGGHDbsczNpaR5zM7
ny/On6x96vtNBp2L1c7Z9weTqE4terGRa/oPU/IJ+PzlgmtU1xj8nvgq+tpAuysX
+mk++6BknIs01ZVuVnzrybaMDFskJN6ree3Um50kRi8PfsIfOy6BsZvwwsNAkov3
fPuzBm6sAPx7dGxCzKbDsIgI4KL6kHzudWkEGJAAbJlDxKA7kpU0qiheAlGtcepb
CpwYzgHKVQKUxZBePaJ/qhXMUnhoMi1imA54e/Z160VIyPmFQq5Fd//JPiHeeNeV
U71U/XqZswIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMCFMCfCVUC0+2otRnaLC3F8
2+M+MB8GA1UdIwQYMBaAFH6b12PWGJJO7yk4woPME16QCDhTMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjdhMjhhY2YxMjFmLzAv
N0U5QkQ3NjNENjE4OTI0RUVGMjkzOEMyODNDQzEzNUU5MDA4Mzg1My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1hMWNkLTEyMjZlYTNjNDc5Ny83YWZh
ZjFjMWI3OGY1NzFjZjkyZjI5Njk1MDlmZmRlZmNmZmY0NDkzNmQ4NzNiYmRhNS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGY3
YTI4YWNmMTIxZi8wLzMyMzAzNDJlMzEzMDJlMzEzOTM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMwMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMwKwjANBgkqhkiG9w0BAQsF
AAOCAQEAvSi2K98okPOfaGsNNduytNWypM6hKaUw7hJ4TDGfBI9Yv+c7a388osd0
IJ9eQtBPRijpBTc7AdfzR13SqLEZXIo/2Nfclcus7jV1lMAfu3/Js5OoM7qDHAyq
Xz9MW1xVp6E9CRo/pQ+wP/tsJ6l6yICliMNpSWiSV/oxoGxN9aaYw7CSZDUXj++P
jWEziARQpsB8gC84SEJmVmzg/s+9j3ByaZE86h3phexdedDjomgK9Pdx68+79rI1
rydhfh2bLdvFhYIuCK6kw35KwYDSt6j8swNNezRF0LRGFFkioy3Fz8gkDMmWw0Aj
oK26Ct9a9gSZ5nIbI4arD2WZvSRmMA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:20 2023 by rpki-client on console-fra.rpki-client.org