Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa
File: 32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa (raw, json)
Hash identifier: IDQu1+CDRCmBKnJYfcXPwuM0sBz8jQQCsp57YmwQq+M=
Subject key identifier: 36:3A:0E:39:CB:07:36:66:0C:D6:26:81:2D:8D:C3:7F:52:B5:43:9B
Certificate issuer: /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial: 1B3C8853307805976F540D39BB7EA4C65E8451D6
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa
Signing time: Fri 09 Dec 2022 16:06:45 +0000
ROA not before: Fri 09 Dec 2022 16:01:45 +0000
ROA not after: Fri 08 Dec 2023 16:06:45 +0000
asID: 212934
IP address blocks: 23.130.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:3c:88:53:30:78:05:97:6f:54:0d:39:bb:7e:a4:c6:5e:84:51:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Validity
Not Before: Dec 9 16:01:45 2022 GMT
Not After : Dec 8 16:06:45 2023 GMT
Subject: CN=363A0E39CB0736660CD626812D8DC37F52B5439B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:e7:2c:5a:cc:ec:42:92:31:95:cd:95:ee:
f1:1f:21:26:38:53:0a:96:b8:62:46:8a:1c:c2:35:
26:e8:6f:b1:18:64:3e:b6:78:ed:a9:2f:01:de:62:
2a:bc:62:ae:16:02:00:4b:46:9f:5c:f3:40:3f:d5:
5c:63:70:74:2a:67:03:0c:b2:51:e8:56:38:a3:fe:
b9:37:0e:6a:45:fe:cd:d9:22:67:5e:d9:28:44:33:
bc:70:43:a1:17:01:1f:28:e2:c1:1d:d7:96:60:78:
3c:d3:bd:d9:15:45:9b:4a:12:33:08:52:c5:cb:0d:
cf:b4:f4:8b:b7:97:ff:fc:18:4c:9b:e0:59:93:fc:
1a:3d:73:a1:e1:9c:d4:43:77:20:9d:98:bb:ec:b9:
f6:ab:30:83:78:dc:29:a3:67:d1:2a:c3:61:09:77:
0d:35:f7:08:0c:97:bd:a5:24:49:25:b2:ba:73:ab:
4e:25:26:0c:4a:b0:2e:a4:04:7d:3b:3b:69:5c:52:
5e:0b:3d:2b:a0:2f:20:c3:be:33:fe:fb:6b:3b:cb:
ac:5a:f1:5c:4f:71:7c:fc:29:5e:31:fe:61:d5:b1:
3a:c1:9e:ba:69:90:5d:03:42:86:dc:a9:8e:8f:66:
ca:e7:5f:0a:a0:95:8a:4b:95:ca:12:0e:7b:97:1e:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3A:0E:39:CB:07:36:66:0C:D6:26:81:2D:8D:C3:7F:52:B5:43:9B
X509v3 Authority Key Identifier:
keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.130.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:57:e0:55:fa:6f:0a:9d:37:7d:d6:36:22:c7:a2:10:c1:65:
b9:21:35:50:2f:8f:07:48:36:1b:2b:c8:2a:f6:28:61:52:76:
a0:5f:f8:29:c9:18:e4:2b:5d:03:f2:d6:96:be:8e:ba:4a:6f:
12:5c:78:91:66:24:99:58:59:21:4d:e8:8a:81:ce:f7:36:ea:
e5:5e:ea:e4:42:16:1b:fe:33:46:af:55:9f:ae:de:a6:17:b6:
14:38:55:61:fd:bc:92:e9:e4:8b:8b:18:f8:6e:76:c3:a8:82:
9f:b0:a6:f8:e3:a5:13:b5:db:18:b4:20:31:a7:72:09:53:b1:
d5:49:be:91:04:fe:7f:22:90:8e:95:35:f5:38:d3:1f:74:04:
25:a3:3d:b8:e5:98:19:8a:69:6c:a6:03:e4:f6:fb:ef:40:8a:
1d:58:fc:41:5c:8a:d0:9c:38:e1:95:dc:2d:57:86:b9:d9:8a:
1c:f3:d6:cd:7b:f7:cb:92:53:24:4b:1f:fa:5c:a4:84:7c:14:
9b:5c:a3:fd:f6:4c:b7:f6:35:c3:e4:6b:ca:81:92:c3:5a:fd:
59:07:23:d0:95:e1:75:9e:9b:77:59:83:d6:8f:e0:c7:da:b9:
f9:17:d3:c5:ab:83:9f:66:80:25:cc:fe:07:d0:fe:17:01:7b:
d9:65:f7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org