Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/32332e3134382e3233322e302f32342d3234203d3e203539363738.roa
File: 32332e3134382e3233322e302f32342d3234203d3e203539363738.roa (raw, json)
Hash identifier: Ohe+xcgvB0yR+HJf6RyPbqXsXUPrxYBgZnq6+bhz7Ag=
Subject key identifier: AB:B1:06:DA:9B:7A:D7:72:A5:7F:20:68:9C:B6:A6:5F:8C:12:D8:9E
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 23E67BBD6ABD2FB264DF504D7A79595708F3847B
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/32332e3134382e3233322e302f32342d3234203d3e203539363738.roa
Signing time: Mon 27 Jan 2025 12:14:12 +0000
ROA not before: Mon 27 Jan 2025 12:09:12 +0000
ROA not after: Mon 26 Jan 2026 12:14:12 +0000
asID: 59678
IP address blocks: 23.148.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e6:7b:bd:6a:bd:2f:b2:64:df:50:4d:7a:79:59:57:08:f3:84:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: Jan 27 12:09:12 2025 GMT
Not After : Jan 26 12:14:12 2026 GMT
Subject: CN=ABB106DA9B7AD772A57F20689CB6A65F8C12D89E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:a2:53:32:04:26:e9:91:ef:99:3d:5f:97:
92:59:89:98:5d:6b:f3:6e:d6:76:e9:88:1c:eb:df:
59:d3:38:35:a5:87:13:f0:c2:7a:7e:26:0b:16:ae:
4e:a3:e0:f5:45:e9:a2:e5:a2:b2:da:72:76:f7:0e:
23:cf:b2:71:cd:68:eb:9c:8c:26:4d:35:db:49:b9:
e1:f0:c0:a7:df:14:f1:2f:ef:ef:d6:da:43:cf:7a:
50:b5:62:8c:91:f7:55:08:48:69:1b:6c:96:5c:7b:
5a:99:9f:88:64:64:6d:93:61:e9:b4:b4:dc:c1:08:
c8:06:89:ef:32:55:c3:2f:f8:e7:0c:cd:b3:d5:63:
f6:3f:2c:23:93:91:2e:a2:e2:df:d7:6a:ea:c0:49:
56:16:f9:31:3c:45:7e:c8:22:a6:e3:25:3b:8b:98:
de:dd:53:64:dd:a4:1b:91:cb:91:40:b3:f0:66:ce:
86:f3:dc:c8:fb:91:90:69:2e:97:9c:5e:ee:c5:78:
2e:89:0f:69:52:ec:2c:42:5d:31:a1:d5:06:b4:f9:
fd:98:c6:f0:9a:a7:81:73:e3:a4:54:9f:de:ef:c6:
4c:9f:80:23:bf:a8:32:86:66:bd:41:15:b4:01:4e:
05:b8:69:7c:ce:b2:c1:fe:e6:a1:5f:65:c3:9a:b5:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B1:06:DA:9B:7A:D7:72:A5:7F:20:68:9C:B6:A6:5F:8C:12:D8:9E
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/32332e3134382e3233322e302f32342d3234203d3e203539363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.148.232.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bf:67:89:1a:8a:13:c3:79:4d:20:b9:3d:f7:e1:7c:23:0f:
35:c5:3b:71:ae:cc:10:09:a0:ce:67:04:11:d3:9f:a2:11:ed:
e5:fb:63:9d:40:af:f9:65:90:6e:71:a3:e5:82:22:9b:14:1e:
3c:db:bb:24:58:a1:c0:c6:97:ef:5c:1a:d5:62:e2:cf:ab:a7:
42:42:86:8a:28:20:3b:59:c2:05:36:b0:dd:5f:02:d5:fb:22:
58:56:28:3d:7c:d8:a0:18:97:a2:16:09:25:e5:b8:5e:3d:e0:
de:93:37:ba:26:5c:a8:0b:85:03:e8:28:c6:18:f5:a1:21:db:
63:e5:05:e8:72:82:52:0a:30:ab:1b:3a:0d:26:43:9c:07:e8:
80:ab:55:0c:1f:cc:4e:12:03:7a:cb:b6:db:59:b1:dc:14:3d:
f1:7c:c8:15:75:c1:37:6b:6f:92:ac:76:e6:59:f3:73:1b:7e:
3a:2c:29:f8:d9:07:74:14:d2:60:7d:89:ea:f8:ff:31:54:0d:
f0:3a:7b:53:52:8c:46:9f:7e:7f:dd:5f:e8:00:5f:6c:3d:aa:
77:70:54:24:61:11:ab:fe:fe:ac:88:21:fe:49:1e:1c:bb:af:
71:0f:98:dd:17:6b:13:93:13:cc:cd:46:32:43:08:06:2c:16:
ef:cf:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:22:54 2025 by rpki-client