Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/32332e3135362e3130342e302f32342d3234203d3e203135333533.roa
File: 32332e3135362e3130342e302f32342d3234203d3e203135333533.roa (raw, json)
Hash identifier: vcy+CWaaETv2kL03zvG7R/lgJBUIent9i0mT/xV5oSw=
Subject key identifier: 39:9A:4C:4B:36:C9:E3:44:D1:EF:EF:9D:60:3D:52:9E:FB:A9:67:41
Certificate issuer: /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial: 5E6B9BB98DB1E20D0C83CB52DA1CAB823A7144A4
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/32332e3135362e3130342e302f32342d3234203d3e203135333533.roa
Signing time: Wed 08 Nov 2023 00:28:37 +0000
ROA not before: Wed 08 Nov 2023 00:23:37 +0000
ROA not after: Wed 06 Nov 2024 00:28:37 +0000
asID: 15353
IP address blocks: 23.156.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6b:9b:b9:8d:b1:e2:0d:0c:83:cb:52:da:1c:ab:82:3a:71:44:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Validity
Not Before: Nov 8 00:23:37 2023 GMT
Not After : Nov 6 00:28:37 2024 GMT
Subject: CN=399A4C4B36C9E344D1EFEF9D603D529EFBA96741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:e9:b9:ac:48:b8:15:9e:0e:33:c9:de:dc:
34:2e:9a:ec:e6:e7:6a:2e:da:8b:ab:65:7f:c2:13:
e1:00:30:d8:67:a3:b3:85:47:48:c3:e0:0e:34:59:
9c:19:25:71:d4:a6:f1:d9:ca:59:62:2b:63:8e:5a:
2a:c8:35:c0:f6:4d:80:2d:d5:de:b6:ec:2f:be:d0:
15:57:e3:ea:d3:c3:26:75:86:0d:33:00:58:1b:45:
34:62:11:ec:05:02:d4:1b:94:9b:01:44:e4:5f:d7:
a2:c9:07:42:58:e8:b8:c8:4c:24:96:cd:10:66:e2:
80:af:59:98:3b:b1:8c:c2:0c:d0:e6:d1:b6:a4:cf:
7b:c9:a0:36:d8:a2:1f:83:3d:11:d7:48:a4:fc:f1:
bf:45:66:0f:e7:1a:ac:80:18:d3:33:ba:f6:f8:34:
6f:ec:7e:a0:cb:dc:0e:01:ed:f3:83:79:18:d8:7c:
75:a5:63:a4:c8:c0:49:3d:db:3f:ea:88:5d:96:ce:
cd:7a:43:97:bb:f5:66:6a:72:f9:22:47:91:55:d1:
b4:34:3b:a5:68:b9:f7:e7:a0:63:6c:ba:47:c1:7d:
8a:6d:70:2e:ff:53:68:f1:af:3f:0b:74:29:d3:8d:
de:ac:fc:da:9a:d7:1e:43:50:b0:88:50:25:e2:86:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9A:4C:4B:36:C9:E3:44:D1:EF:EF:9D:60:3D:52:9E:FB:A9:67:41
X509v3 Authority Key Identifier:
keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/32332e3135362e3130342e302f32342d3234203d3e203135333533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.156.104.0/24
Signature Algorithm: sha256WithRSAEncryption
97:45:9d:cd:fa:e0:a6:93:09:a2:45:9e:a0:37:f0:a3:1a:c9:
fa:94:4c:21:97:25:46:66:16:a6:8f:f5:79:b6:e4:e9:b4:bb:
fd:4b:01:4e:24:b9:41:39:8a:7c:5d:99:07:51:1a:03:20:71:
32:08:5a:37:64:a1:c8:18:73:13:63:bc:bc:32:0f:07:f6:93:
b4:e6:3d:0e:b5:34:7a:d7:46:2a:7a:ec:44:08:49:52:88:19:
f9:e5:aa:b0:c3:15:31:4f:3e:8b:1d:0d:a0:e0:2f:04:d4:ba:
6f:63:d3:a8:0c:bf:64:59:73:87:c6:71:98:39:e6:e8:14:5b:
46:36:b4:50:44:09:a0:3b:49:b5:f9:f1:1c:56:e7:2c:fc:86:
af:24:4f:02:f8:04:5d:74:bc:b7:d9:b7:98:cb:62:05:ac:2e:
c1:80:0c:f9:1e:a3:22:6e:b8:91:4a:b9:c6:12:37:91:da:e0:
57:fb:3e:02:84:2b:9d:c6:db:f0:78:24:c8:04:57:b8:6d:8b:
5e:c9:15:eb:8e:db:73:d3:6b:af:0d:38:00:08:47:1e:63:8c:
02:cd:20:04:28:a3:28:f0:99:18:49:a2:8c:ae:82:09:76:90:
cd:ec:e4:a8:4e:cb:d9:77:f7:4e:0c:2c:d0:1a:1f:85:bf:82:
bf:06:da:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:06 2024 by rpki-client on console-fra.rpki-client.org