Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/32332e3135362e3130342e302f32342d3234203d3e20323132363138.roa
File: 32332e3135362e3130342e302f32342d3234203d3e20323132363138.roa (raw, json)
Hash identifier: x9/L4xMO29AYo0uC4+ZSr7GLo7m46NZNh/F8ZPdfMmI=
Subject key identifier: 77:6A:B1:57:F1:2E:99:2A:E0:14:D6:33:1A:B1:8F:B2:6C:DB:EE:8F
Certificate issuer: /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial: 77D535E08792AE7BCE2E0833B47DAD602C717AB1
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/32332e3135362e3130342e302f32342d3234203d3e20323132363138.roa
Signing time: Thu 06 Jul 2023 13:35:55 +0000
ROA not before: Thu 06 Jul 2023 13:30:55 +0000
ROA not after: Thu 04 Jul 2024 13:35:55 +0000
asID: 212618
IP address blocks: 23.156.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:d5:35:e0:87:92:ae:7b:ce:2e:08:33:b4:7d:ad:60:2c:71:7a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Validity
Not Before: Jul 6 13:30:55 2023 GMT
Not After : Jul 4 13:35:55 2024 GMT
Subject: CN=776AB157F12E992AE014D6331AB18FB26CDBEE8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:ac:49:df:7e:fa:35:c8:1e:4d:06:a9:cb:
44:c9:ca:d9:32:22:90:b3:02:26:b8:ca:aa:88:b4:
b2:c3:2c:ec:f8:19:3b:22:10:22:61:55:e9:ef:b8:
db:a1:8c:a3:d6:b9:aa:d0:68:ad:06:a8:b0:de:f7:
98:db:d6:e4:2d:1e:da:94:ac:96:a9:57:2b:71:3e:
12:a0:1f:4e:90:40:92:bf:62:0b:f1:09:34:4d:76:
2f:f1:71:d6:44:b8:d6:af:ba:4e:89:d4:5b:e7:15:
5e:0f:7c:af:39:59:f9:5a:b0:a7:28:f2:88:41:b4:
4e:b7:0f:54:07:c5:6d:10:a7:1c:e1:0d:f5:7e:a7:
b9:d3:d0:a9:05:ba:af:32:97:ad:52:c5:11:ca:c6:
c2:46:73:ef:1c:4d:d5:fa:b2:32:2a:2a:61:c4:fc:
cc:7a:9c:69:ce:dd:aa:34:dd:ba:d5:62:dc:bc:16:
a7:b4:57:1d:e3:d3:79:5b:a6:dd:5b:cf:a2:0b:c8:
ae:74:c5:1f:da:5b:ca:37:a7:dc:6e:25:d7:6b:c8:
f4:66:c1:19:17:d7:ad:68:7c:c0:08:71:b8:91:8f:
85:f8:9c:c3:4a:97:a8:f8:e9:ef:6e:70:2d:d5:a2:
24:45:1d:49:54:05:e0:c1:72:74:f0:60:3c:7d:0c:
1d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6A:B1:57:F1:2E:99:2A:E0:14:D6:33:1A:B1:8F:B2:6C:DB:EE:8F
X509v3 Authority Key Identifier:
keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/32332e3135362e3130342e302f32342d3234203d3e20323132363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.156.104.0/24
Signature Algorithm: sha256WithRSAEncryption
00:86:01:c6:ac:57:5c:3f:e1:05:28:6a:01:c7:f6:bf:a8:9c:
d3:d5:ec:65:55:4e:b8:b5:8c:de:da:58:2f:7d:21:34:56:67:
95:28:46:f2:15:f5:e2:d6:17:cc:d6:7e:6c:80:8f:f5:de:8e:
41:b2:f3:4a:f6:c9:5d:74:7a:81:5f:50:9a:56:59:5f:b0:e2:
5e:7a:53:95:e9:c9:48:d5:61:4f:81:e6:29:ef:c3:b1:f7:df:
3b:2c:c4:62:cc:b8:09:85:39:a0:ed:f6:d0:d0:d7:81:d9:07:
d2:9e:1a:ff:a3:23:80:ed:6e:43:35:d2:c7:8d:78:eb:ca:a7:
63:0e:2a:f1:3e:af:56:f2:7f:86:aa:ee:ae:f5:54:14:d5:9d:
79:65:48:5d:9a:12:1d:1a:7c:26:54:1b:fd:b3:58:76:5e:06:
c1:bb:e1:1c:19:0e:04:13:69:4e:e2:22:ab:62:84:94:c0:b8:
d8:77:ea:f6:2b:5b:b7:f6:d8:f4:f1:2b:89:0d:0f:06:4c:ff:
60:a6:c8:16:76:cb:2c:37:6f:fc:28:b0:ec:19:59:c7:93:39:
96:45:19:4e:b3:ac:dd:cc:3d:15:83:16:1e:13:a7:83:f2:e2:
83:47:3b:0a:be:16:48:9e:1c:3f:ef:94:26:ab:f2:c4:e1:3b:
ed:e6:77:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:06 2024 by rpki-client on console-fra.rpki-client.org