Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/32332e3135362e3130342e302f32342d3234203d3e203533333536.roa
File: 32332e3135362e3130342e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier: Ch3iPykRNSqI8DcO1qX16fMeMxY5W4wWW/Tkeu9sKz4=
Subject key identifier: 8F:D0:EF:E6:96:A3:45:9F:73:44:4E:13:11:EA:B7:B0:4B:65:07:34
Certificate issuer: /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial: 02BA6F897D4CE0E700DEBC059ABB28891CD0C573
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/32332e3135362e3130342e302f32342d3234203d3e203533333536.roa
Signing time: Thu 06 Jul 2023 14:46:28 +0000
ROA not before: Thu 06 Jul 2023 14:41:28 +0000
ROA not after: Thu 04 Jul 2024 14:46:28 +0000
asID: 53356
IP address blocks: 23.156.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:ba:6f:89:7d:4c:e0:e7:00:de:bc:05:9a:bb:28:89:1c:d0:c5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Validity
Not Before: Jul 6 14:41:28 2023 GMT
Not After : Jul 4 14:46:28 2024 GMT
Subject: CN=8FD0EFE696A3459F73444E1311EAB7B04B650734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:2c:0a:55:72:e9:6d:2d:44:d2:f7:4d:3b:
d1:bd:e0:3d:3d:58:1a:30:03:2a:bd:88:61:f6:ae:
2d:a9:78:f5:ee:a5:ba:74:51:09:e4:c3:33:3a:6f:
7a:1b:09:39:9b:c3:a0:f8:14:13:65:67:24:ca:36:
c2:f8:de:7a:a6:8e:05:30:ad:df:c1:90:92:2e:d5:
74:48:1d:c0:15:be:4a:be:f9:4c:b6:78:a6:a4:54:
01:68:c6:36:dd:da:78:87:14:9e:f5:73:d5:af:59:
68:24:b4:2a:03:a2:09:e4:32:e9:84:55:f3:15:6b:
d6:fc:cc:5a:13:89:75:d9:fc:c6:66:64:08:ae:cf:
44:12:5b:35:1e:72:7e:3b:26:78:4c:78:89:3e:35:
14:1e:ce:2c:08:07:1b:8e:c4:a3:83:7f:1b:d7:6f:
38:46:60:33:93:0f:7e:d2:df:8b:8a:02:6d:0d:c1:
70:29:c1:5f:c3:0e:20:18:9b:89:a3:10:ee:d9:31:
0a:67:04:c5:92:7c:cd:c2:a1:c3:25:ce:c6:09:ae:
d3:bd:d7:57:bd:59:cc:dc:a7:83:10:ba:3e:83:8b:
29:9c:8f:4d:9d:c9:23:73:24:e4:51:cd:b9:77:b0:
af:b5:e9:11:e5:ad:2e:7b:33:22:1e:e0:cd:ae:7d:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D0:EF:E6:96:A3:45:9F:73:44:4E:13:11:EA:B7:B0:4B:65:07:34
X509v3 Authority Key Identifier:
keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/32332e3135362e3130342e302f32342d3234203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.156.104.0/24
Signature Algorithm: sha256WithRSAEncryption
24:75:64:2f:3a:ef:ae:15:95:d5:9d:56:92:76:b9:4b:b8:82:
91:94:e9:66:7c:45:07:00:70:ed:12:f4:a7:b4:c6:9d:94:e3:
93:87:97:38:aa:61:42:c5:64:9c:8b:cd:fb:42:2b:c6:29:c0:
8a:d1:47:05:ec:be:bd:4b:75:b4:b6:a3:8f:09:70:23:2c:33:
79:0a:30:fd:4d:30:6d:da:fb:02:91:97:51:19:2f:ce:84:da:
45:2c:57:99:1e:67:f4:b1:da:0c:06:cb:1f:65:aa:24:e4:97:
92:d3:10:45:bb:90:55:31:3b:23:3e:2d:ff:b9:e1:ad:95:d1:
44:ea:04:e0:7e:42:8d:6e:ae:47:77:f3:95:13:ef:31:ce:12:
35:9c:0f:41:a8:8d:35:48:83:bf:9e:c0:0c:44:0b:78:7a:4a:
9f:4a:dd:f9:d2:d9:3d:6f:c4:9d:2c:3f:df:b2:23:d5:3f:1a:
54:55:27:54:19:6f:d6:71:87:0c:71:58:52:02:f4:e7:ec:b2:
4a:48:29:77:b4:f0:ce:07:9a:44:9d:af:95:61:c6:0f:32:91:
5b:f9:10:d1:df:d2:95:ed:66:c0:f0:d4:dd:40:6b:b1:67:fb:
07:9e:07:5f:98:ad:22:44:41:b2:f2:03:9e:2f:f3:69:48:08:
b3:5b:3a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:06 2024 by rpki-client on console-fra.rpki-client.org