Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/32332e3136302e34302e302f32342d3234203d3e203630333031.roa
File: 32332e3136302e34302e302f32342d3234203d3e203630333031.roa (raw, json)
Hash identifier: Bsaw0wwvzeYyNPSMFsyn2HsKnEDSQWjJDmzCac2gOPk=
Subject key identifier: E8:3E:B5:67:3C:03:35:BF:1E:96:3E:DB:E9:CD:C8:24:CE:C8:CE:E8
Certificate issuer: /CN=589b794a16808ebce2d3d0a9f47db4b3d092a884358b1e26eb
Certificate serial: 3E4E59410498C7C5333DC830DD53D4A18F379408
Authority key identifier: 7A:68:8C:C4:87:A6:49:F0:3F:F2:87:C5:01:E6:FA:9D:02:FE:67:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a16808ebce2d3d0a9f47db4b3d092a884358b1e26eb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/32332e3136302e34302e302f32342d3234203d3e203630333031.roa
Signing time: Sun 03 Dec 2023 00:11:42 +0000
ROA not before: Sun 03 Dec 2023 00:06:42 +0000
ROA not after: Sun 01 Dec 2024 00:11:42 +0000
asID: 60301
IP address blocks: 23.160.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:4e:59:41:04:98:c7:c5:33:3d:c8:30:dd:53:d4:a1:8f:37:94:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=589b794a16808ebce2d3d0a9f47db4b3d092a884358b1e26eb
Validity
Not Before: Dec 3 00:06:42 2023 GMT
Not After : Dec 1 00:11:42 2024 GMT
Subject: CN=E83EB5673C0335BF1E963EDBE9CDC824CEC8CEE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:54:01:ef:07:7a:38:7c:09:40:6e:55:72:
11:2a:18:6d:04:1d:88:6a:30:68:e3:67:38:c4:7c:
32:fd:fa:0c:2a:15:ca:fd:09:24:0b:71:52:5f:d8:
2a:7d:be:31:ab:0f:30:8b:f6:e2:07:38:fa:84:43:
8d:15:3f:b4:87:20:ca:97:c9:fe:71:b3:48:24:39:
24:aa:8b:cc:32:a4:7b:00:be:99:14:b4:ed:4b:ff:
41:34:0e:be:c2:dd:69:3d:e5:03:00:ed:49:77:4f:
b5:73:0c:34:55:57:86:91:39:54:63:92:17:02:c9:
c5:a2:27:20:c3:d9:fd:8b:35:f7:2c:e6:c4:af:e3:
6c:08:e8:7b:6c:06:8c:28:1c:b9:5c:13:3a:59:21:
87:ba:b5:23:6c:a0:4f:a6:08:73:6e:29:c5:2e:04:
e3:56:c4:f6:c8:fd:33:7d:27:44:3b:ac:e5:2c:96:
77:3d:bd:ae:c0:2b:be:bb:ea:53:69:19:70:ee:f1:
c9:76:0d:68:03:81:c5:f5:5a:32:87:87:3e:82:2d:
14:9a:84:0e:41:b1:65:8a:6d:60:2a:dd:b6:38:7c:
ef:d4:10:0c:3e:a7:c1:86:a3:d4:77:ce:48:fd:0c:
de:cb:73:55:2b:3d:d3:da:ec:3b:89:e5:67:30:f8:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3E:B5:67:3C:03:35:BF:1E:96:3E:DB:E9:CD:C8:24:CE:C8:CE:E8
X509v3 Authority Key Identifier:
keyid:7A:68:8C:C4:87:A6:49:F0:3F:F2:87:C5:01:E6:FA:9D:02:FE:67:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/7A688CC487A649F03FF287C501E6FA9D02FE672B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a16808ebce2d3d0a9f47db4b3d092a884358b1e26eb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/32332e3136302e34302e302f32342d3234203d3e203630333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.160.40.0/24
Signature Algorithm: sha256WithRSAEncryption
72:47:bf:b2:8b:11:05:6d:f7:1c:ff:04:23:d7:e5:0b:fd:cf:
db:e5:2c:cb:ed:a8:3e:dc:8e:de:33:e5:a6:51:68:c3:d2:b8:
43:10:47:af:aa:0c:ec:e4:65:bd:41:e0:d1:7c:c1:53:85:31:
06:a2:e5:6a:91:b0:98:21:13:f6:d7:04:49:25:00:44:e2:5c:
25:12:06:98:02:ed:ac:2f:bc:26:95:df:89:2c:d8:a4:ba:9a:
bf:1b:89:e9:aa:ee:40:93:dd:8a:84:37:ee:8f:94:73:92:a6:
da:26:a4:30:fd:3d:3e:a3:6e:e0:62:54:42:a0:72:a0:2e:80:
42:7b:62:72:1c:61:f4:3e:13:5b:81:4c:e2:bf:e4:48:17:96:
fb:8c:d4:91:0b:53:39:f7:df:1e:f4:7d:70:d1:bb:84:2f:99:
40:21:c1:8b:a0:87:97:28:a7:ad:29:a0:1e:4c:8f:5b:5b:c6:
51:14:1a:cb:4b:5e:8d:1b:e5:78:06:5f:0a:97:d5:47:46:6d:
1a:47:73:eb:75:88:ac:aa:43:94:8a:eb:42:2e:ee:ea:b5:36:
92:f6:09:fa:98:b4:7f:e5:6b:56:3e:93:c9:bf:c9:03:9b:8e:
f6:f7:d1:3b:29:7f:60:ec:b5:6f:19:3c:aa:5b:53:d5:19:49:
fa:a7:0b:47
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUPk5ZQQSYx8UzPcgw3VPUoY83lAgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTg5Yjc5NGExNjgwOGViY2UyZDNkMGE5ZjQ3ZGI0YjNk
MDkyYTg4NDM1OGIxZTI2ZWIwHhcNMjMxMjAzMDAwNjQyWhcNMjQxMjAxMDAxMTQy
WjAzMTEwLwYDVQQDEyhFODNFQjU2NzNDMDMzNUJGMUU5NjNFREJFOUNEQzgyNENF
QzhDRUU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/xUAe8Hejh8
CUBuVXIRKhhtBB2IajBo42c4xHwy/foMKhXK/QkkC3FSX9gqfb4xqw8wi/biBzj6
hEONFT+0hyDKl8n+cbNIJDkkqovMMqR7AL6ZFLTtS/9BNA6+wt1pPeUDAO1Jd0+1
cww0VVeGkTlUY5IXAsnFoicgw9n9izX3LObEr+NsCOh7bAaMKBy5XBM6WSGHurUj
bKBPpghzbinFLgTjVsT2yP0zfSdEO6zlLJZ3Pb2uwCu+u+pTaRlw7vHJdg1oA4HF
9Voyh4c+gi0UmoQOQbFlim1gKt22OHzv1BAMPqfBhqPUd85I/Qzey3NVKz3T2uw7
ieVnMPgtXwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOg+tWc8AzW/HpY+2+nNyCTO
yM7oMB8GA1UdIwQYMBaAFHpojMSHpknwP/KHxQHm+p0C/mcrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODlkMDk1YWUwMTg5ZDMwODdmZGQwMzI2LzAv
N0E2ODhDQzQ4N0E2NDlGMDNGRjI4N0M1MDFFNkZBOUQwMkZFNjcyQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdm
MDA5OWIyLzMzZWNhYWI5LTE4MDctNDc4MC04MGQwLTZhOGRmOTU0MDYwZS81ODli
Nzk0YTE2ODA4ZWJjZTJkM2QwYTlmNDdkYjRiM2QwOTJhODg0MzU4YjFlMjZlYi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg5ZDA5NWFlMDE4OWQz
MDg3ZmRkMDMyNi8wLzMyMzMyZTMxMzYzMDJlMzQzMDJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM2MzAzMzMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAXoCgwDQYJKoZIhvcNAQELBQAD
ggEBAHJHv7KLEQVt9xz/BCPX5Qv9z9vlLMvtqD7cjt4z5aZRaMPSuEMQR6+qDOzk
Zb1B4NF8wVOFMQai5WqRsJghE/bXBEklAETiXCUSBpgC7awvvCaV34ks2KS6mr8b
iemq7kCT3YqEN+6PlHOSptompDD9PT6jbuBiVEKgcqAugEJ7YnIcYfQ+E1uBTOK/
5EgXlvuM1JELUzn33x70fXDRu4QvmUAhwYugh5cop60poB5Mj1tbxlEUGstLXo0b
5XgGXwqX1UdGbRpHc+t1iKyqQ5SK60Iu7uq1NpL2CfqYtH/la1Y+k8m/yQObjvb3
0Tspf2DstW8ZPKpbU9UZSfqnC0c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-ams.rpki-client.org