Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/32332e3136322e3130342e302f32342d3234203d3e203239383032.roa
File: 32332e3136322e3130342e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: IhYXnDyeiOKGqwMsiVjTlCmbins9GN7z6jiHcyp1+pM=
Subject key identifier: C7:B5:D5:7A:B0:45:AF:C7:F0:4E:47:93:BB:B8:60:AB:A3:9D:1B:8F
Certificate issuer: /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial: 200879C870F967F1C587638C67CB353EC83F75
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/32332e3136322e3130342e302f32342d3234203d3e203239383032.roa
Signing time: Fri 11 Oct 2024 18:39:36 +0000
ROA not before: Fri 11 Oct 2024 18:34:36 +0000
ROA not after: Fri 10 Oct 2025 18:39:36 +0000
asID: 29802
IP address blocks: 23.162.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:08:79:c8:70:f9:67:f1:c5:87:63:8c:67:cb:35:3e:c8:3f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Validity
Not Before: Oct 11 18:34:36 2024 GMT
Not After : Oct 10 18:39:36 2025 GMT
Subject: CN=C7B5D57AB045AFC7F04E4793BBB860ABA39D1B8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:cc:4f:29:f3:27:cd:aa:fe:3d:7c:a7:63:
49:2d:50:63:d5:81:19:49:93:f6:72:a7:96:3a:98:
a0:5d:02:9f:e9:37:d9:ab:c9:06:5f:79:d6:45:15:
93:7b:92:19:e4:10:1a:79:29:2c:71:47:70:07:05:
b4:75:21:33:89:1b:e1:82:d0:b8:1d:a5:51:30:57:
a1:4e:c8:aa:b2:f7:9a:45:43:55:bd:1a:68:5b:2f:
01:bd:f0:28:ab:f5:a9:19:b0:36:67:a2:85:a4:87:
22:79:55:3d:5a:c6:ee:f8:2c:b1:c2:6e:48:33:39:
f3:88:7b:f6:ae:d7:53:b4:5a:f7:0a:c8:56:4c:47:
52:3f:90:a7:7a:2b:2f:ea:1f:e4:18:2c:13:7e:29:
53:98:fd:32:74:b9:1b:41:39:04:08:98:23:d0:60:
b9:c1:68:0b:4b:96:94:27:85:92:ce:2d:40:84:4e:
80:9b:43:56:18:3e:fe:9d:8c:47:56:68:2f:5f:6c:
6c:51:54:bf:f1:ea:74:c1:d2:68:ae:9c:41:25:e2:
f4:a4:90:fa:8a:8a:9f:1d:d5:c8:92:aa:64:94:bf:
5d:04:c6:d9:70:4c:ec:d1:2b:78:84:5d:6e:ff:8c:
94:6e:a2:46:84:fa:2e:e2:b9:e7:45:27:89:89:2b:
67:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B5:D5:7A:B0:45:AF:C7:F0:4E:47:93:BB:B8:60:AB:A3:9D:1B:8F
X509v3 Authority Key Identifier:
keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/32332e3136322e3130342e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.162.104.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b8:dc:aa:00:49:8f:de:61:66:e4:fd:39:d9:f9:98:06:ef:
7a:20:0f:bf:97:41:55:e5:cf:d0:82:62:de:ca:96:1e:66:ad:
ed:70:b2:d3:cf:2e:b4:e0:65:00:d4:c7:53:0e:61:64:78:ab:
88:ee:75:fd:88:fb:27:52:79:60:02:11:0f:9f:89:7a:0c:3f:
8e:fa:bf:50:8f:e5:c0:d5:e4:b9:4b:7a:f9:cf:12:50:96:0c:
19:c7:c2:cd:08:e8:18:92:84:ea:33:08:a0:89:88:13:a8:de:
aa:c3:29:8d:b9:07:20:e5:5e:71:95:86:7c:b7:ca:f1:77:28:
4b:31:ee:7e:a8:c1:52:11:1f:cf:de:b8:c4:7e:00:e6:2c:46:
1d:b9:69:17:87:9c:d1:53:22:bf:1d:88:4e:58:b0:73:09:52:
60:9b:37:47:44:61:bd:0c:98:93:03:cd:51:96:47:da:8c:68:
9e:d0:c7:a6:92:51:8e:7a:29:d1:68:f6:61:d5:c0:da:3e:29:
c4:c4:cc:ec:03:34:93:40:ee:2d:12:bc:f7:af:0e:af:f1:bb:
85:c9:3b:68:8c:94:f7:7d:a3:42:5b:b3:0c:de:99:3b:3a:3d:
71:ce:79:fc:df:44:f5:49:34:46:ce:b5:d1:ba:4a:f2:de:6a:
b2:54:82:05
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgITIAh5yHD5Z/HFh2OMZ8s1Psg/dTANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzIxNjkwNGY3OWJhMTJhYjEyYjRhZjA4ZjJjNWI4ODcwN2Y4
NTZkMmVmNjMxM2JlNTJiNzAeFw0yNDEwMTExODM0MzZaFw0yNTEwMTAxODM5MzZa
MDMxMTAvBgNVBAMTKEM3QjVENTdBQjA0NUFGQzdGMDRFNDc5M0JCQjg2MEFCQTM5
RDFCOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgn8xPKfMnzar+
PXynY0ktUGPVgRlJk/Zyp5Y6mKBdAp/pN9mryQZfedZFFZN7khnkEBp5KSxxR3AH
BbR1ITOJG+GC0LgdpVEwV6FOyKqy95pFQ1W9GmhbLwG98Cir9akZsDZnooWkhyJ5
VT1axu74LLHCbkgzOfOIe/au11O0WvcKyFZMR1I/kKd6Ky/qH+QYLBN+KVOY/TJ0
uRtBOQQImCPQYLnBaAtLlpQnhZLOLUCEToCbQ1YYPv6djEdWaC9fbGxRVL/x6nTB
0miunEEl4vSkkPqKip8d1ciSqmSUv10ExtlwTOzRK3iEXW7/jJRuokaE+i7iuedF
J4mJK2e/AgMBAAGjggKyMIICrjAdBgNVHQ4EFgQUx7XVerBFr8fwTkeTu7hgq6Od
G48wHwYDVR0jBBgwFoAU7JV0XCVZlDrOQ5V0yYaGZeFoiwgwDgYDVR0PAQH/BAQD
AgeAMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0
L3JlcG9zaXRvcnkvOGE4NDhhZGU4OWUwMjVhNzAxOGFiM2NjY2QwYzEwMDAvMC9F
Qzk1NzQ1QzI1NTk5NDNBQ0U0Mzk1NzRDOTg2ODY2NUUxNjg4QjA4LmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvOGFjMTc1MmUtMzAyMC00OTlkLWE5NTItZDU0YmRmYWRmNzY1LzE2OTA0
Zjc5YmExMmFiMTJiNGFmMDhmMmM1Yjg4NzA3Zjg1NmQyZWY2MzEzYmU1MmI3LmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODllMDI1YTcwMThhYjNj
Y2NkMGMxMDAwLzAvMzIzMzJlMzEzNjMyMmUzMTMwMzQyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6JoMA0GCSqGSIb3DQEBCwUA
A4IBAQA5uNyqAEmP3mFm5P052fmYBu96IA+/l0FV5c/QgmLeypYeZq3tcLLTzy60
4GUA1MdTDmFkeKuI7nX9iPsnUnlgAhEPn4l6DD+O+r9Qj+XA1eS5S3r5zxJQlgwZ
x8LNCOgYkoTqMwigiYgTqN6qwymNuQcg5V5xlYZ8t8rxdyhLMe5+qMFSER/P3rjE
fgDmLEYduWkXh5zRUyK/HYhOWLBzCVJgmzdHRGG9DJiTA81RlkfajGie0MemklGO
einRaPZh1cDaPinExMzsAzSTQO4tErz3rw6v8buFyTtojJT3faNCW7MM3pk7Oj1x
znn830T1STRGzrXRukry3mqyVIIF
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:03 2025 by rpki-client