Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/32332e3136322e3130342e302f32342d3234203d3e20343031343530.roa
File: 32332e3136322e3130342e302f32342d3234203d3e20343031343530.roa (raw, json)
Hash identifier: cTnvHggUpe2k6UsoXXwg98o6GbhTLfHiy7K/YTFXwCQ=
Subject key identifier: 43:0D:5C:FB:E4:FB:96:EF:FA:77:65:92:22:56:48:7F:6C:3B:DC:96
Certificate issuer: /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial: 5C5E7D71FD6BBB372C8448C169546083008157F6
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/32332e3136322e3130342e302f32342d3234203d3e20343031343530.roa
Signing time: Thu 31 Oct 2024 13:55:25 +0000
ROA not before: Thu 31 Oct 2024 13:50:25 +0000
ROA not after: Thu 30 Oct 2025 13:55:25 +0000
asID: 401450
IP address blocks: 23.162.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:5e:7d:71:fd:6b:bb:37:2c:84:48:c1:69:54:60:83:00:81:57:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Validity
Not Before: Oct 31 13:50:25 2024 GMT
Not After : Oct 30 13:55:25 2025 GMT
Subject: CN=430D5CFBE4FB96EFFA7765922256487F6C3BDC96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ed:59:88:64:4b:ac:35:17:62:d2:fd:e6:78:
41:6d:37:62:f8:2a:84:5e:bf:50:3d:ad:bc:7b:c1:
8b:8a:41:08:b4:ee:a3:05:f7:c7:c0:6a:8b:42:27:
3e:0f:6e:a7:d4:b8:ad:7c:91:8d:eb:a0:92:f7:f1:
f9:ca:3a:a9:91:ae:7b:a9:76:4a:91:f8:23:0a:6d:
64:a7:c6:4e:b7:85:63:9e:4f:2c:53:b0:3c:09:f6:
14:74:99:6a:8a:e5:77:f3:b1:f6:3f:34:57:db:2a:
33:4a:11:6a:de:d2:25:b5:70:85:af:5b:09:d8:15:
df:e3:52:91:5b:bb:1f:8a:a6:d8:37:49:5d:99:a2:
dc:11:1a:16:fd:59:aa:c8:21:8b:13:c7:e6:09:51:
34:af:67:6e:34:a1:0d:6d:20:08:05:01:50:9b:41:
32:e8:a6:7f:ce:df:e3:a5:a7:9e:7a:2b:f8:c3:fe:
c9:8e:b7:5f:de:9b:e4:13:fe:95:c3:48:a1:7b:e6:
1f:24:b4:6d:b6:75:69:5f:76:32:62:b3:bf:ec:a7:
9a:09:c8:65:98:bf:44:be:a5:0c:84:6d:ed:2b:8a:
da:3c:23:32:3b:89:d9:2d:a0:62:19:bd:b7:8e:31:
e5:b8:7b:df:62:bc:f2:c2:61:88:61:b1:07:d5:95:
fe:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0D:5C:FB:E4:FB:96:EF:FA:77:65:92:22:56:48:7F:6C:3B:DC:96
X509v3 Authority Key Identifier:
keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/32332e3136322e3130342e302f32342d3234203d3e20343031343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.162.104.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:03:f4:39:41:e1:2a:4e:6b:c2:0e:54:ff:e2:62:79:fb:89:
e3:0d:df:8a:13:66:39:0e:5e:e5:22:92:10:31:41:60:ae:10:
e2:1e:38:c6:0c:a2:77:11:22:f1:39:d9:44:e5:34:8b:1b:eb:
3a:a6:24:0f:77:ca:23:6d:40:ae:76:f5:b8:46:82:b7:1d:f8:
63:87:a4:64:18:e5:79:2c:45:2b:94:a8:c7:00:07:e9:be:45:
ce:d6:72:9e:b9:38:b7:80:90:af:cf:54:80:7a:89:1c:65:57:
47:62:cf:d0:95:e7:48:e3:b7:78:6d:d3:45:10:71:01:7b:21:
3b:99:00:f3:11:04:31:92:34:8d:c5:0a:dc:49:37:ec:ac:e8:
40:86:f8:5e:44:63:2a:74:7b:c6:a3:fc:6a:99:38:62:13:d1:
92:f4:3f:3d:7e:2d:aa:11:f3:ba:25:a0:b7:ca:6c:21:b5:dd:
a8:a5:8f:8d:39:c4:bc:d3:14:85:71:83:1c:5b:d5:46:42:de:
d8:3c:ac:7f:03:e8:6d:b6:47:1d:6b:e9:e9:97:3c:5b:07:f9:
f6:e1:a9:2c:09:4e:90:a5:eb:c5:c3:6f:04:b4:cd:b1:33:4b:
77:4c:ee:12:37:43:1c:bd:e7:4d:b4:fc:4a:f2:d9:e5:95:99:
a6:d3:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:43 2025 by rpki-client