Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e302e302f32332d3234203d3e203633333232.roa
File: 3134322e3134372e302e302f32332d3234203d3e203633333232.roa (raw, json)
Hash identifier: 89Mfn1bZD8bHS7WX2An3bzY52T4qGgn7f6bAar/+WQA=
Subject key identifier: D6:98:1B:DD:47:76:0A:FD:50:5F:38:EB:E3:7C:7C:5B:E2:38:F0:1C
Certificate issuer: /CN=c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347
Certificate serial: 44D32E5F5B4DB1FDE502C2C197ACAB94F163B5B0
Authority key identifier: 21:EF:AC:AF:1A:16:2D:6A:12:C0:F1:0A:28:BE:95:D0:F3:06:93:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b7592484-1960-4d36-b7eb-45faebea987d/c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e302e302f32332d3234203d3e203633333232.roa
Signing time: Thu 27 Jun 2024 18:29:23 +0000
ROA not before: Thu 27 Jun 2024 18:24:23 +0000
ROA not after: Thu 26 Jun 2025 18:29:23 +0000
asID: 63322
IP address blocks: 142.147.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:d3:2e:5f:5b:4d:b1:fd:e5:02:c2:c1:97:ac:ab:94:f1:63:b5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347
Validity
Not Before: Jun 27 18:24:23 2024 GMT
Not After : Jun 26 18:29:23 2025 GMT
Subject: CN=D6981BDD47760AFD505F38EBE37C7C5BE238F01C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:ac:b3:e8:07:e8:3a:11:37:42:65:6d:40:
d7:a3:d1:1e:a3:25:71:76:a4:13:c6:d1:18:35:84:
e4:4a:3a:a3:17:77:fc:ce:25:df:35:e8:09:f8:f5:
44:66:b8:a9:b0:73:5b:71:93:60:68:04:22:3a:92:
be:8a:5e:8f:c6:2b:d7:06:a2:78:7b:d5:64:5c:b6:
da:0e:a8:4f:b9:3b:ed:3d:60:30:3f:bd:eb:ff:9d:
d1:db:67:90:eb:b0:d1:34:59:9a:54:d2:3f:22:f6:
91:92:ad:df:4c:12:f4:9b:79:6c:77:28:ed:9b:61:
b2:c7:73:1f:ae:26:0f:5e:5d:28:f8:35:ee:87:20:
84:67:da:b7:52:16:62:ba:9b:bb:5d:c3:53:d7:7e:
ec:5a:de:7c:1c:5e:41:e7:a0:ce:2c:38:30:0b:44:
27:d0:cc:19:7a:35:e2:04:68:6b:64:be:64:13:0a:
0e:cc:79:3b:02:8d:f3:ea:8c:45:eb:4c:e4:79:bd:
c0:d0:28:58:f7:23:20:6f:da:72:68:3b:3a:89:52:
79:0c:c8:90:42:34:44:c8:fa:d9:67:e4:65:0b:cb:
53:d2:f8:20:0a:23:97:a4:b6:ba:88:9c:6c:0c:ac:
a4:c1:4b:6a:68:3b:59:d8:ae:28:bf:9c:ab:6d:6d:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:98:1B:DD:47:76:0A:FD:50:5F:38:EB:E3:7C:7C:5B:E2:38:F0:1C
X509v3 Authority Key Identifier:
keyid:21:EF:AC:AF:1A:16:2D:6A:12:C0:F1:0A:28:BE:95:D0:F3:06:93:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/21EFACAF1A162D6A12C0F10A28BE95D0F30693B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b7592484-1960-4d36-b7eb-45faebea987d/c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e302e302f32332d3234203d3e203633333232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.147.0.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:8a:4e:8a:d8:ad:1e:cc:66:68:70:88:b8:3d:c7:70:df:16:
96:53:a9:a0:c2:97:c6:64:9d:5a:f8:51:44:57:8c:8f:1e:11:
1f:43:e9:d7:cd:6b:58:ec:89:12:8b:3f:24:f9:1d:79:66:3b:
4c:33:03:cb:95:cd:13:ba:c0:fb:e4:d9:0e:ab:7a:bd:72:56:
62:27:62:5e:33:a8:2a:b2:77:be:e7:ba:18:1b:d3:06:b8:5d:
f8:86:59:e0:3f:e5:59:b5:52:da:57:f6:5b:83:14:4a:13:da:
4b:a5:db:a0:b8:f9:0a:17:8c:c9:98:e2:4a:4a:c3:45:f1:59:
a3:a4:0d:9e:bf:dc:2e:44:5e:77:e7:f9:4c:e0:38:44:d4:f6:
eb:04:5a:01:b9:f2:f8:21:f6:78:38:29:39:fd:25:f8:c8:e5:
d6:57:97:f4:44:8f:0e:5f:36:db:dd:0f:5f:41:de:29:d7:fb:
3e:5a:d7:01:4f:ed:ba:1a:63:44:c1:e5:06:f0:0d:53:ba:e8:
2a:31:d3:f3:0d:21:11:fa:f1:94:20:60:dd:d1:b8:b8:14:00:
8c:08:57:59:31:47:16:cf:43:a3:42:a1:f0:b3:93:c3:6a:10:
90:72:13:9b:f9:6c:85:1f:67:1e:a5:49:3b:b3:11:d6:d1:1a:
07:7c:b0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 14:56:08 2024 by rpki-client on console-fra.rpki-client.org