Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e322e302f32342d3234203d3e203633333232.roa
File: 3134322e3134372e322e302f32342d3234203d3e203633333232.roa (raw, json)
Hash identifier: 7cXkfp0t/secinhn5+uYRBKSsH56jJgW0XAuO44VlUE=
Subject key identifier: F2:92:52:67:4A:12:96:7D:76:3B:95:CB:C6:DE:DA:0A:EB:F9:AD:40
Certificate issuer: /CN=c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347
Certificate serial: 67574EA66916BEBE4B996417ECAED4F3C4FE7F50
Authority key identifier: 21:EF:AC:AF:1A:16:2D:6A:12:C0:F1:0A:28:BE:95:D0:F3:06:93:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b7592484-1960-4d36-b7eb-45faebea987d/c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e322e302f32342d3234203d3e203633333232.roa
Signing time: Wed 28 Aug 2024 20:14:41 +0000
ROA not before: Wed 28 Aug 2024 20:09:41 +0000
ROA not after: Wed 27 Aug 2025 20:14:41 +0000
asID: 63322
IP address blocks: 142.147.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:57:4e:a6:69:16:be:be:4b:99:64:17:ec:ae:d4:f3:c4:fe:7f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347
Validity
Not Before: Aug 28 20:09:41 2024 GMT
Not After : Aug 27 20:14:41 2025 GMT
Subject: CN=F29252674A12967D763B95CBC6DEDA0AEBF9AD40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:b5:03:c1:33:01:da:80:0b:1d:82:5a:05:
f2:91:48:29:cb:8a:65:37:32:3c:b6:85:53:35:b9:
85:ac:8b:e2:94:d9:b0:e1:e9:66:f9:ed:66:7c:76:
4e:99:aa:af:4b:cb:78:38:64:75:c5:2c:ff:f8:55:
82:fb:d0:f1:0d:17:1e:fd:54:f8:9b:2c:25:a5:f0:
9b:db:52:6a:22:dc:e5:a2:4d:18:a1:ab:be:e6:89:
97:17:37:88:39:79:43:43:ab:8a:ec:2b:b1:6f:04:
af:bb:00:43:13:0f:d4:d4:70:31:af:00:6f:43:78:
d1:71:81:36:25:e4:3b:a0:75:08:c2:06:b0:10:e4:
26:b4:3b:5c:ef:6f:31:3b:82:71:3a:b7:e3:3e:bb:
a5:7c:29:d2:1e:ed:e5:ee:e6:b5:a4:39:80:2b:1e:
bb:cf:79:2e:8d:22:65:75:6f:c4:a9:4a:d7:fc:4e:
0f:35:85:20:60:28:ce:86:54:f4:0c:ca:f8:11:72:
aa:70:1a:3d:e1:ad:81:7d:f9:75:31:dd:82:9c:fd:
7c:4a:81:e9:35:ae:fa:23:c1:86:d1:7c:df:a4:3a:
74:4e:12:42:ef:00:98:31:36:cd:46:3a:36:8d:56:
79:3b:ad:b1:74:89:ca:81:cc:b4:93:4a:c9:6b:88:
57:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:92:52:67:4A:12:96:7D:76:3B:95:CB:C6:DE:DA:0A:EB:F9:AD:40
X509v3 Authority Key Identifier:
keyid:21:EF:AC:AF:1A:16:2D:6A:12:C0:F1:0A:28:BE:95:D0:F3:06:93:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/21EFACAF1A162D6A12C0F10A28BE95D0F30693B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b7592484-1960-4d36-b7eb-45faebea987d/c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e322e302f32342d3234203d3e203633333232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.147.2.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c2:02:89:08:08:93:ec:35:71:2b:96:ec:82:a9:45:33:36:
52:9b:e3:2f:01:a2:28:b0:69:b9:1a:48:a5:aa:d2:1c:36:02:
ec:7c:8a:48:7e:5b:fd:f5:18:29:a3:1d:0c:89:26:49:28:27:
9e:99:17:fe:ed:0f:63:f8:ed:83:be:b8:99:c0:c6:39:87:95:
09:6c:5b:2a:e4:fd:f0:23:3d:fc:7f:20:32:0c:6a:87:3e:05:
9f:77:f9:b2:d3:9a:a2:ac:5a:8d:92:dc:b8:65:f5:c5:c6:c4:
ae:2f:55:17:19:1d:9e:9b:d6:fd:80:57:83:3b:15:60:63:6c:
70:01:ec:1d:e4:87:d5:6c:40:60:1e:62:53:ea:14:b0:ad:a2:
aa:54:6b:61:55:c7:83:61:2a:52:c4:7e:7c:ba:eb:da:e1:bb:
3f:f8:5d:0e:f8:b5:6c:cd:2c:9a:7f:37:29:ca:3f:d4:26:42:
40:f1:e1:52:0a:57:f0:3b:ea:5d:89:11:59:d6:8e:fc:71:03:
2e:5b:7f:fd:a5:d4:54:b2:bb:ff:7d:ce:36:8d:41:d0:65:64:
a1:1d:20:e2:f8:5e:ca:01:20:f8:f6:1d:bc:2b:ff:41:2a:1e:
24:a0:64:81:0b:c7:5f:72:24:cf:d3:4e:dc:0e:e4:2b:84:46:
51:cd:30:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 17:27:32 2024 by rpki-client on console-ams.rpki-client.org