Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/1/32332e3135302e3139322e302f32342d3234203d3e20333935313633.roa
File: 32332e3135302e3139322e302f32342d3234203d3e20333935313633.roa (raw, json)
Hash identifier: fp0jY9D/3mgs1QQhktIav03TQZt5So07lPerjXLjRWA=
Subject key identifier: DF:D2:BE:D7:43:57:57:6E:88:D0:7F:B2:4E:A8:E1:A8:C1:70:04:A6
Certificate issuer: /CN=02a2e07dac9c9fa5200389642554daaf59566365dc7188711a
Certificate serial: 538B206279CEA1DD3FBBEA2C2C0BCFDE2F32A0D9
Authority key identifier: A6:89:2E:1D:E5:C0:4C:0E:57:E9:4A:F0:82:58:C8:0A:B8:B6:44:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/94008e39-99d4-45b9-99c6-73bae3250c42/02a2e07dac9c9fa5200389642554daaf59566365dc7188711a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/1/32332e3135302e3139322e302f32342d3234203d3e20333935313633.roa
Signing time: Fri 28 Jun 2024 22:14:33 +0000
ROA not before: Fri 28 Jun 2024 22:09:33 +0000
ROA not after: Fri 27 Jun 2025 22:14:33 +0000
asID: 395163
IP address blocks: 23.150.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:8b:20:62:79:ce:a1:dd:3f:bb:ea:2c:2c:0b:cf:de:2f:32:a0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a2e07dac9c9fa5200389642554daaf59566365dc7188711a
Validity
Not Before: Jun 28 22:09:33 2024 GMT
Not After : Jun 27 22:14:33 2025 GMT
Subject: CN=DFD2BED74357576E88D07FB24EA8E1A8C17004A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:5c:f1:c7:e3:15:03:35:2d:0e:66:e3:4f:
73:5f:78:68:d7:fb:2f:cf:62:aa:fe:1a:bb:e3:a8:
f8:3c:a2:d8:3a:aa:a1:c1:a1:b3:ea:46:ba:3a:f0:
75:39:df:c1:09:3d:3d:75:30:02:e9:38:9e:83:72:
bd:3b:d8:65:02:9d:c8:3a:1b:a2:2d:c9:97:0f:aa:
3c:57:21:5d:13:a3:8b:14:2b:58:27:bb:1f:99:06:
4d:f4:8f:00:cb:bf:e1:c7:4a:e4:b5:57:0c:2f:6b:
75:7c:09:7d:d5:1b:a4:16:5d:43:14:63:3f:ef:5d:
a8:78:e8:d0:30:ca:9c:cc:16:e3:6f:79:5e:43:fa:
58:1b:13:9d:b4:de:6c:a0:93:7a:26:c9:a7:88:16:
fc:c0:a2:11:c4:74:c4:a6:b9:31:a1:6c:2e:b3:ff:
40:c3:60:4f:4b:e4:7d:2c:de:10:46:5d:35:4e:d7:
e7:f0:08:aa:0e:38:ee:1b:dc:77:49:62:fb:d8:ae:
f8:ee:f0:bd:d6:16:c7:a9:94:6e:f9:25:ca:3f:5c:
bf:3d:31:02:17:9b:dc:c4:e4:35:be:c6:2a:7e:70:
7e:0d:c2:f4:a3:28:2d:09:41:75:35:3b:1c:91:66:
eb:78:bd:e7:ed:4e:ee:83:c1:dd:35:c8:62:a8:51:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D2:BE:D7:43:57:57:6E:88:D0:7F:B2:4E:A8:E1:A8:C1:70:04:A6
X509v3 Authority Key Identifier:
keyid:A6:89:2E:1D:E5:C0:4C:0E:57:E9:4A:F0:82:58:C8:0A:B8:B6:44:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/1/A6892E1DE5C04C0E57E94AF08258C80AB8B64465.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/94008e39-99d4-45b9-99c6-73bae3250c42/02a2e07dac9c9fa5200389642554daaf59566365dc7188711a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/1/32332e3135302e3139322e302f32342d3234203d3e20333935313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.150.192.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:9f:12:f9:b3:2b:12:b5:95:99:92:86:33:48:94:97:51:ca:
03:67:6c:99:03:78:db:2a:04:77:45:dd:33:30:a2:e2:c9:26:
a2:50:ab:50:e1:e2:c1:a9:9a:8b:87:ec:41:28:16:2e:b0:cb:
b5:e6:e2:c0:5a:9c:96:8d:4f:dd:72:e6:0a:9f:76:34:9d:73:
98:43:3e:2c:24:57:6f:87:cb:f5:77:a8:34:91:f5:9d:ef:20:
ab:e2:30:e8:d5:b1:9c:33:3e:0a:11:07:65:65:0d:4e:c5:97:
28:28:12:a7:c8:6c:29:5d:39:2b:94:cd:07:6c:8c:9b:92:b0:
bc:e4:87:d8:8c:15:3d:60:d9:96:61:67:ca:1b:01:d9:d8:a7:
36:7e:35:2d:a4:33:8f:04:f0:28:db:d5:ee:be:94:f7:66:25:
d4:cd:59:f5:6c:3a:d8:e9:f8:d4:2c:17:c2:7c:3c:4f:b9:23:
8c:a0:a0:9e:81:38:07:d9:34:77:65:3f:f4:03:0e:cd:d7:5b:
ad:32:46:92:13:f6:65:a0:27:12:9f:4a:d0:5c:97:3c:77:c1:
19:3b:c3:26:6e:1f:72:2f:50:d6:27:fc:66:88:37:6d:fa:8e:
0c:d7:68:ff:07:6a:a7:8b:32:36:d4:2a:f4:5f:0c:b3:2b:2b:
d9:75:14:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:17 2025 by rpki-client