Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa
File: 3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa (raw, json)
Hash identifier: I2wwATCpnNqE/bPLOyle8hk1cez6xdVti74lo8z795M=
Subject key identifier: 02:85:1D:03:1B:F0:51:65:22:B3:F0:BE:84:8F:C1:A7:22:0C:EC:0B
Certificate issuer: /CN=98eab7485a7a133048028c73f7a33f373837deef9565fa141a
Certificate serial: 29B1062A3332B2195F4721D5A54CDD9A99B07F4D
Authority key identifier: BF:A2:75:09:76:CA:07:F5:6A:68:97:6B:0F:01:EB:86:2F:17:C3:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/98eab7485a7a133048028c73f7a33f373837deef9565fa141a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa
Signing time: Tue 06 Jun 2023 02:32:28 +0000
ROA not before: Tue 06 Jun 2023 02:27:28 +0000
ROA not after: Tue 04 Jun 2024 02:32:28 +0000
asID: 63313
IP address blocks: 104.245.120.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b1:06:2a:33:32:b2:19:5f:47:21:d5:a5:4c:dd:9a:99:b0:7f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eab7485a7a133048028c73f7a33f373837deef9565fa141a
Validity
Not Before: Jun 6 02:27:28 2023 GMT
Not After : Jun 4 02:32:28 2024 GMT
Subject: CN=02851D031BF0516522B3F0BE848FC1A7220CEC0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:52:39:c3:b7:50:c0:b3:9a:1f:c3:0f:a6:
af:37:db:1f:d4:fb:4c:97:5b:db:a7:5f:49:04:94:
4d:bd:30:cd:41:eb:71:9a:cc:ef:6b:90:6b:91:95:
23:5c:b7:d2:a5:d0:c9:ad:19:14:33:bd:59:83:bd:
85:17:b5:c5:4f:23:c7:f7:2c:1f:c8:73:ed:05:fa:
b2:75:e0:04:51:4d:3d:0a:78:02:19:10:be:19:d3:
7c:ee:36:85:5a:e8:c7:ff:15:40:21:07:0f:a5:08:
56:c1:9a:d7:04:34:c3:93:12:88:89:26:4a:3c:fa:
ac:88:f2:53:cc:e4:ea:90:c9:a4:bc:13:2c:73:0e:
1b:fb:7a:2d:01:b8:e8:32:7f:cb:8b:89:95:83:8b:
9b:d2:29:a0:14:35:97:fe:67:bc:7c:c7:c4:ad:05:
94:be:a1:44:56:cb:c2:fe:db:09:d3:bb:ed:a3:b0:
fe:ca:cc:ca:2f:bf:69:b5:f7:ed:20:af:b5:c3:e7:
0b:f9:e4:b4:0a:e5:40:43:1f:e8:0f:f5:fe:86:9b:
7b:19:80:76:52:82:87:c9:3f:d2:f3:a0:f7:b5:3e:
38:2c:64:9e:71:45:98:47:3c:c4:a2:cd:90:96:ef:
a8:94:d6:1a:12:59:f3:cb:c9:7c:68:6b:27:a8:a7:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:85:1D:03:1B:F0:51:65:22:B3:F0:BE:84:8F:C1:A7:22:0C:EC:0B
X509v3 Authority Key Identifier:
keyid:BF:A2:75:09:76:CA:07:F5:6A:68:97:6B:0F:01:EB:86:2F:17:C3:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/BFA2750976CA07F56A68976B0F01EB862F17C3B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/98eab7485a7a133048028c73f7a33f373837deef9565fa141a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.245.120.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:cd:6c:36:49:99:f4:85:26:f9:f8:2c:73:90:2f:c9:d0:0e:
3a:86:6c:f3:7d:3f:70:13:fc:a6:b2:fe:49:3f:a5:9e:b7:e2:
2c:68:97:fe:39:a5:59:a4:6f:6c:c1:aa:5d:75:55:60:02:b9:
90:1c:f4:42:f5:e6:6b:e5:bb:97:47:6e:91:34:6a:54:40:87:
c5:ce:05:c2:5b:8f:03:25:2a:b8:51:38:83:f5:bc:af:3c:9f:
89:70:06:da:5e:a3:4f:e2:99:92:41:7a:36:24:58:4d:8f:be:
52:a1:4e:c3:1d:d6:b7:67:5a:ce:58:df:78:39:7d:1d:6e:65:
9a:bf:36:7e:27:77:9f:f6:fd:07:98:3c:df:ef:11:8f:22:25:
05:76:f9:1e:94:e6:c3:db:fa:21:6f:e8:21:3f:6b:dc:4d:23:
16:20:a5:4a:21:72:7d:1c:2a:68:f7:8d:ea:9a:33:b9:61:66:
65:1f:21:f8:ce:13:1c:b2:20:b4:d5:42:d4:d3:5a:2e:cd:d2:
dd:b7:d5:27:ad:bc:b7:45:b4:e2:6b:21:9c:c4:27:3b:4b:5f:
49:f9:7b:e2:8d:08:96:0d:49:06:54:44:c3:9d:62:c1:74:c5:
4c:d6:af:86:68:74:b8:9c:81:7d:1d:95:f5:e9:bc:e3:90:58:
f7:68:6c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org