Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3131322e302f32312d3234203d3e203137323136.roa
File: 3139382e33372e3131322e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier: 4mRiIT748w8NBbSk629ZkKGY00dHoiOmqp7zl6jmi7M=
Subject key identifier: AC:44:76:F1:8A:13:21:4F:FE:AD:C9:CB:33:02:F7:2F:5F:9A:5B:9A
Certificate issuer: /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial: 59004BD05C3142ACCD2AB340024AA47B6AC1BC01
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3131322e302f32312d3234203d3e203137323136.roa
Signing time: Mon 11 Jul 2022 10:35:26 +0000
ROA not before: Mon 11 Jul 2022 10:30:26 +0000
ROA not after: Mon 10 Jul 2023 10:35:26 +0000
asID: 17216
IP address blocks: 198.37.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:00:4b:d0:5c:31:42:ac:cd:2a:b3:40:02:4a:a4:7b:6a:c1:bc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Validity
Not Before: Jul 11 10:30:26 2022 GMT
Not After : Jul 10 10:35:26 2023 GMT
Subject: CN=AC4476F18A13214FFEADC9CB3302F72F5F9A5B9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:8e:7e:31:bf:81:a1:59:ef:b3:24:5c:9b:
71:6c:59:7c:e8:9d:b7:32:b6:fa:68:36:92:3a:50:
8b:c7:28:49:88:cb:79:85:e4:16:01:f8:56:07:25:
c3:cc:35:72:5c:81:28:e6:34:04:44:0f:c8:25:87:
33:09:dc:1e:16:69:f3:6e:dd:ef:66:84:a0:15:cb:
54:04:ac:80:f8:28:e2:e3:62:3e:f9:7a:14:85:57:
7b:ea:d1:eb:4f:37:c6:3d:84:f6:0f:6a:61:f6:a3:
12:e9:6b:53:2f:a7:73:77:c7:62:36:1f:34:49:1a:
bd:39:4c:80:fe:85:1a:96:8b:e6:c3:0d:86:2c:35:
b9:0b:82:5c:80:9d:a2:93:86:3f:26:72:fa:0b:11:
83:9d:2b:d3:ec:37:b6:9d:fe:27:1c:36:4e:83:d1:
2f:50:22:2e:48:ac:32:02:1d:cd:49:f5:7c:3f:46:
8a:d9:15:a4:23:73:4a:5a:d5:81:37:94:52:df:b4:
39:db:4b:1c:5e:4f:f0:f4:bc:b7:8c:d9:7d:84:42:
c3:c5:d6:3f:78:c5:f0:c7:77:25:ec:f4:5d:26:9a:
c9:3a:bf:25:77:67:b0:c3:03:eb:3b:f4:6f:1d:be:
9d:8e:8b:1f:71:25:16:a4:c0:c0:cb:b2:c8:74:77:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:44:76:F1:8A:13:21:4F:FE:AD:C9:CB:33:02:F7:2F:5F:9A:5B:9A
X509v3 Authority Key Identifier:
keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139382e33372e3131322e302f32312d3234203d3e203137323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.37.112.0/21
Signature Algorithm: sha256WithRSAEncryption
67:04:6b:4a:1d:ca:c0:74:08:7a:6b:11:00:76:bb:6b:93:d0:
30:d4:ac:c2:01:6f:df:31:23:00:f4:da:e5:fc:98:99:74:c1:
75:73:de:1c:c5:10:c9:5b:0b:10:45:2c:dd:73:3b:8a:b5:36:
23:a4:51:f9:2c:fc:93:f5:d3:e2:9e:a0:cb:74:8b:12:85:1e:
c5:43:e1:87:42:a6:ca:45:89:83:68:0c:be:08:ff:16:05:60:
25:56:b7:93:b8:94:61:60:93:73:ae:12:62:68:5d:2e:eb:ad:
12:b3:3c:78:53:d0:a5:e1:a2:00:a3:8b:12:13:86:20:72:2f:
f6:4d:0a:e6:c9:03:9e:81:31:04:ff:9f:5d:93:2d:08:3a:5e:
a3:48:e9:89:fe:67:16:e9:ef:ba:c3:7e:46:2d:86:8d:74:c8:
b4:a6:a0:68:65:ef:88:75:68:07:05:0b:7d:1b:7c:4e:64:89:
2b:86:42:e3:10:00:ef:7a:61:c2:9a:f1:a2:e6:88:27:ce:aa:
56:e7:c3:b8:75:b7:25:7d:14:eb:bb:a5:3c:0a:af:54:e1:0f:
2d:80:a1:18:20:b8:06:7a:4c:8b:6b:01:6b:d5:00:5c:ea:f3:
5f:db:2c:e7:c9:20:85:84:b9:d2:8b:9b:52:21:72:24:0c:cd:
0e:0f:6c:d4
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUWQBL0FwxQqzNKrNAAkqke2rBvAEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1N2M3ZWMyNDEyN2Y2MjQzMjQ5ZmM1ODdi
NmM0MWZjMWY2MDk4MzU4NzMwHhcNMjIwNzExMTAzMDI2WhcNMjMwNzEwMTAzNTI2
WjAzMTEwLwYDVQQDEyhBQzQ0NzZGMThBMTMyMTRGRkVBREM5Q0IzMzAyRjcyRjVG
OUE1QjlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnziOfjG/gaFZ
77MkXJtxbFl86J23Mrb6aDaSOlCLxyhJiMt5heQWAfhWByXDzDVyXIEo5jQERA/I
JYczCdweFmnzbt3vZoSgFctUBKyA+Cji42I++XoUhVd76tHrTzfGPYT2D2ph9qMS
6WtTL6dzd8diNh80SRq9OUyA/oUalovmww2GLDW5C4JcgJ2ik4Y/JnL6CxGDnSvT
7De2nf4nHDZOg9EvUCIuSKwyAh3NSfV8P0aK2RWkI3NKWtWBN5RS37Q520scXk/w
9Ly3jNl9hELDxdY/eMXwx3cl7PRdJprJOr8ld2ewwwPrO/RvHb6djosfcSUWpMDA
y7LIdHcSEQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFKxEdvGKEyFP/q3JyzMC9y9f
mluaMB8GA1UdIwQYMBaAFCu2o4sjOXwtrswu/N02JtYgTT74MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzAv
MkJCNkEzOEIyMzM5N0MyREFFQ0MyRUZDREQzNjI2RDYyMDREM0VGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3YzdlYzI0MTI3ZjYyNDMyNDlmYzU4N2I2YzQxZmMxZjYwOTgzNTg3My5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8wLzMxMzkzODJlMzMzNzJlMzEzMTMyMmUzMDJmMzIzMTJkMzIz
NDIwM2QzZTIwMzEzNzMyMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8YlcDANBgkqhkiG9w0BAQsF
AAOCAQEAZwRrSh3KwHQIemsRAHa7a5PQMNSswgFv3zEjAPTa5fyYmXTBdXPeHMUQ
yVsLEEUs3XM7irU2I6RR+Sz8k/XT4p6gy3SLEoUexUPhh0KmykWJg2gMvgj/FgVg
JVa3k7iUYWCTc64SYmhdLuutErM8eFPQpeGiAKOLEhOGIHIv9k0K5skDnoExBP+f
XZMtCDpeo0jpif5nFunvusN+Ri2GjXTItKagaGXviHVoBwULfRt8TmSJK4ZC4xAA
73phwprxouaIJ86qVufDuHW3JX0U67ulPAqvVOEPLYChGCC4BnpMi2sBa9UAXOrz
X9ss58kghYS50oubUiFyJAzNDg9s1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org