Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233342e302f32342d3234203d3e2031323339.roa
File: 3230392e3230302e3233342e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: YxjfJAP0S1CfaL43Qqwtj3v7b8UuptWPPCqfY79mvl8=
Subject key identifier: FD:DC:98:33:B4:DE:89:7B:9F:90:08:8B:94:0D:13:D1:AC:CC:5D:67
Certificate issuer: /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial: 78C69D62711643BDAC975E051A0B9F24F4267405
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233342e302f32342d3234203d3e2031323339.roa
Signing time: Wed 16 Nov 2022 11:29:03 +0000
ROA not before: Wed 16 Nov 2022 11:24:03 +0000
ROA not after: Wed 15 Nov 2023 11:29:03 +0000
asID: 1239
IP address blocks: 209.200.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c6:9d:62:71:16:43:bd:ac:97:5e:05:1a:0b:9f:24:f4:26:74:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Validity
Not Before: Nov 16 11:24:03 2022 GMT
Not After : Nov 15 11:29:03 2023 GMT
Subject: CN=FDDC9833B4DE897B9F90088B940D13D1ACCC5D67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9c:0f:f6:22:4b:44:ba:30:39:4b:27:90:48:
1e:c7:25:47:fb:7a:ad:19:a2:90:04:53:14:80:f7:
29:5f:9e:08:63:59:02:13:52:79:2d:29:2d:c3:37:
63:80:03:84:50:05:96:59:b1:b2:f0:ca:08:63:08:
d9:ad:63:e5:92:5d:89:6d:a2:cc:38:1a:8a:93:8c:
d5:c6:31:2f:76:35:b1:a7:1e:48:30:02:3d:5e:ff:
55:60:55:e9:d1:ec:38:a3:53:44:98:1e:88:b1:92:
83:a3:c8:c0:64:b8:0c:46:f8:08:53:1f:0f:e9:45:
55:e5:9c:ab:e8:51:42:9b:db:cc:e4:1f:af:5f:ec:
46:30:32:f5:91:ac:da:25:20:72:53:f0:e3:5b:c4:
4e:68:77:b8:42:e3:28:8c:4b:2b:e8:47:ca:02:03:
75:d9:41:11:b1:eb:a0:af:8a:c3:c1:0a:42:04:ec:
8e:0a:67:e6:a3:b6:1f:3b:6b:cd:09:ca:79:af:f1:
c7:84:5e:12:d7:aa:a5:83:6a:43:d4:4b:4a:80:ed:
26:c9:53:2d:80:ca:42:ec:e3:9b:e4:86:16:5d:de:
57:22:33:2a:f6:48:12:92:4a:5a:23:c2:f6:f4:48:
37:75:89:e8:b6:22:f1:7f:13:fb:84:57:ed:d1:78:
e1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DC:98:33:B4:DE:89:7B:9F:90:08:8B:94:0D:13:D1:AC:CC:5D:67
X509v3 Authority Key Identifier:
keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3233342e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.200.234.0/24
Signature Algorithm: sha256WithRSAEncryption
67:00:20:e8:bf:47:bb:57:17:a4:10:01:9c:ab:a2:0e:e6:70:
a7:c5:73:5d:99:62:e8:cc:dc:41:cb:2a:92:00:be:6f:5c:d1:
ab:5b:f1:da:57:a5:48:f8:b6:e7:db:50:5a:a4:69:20:17:2f:
79:60:2c:0f:9b:96:9d:91:d4:0f:05:79:6b:8c:50:34:58:67:
c0:ec:f5:c2:02:8a:1a:6b:ce:aa:80:80:e7:9f:a1:49:db:8c:
29:bf:3d:a5:e2:86:f4:0c:3a:c4:0a:fd:d1:19:cc:8e:d8:48:
6e:7e:fa:58:d3:da:d1:2d:5b:9f:4c:ad:fa:a7:40:d2:01:6b:
9a:32:aa:48:63:54:5f:4c:fe:08:dd:38:81:59:f4:0e:fc:8f:
93:57:ba:d3:93:f8:e3:28:07:f5:98:3e:4e:ce:04:21:3a:31:
74:e6:75:e2:c4:15:3f:0d:6e:3c:27:d3:d8:ae:a0:b3:1e:7c:
0a:80:91:1b:be:01:fd:39:4b:83:f6:a8:65:c6:d0:17:c1:e5:
11:0e:da:27:fe:94:5d:6a:5f:51:91:7e:3a:ca:0c:79:cc:6c:
cd:df:fd:d4:1c:f4:e6:c5:33:ea:75:6d:26:d9:e0:1c:16:65:
67:bf:0c:c4:91:72:df:11:e4:e4:0a:3f:ea:11:cd:37:f1:37:
e4:d2:ce:c4
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUeMadYnEWQ72sl14FGgufJPQmdAUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTE2MTEyNDAzWhcNMjMxMTE1MTEyOTAz
WjAzMTEwLwYDVQQDEyhGRERDOTgzM0I0REU4OTdCOUY5MDA4OEI5NDBEMTNEMUFD
Q0M1RDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZwP9iJLRLow
OUsnkEgexyVH+3qtGaKQBFMUgPcpX54IY1kCE1J5LSktwzdjgAOEUAWWWbGy8MoI
YwjZrWPlkl2JbaLMOBqKk4zVxjEvdjWxpx5IMAI9Xv9VYFXp0ew4o1NEmB6IsZKD
o8jAZLgMRvgIUx8P6UVV5Zyr6FFCm9vM5B+vX+xGMDL1kazaJSByU/DjW8ROaHe4
QuMojEsr6EfKAgN12UERseugr4rDwQpCBOyOCmfmo7YfO2vNCcp5r/HHhF4S16ql
g2pD1EtKgO0myVMtgMpC7OOb5IYWXd5XIjMq9kgSkkpaI8L29Eg3dYnotiLxfxP7
hFft0XjhoQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFP3cmDO03ol7n5AIi5QNE9Gs
zF1nMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzMyMzAzOTJlMzIzMDMwMmUzMjMzMzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMyMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANHI6jANBgkqhkiG9w0BAQsF
AAOCAQEAZwAg6L9Hu1cXpBABnKuiDuZwp8VzXZli6MzcQcsqkgC+b1zRq1vx2lel
SPi259tQWqRpIBcveWAsD5uWnZHUDwV5a4xQNFhnwOz1wgKKGmvOqoCA55+hSduM
Kb89peKG9Aw6xAr90RnMjthIbn76WNPa0S1bn0yt+qdA0gFrmjKqSGNUX0z+CN04
gVn0DvyPk1e605P44ygH9Zg+Ts4EIToxdOZ14sQVPw1uPCfT2K6gsx58CoCRG74B
/TlLg/aoZcbQF8HlEQ7aJ/6UXWpfUZF+OsoMecxszd/91Bz05sUz6nVtJtngHBZl
Z78MxJFy3xHk5Ao/6hHNN/E35NLOxA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org