Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: k5u9zrlCStcCNi1tFKweX7lP4B8p7VWIYb5g+2n8Hys=
Subject key identifier: 8C:7E:C5:19:64:45:3D:86:06:45:7D:16:52:F6:85:0A:17:D7:67:C5
Certificate issuer: /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial: 35FD0C639FE641641FB0AC0442E290B4BF6AA178
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS3257.roa
Signing time: Thu 10 Nov 2022 13:38:24 +0000
ROA not before: Thu 10 Nov 2022 13:33:24 +0000
ROA not after: Thu 09 Nov 2023 13:38:24 +0000
asID: 3257
IP address blocks: 66.102.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:fd:0c:63:9f:e6:41:64:1f:b0:ac:04:42:e2:90:b4:bf:6a:a1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Validity
Not Before: Nov 10 13:33:24 2022 GMT
Not After : Nov 9 13:38:24 2023 GMT
Subject: CN=8C7EC51964453D8606457D1652F6850A17D767C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:f7:15:a4:e2:4b:32:f7:a4:c6:e8:f5:cd:
d7:2e:5d:c2:63:3d:81:8f:27:d0:e6:50:c0:d6:b5:
b5:b5:f4:53:91:ba:94:35:40:f8:be:ec:25:16:68:
65:3b:8d:3a:39:d7:ab:c9:74:02:81:aa:af:22:bd:
c0:9b:a1:08:db:a2:7b:e1:b2:53:30:c8:06:c6:4d:
31:10:cd:9b:9f:d3:94:34:ae:af:6d:ba:a1:d4:4d:
3b:b5:d3:2f:23:55:9e:ef:6c:6e:69:7a:9f:81:90:
f5:71:48:c5:cc:ae:10:d0:aa:ec:53:30:20:2d:92:
d9:2f:ee:77:50:76:8d:99:8e:d7:bc:03:1f:96:fd:
45:ed:55:07:53:b2:b6:aa:3c:84:89:ec:bf:c0:0d:
cb:40:e2:a4:06:c0:9d:2b:89:35:c8:4d:5f:3e:8b:
ef:16:c2:e3:38:75:fd:aa:0a:4c:c2:6e:d4:07:68:
71:cd:97:12:97:46:e2:f0:49:ba:b5:6f:45:a8:9c:
18:e4:8a:f0:4f:03:0c:8d:0e:0a:90:21:a6:23:5d:
92:39:d7:e0:19:9d:c7:96:ec:7a:4e:d0:eb:e8:32:
88:27:c9:27:bb:a1:c9:af:48:6e:bc:d8:eb:40:0b:
b0:29:4a:3e:21:73:1d:07:84:38:e2:fc:f7:88:94:
e4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7E:C5:19:64:45:3D:86:06:45:7D:16:52:F6:85:0A:17:D7:67:C5
X509v3 Authority Key Identifier:
keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.102.128.0/20
Signature Algorithm: sha256WithRSAEncryption
90:19:6e:4b:6e:4a:15:ef:cc:48:86:5d:72:6d:71:dc:8d:79:
63:75:04:37:a8:11:d7:6d:9f:73:b3:4c:f3:79:89:d1:69:c7:
a1:c8:db:65:06:49:4b:31:38:ab:f6:e0:bf:fb:2d:e4:47:d8:
19:49:51:d4:b2:f9:60:35:f3:89:c7:77:a5:b4:8f:a4:f8:8d:
82:ba:1c:2b:22:9f:fe:ad:40:8c:12:86:2a:f5:d7:6b:e9:e0:
7f:86:1e:ef:cf:e6:1e:81:96:ee:63:fc:ac:0f:93:bd:4b:2d:
45:91:41:d8:b7:3f:35:3c:03:21:38:37:00:26:27:08:52:e6:
35:3b:0e:f9:a4:fb:b5:e0:43:33:b3:2d:6f:7e:06:a3:25:df:
fa:79:30:6c:ea:e7:2b:e5:ff:c5:61:c1:d6:e2:59:ea:ab:42:
e7:05:e0:67:bd:23:80:2f:ed:99:cb:84:dd:6e:d4:d4:52:3e:
af:96:41:95:17:e9:4a:33:75:49:32:5c:53:f5:c1:6f:3a:2c:
70:6d:9f:9f:9e:e3:34:c4:df:93:27:10:7c:cb:b6:6e:89:f4:
9c:d5:77:d9:9e:b7:3e:19:75:d9:6a:bb:d8:a8:63:50:78:9d:
5c:0c:e1:10:a6:ce:e0:7f:d3:c3:ba:f9:b2:79:02:79:d3:ef:
2f:9c:70:2d
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUNf0MY5/mQWQfsKwEQuKQtL9qoXgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTEwMTMzMzI0WhcNMjMxMTA5MTMzODI0
WjAzMTEwLwYDVQQDEyg4QzdFQzUxOTY0NDUzRDg2MDY0NTdEMTY1MkY2ODUwQTE3
RDc2N0M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2H3FaTiSzL3
pMbo9c3XLl3CYz2BjyfQ5lDA1rW1tfRTkbqUNUD4vuwlFmhlO406OderyXQCgaqv
Ir3Am6EI26J74bJTMMgGxk0xEM2bn9OUNK6vbbqh1E07tdMvI1We72xuaXqfgZD1
cUjFzK4Q0KrsUzAgLZLZL+53UHaNmY7XvAMflv1F7VUHU7K2qjyEiey/wA3LQOKk
BsCdK4k1yE1fPovvFsLjOHX9qgpMwm7UB2hxzZcSl0bi8Em6tW9FqJwY5IrwTwMM
jQ4KkCGmI12SOdfgGZ3Hlux6TtDr6DKIJ8knu6HJr0huvNjrQAuwKUo+IXMdB4Q4
4vz3iJTkFQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFIx+xRlkRT2GBkV9FlL2hQoX
12fFMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMC9BUzMyNTcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARCZoAwDQYJKoZIhvcNAQELBQADggEB
AJAZbktuShXvzEiGXXJtcdyNeWN1BDeoEddtn3OzTPN5idFpx6HI22UGSUsxOKv2
4L/7LeRH2BlJUdSy+WA184nHd6W0j6T4jYK6HCsin/6tQIwShir112vp4H+GHu/P
5h6Blu5j/KwPk71LLUWRQdi3PzU8AyE4NwAmJwhS5jU7Dvmk+7XgQzOzLW9+BqMl
3/p5MGzq5yvl/8VhwdbiWeqrQucF4Ge9I4Av7ZnLhN1u1NRSPq+WQZUX6UozdUky
XFP1wW86LHBtn5+e4zTE35MnEHzLtm6J9JzVd9metz4Zddlqu9ioY1B4nVwM4RCm
zuB/08O6+bJ5AnnT7y+ccC0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org