Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23273.roa
File: AS23273.roa (raw, json)
Hash identifier: 5rGjjkpZT8+4O4ittJ2SomVo42N25/xPuabDn8DWdm0=
Subject key identifier: 3F:1A:DE:6F:DC:90:F6:C1:AA:67:AD:01:1E:F8:A3:68:84:EE:90:96
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 728EF322070DA639ABADEA858CCD51F9F177F1AB
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23273.roa
Signing time: Tue 26 Nov 2024 16:56:56 +0000
ROA not before: Tue 26 Nov 2024 16:51:56 +0000
ROA not after: Tue 25 Nov 2025 16:56:56 +0000
asID: 23273
IP address blocks: 172.96.180.0/22 maxlen: 24
204.44.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:8e:f3:22:07:0d:a6:39:ab:ad:ea:85:8c:cd:51:f9:f1:77:f1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Nov 26 16:51:56 2024 GMT
Not After : Nov 25 16:56:56 2025 GMT
Subject: CN=3F1ADE6FDC90F6C1AA67AD011EF8A36884EE9096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:a7:5f:99:f1:8a:13:72:86:4b:e2:1d:80:
1a:25:01:eb:13:70:93:90:2d:79:a0:6e:17:f7:4a:
b9:d0:36:f1:67:44:ca:74:f3:df:b3:37:5d:66:65:
35:f8:f0:2f:e4:64:84:aa:39:6d:d3:52:06:0b:9a:
bc:b1:96:30:65:27:5a:0f:10:b6:52:aa:2d:42:32:
af:60:e4:90:c8:f5:f1:dc:c3:8a:4c:9a:6d:27:8d:
da:c0:ab:8d:ff:02:d2:4f:90:79:75:aa:55:cd:1a:
4b:8a:5c:5c:45:ec:d1:ca:f2:4b:36:c7:39:0b:e4:
33:6b:81:5a:39:d0:36:7f:2e:ff:2e:ba:1b:a9:da:
a4:d7:a5:55:87:3e:e0:34:86:2e:a2:27:a0:c8:9d:
3b:7c:44:9e:51:81:2f:0f:ae:c0:2a:9c:9c:55:93:
ad:cc:3b:83:ec:a7:9d:79:da:ed:6a:21:c5:6c:99:
05:dc:27:23:2a:4a:68:e7:1d:ab:1e:09:34:80:87:
ce:86:7e:c4:58:70:e7:ef:9d:19:c6:32:15:0d:9b:
dd:fa:4a:8a:2e:cb:de:12:df:d0:dc:be:49:b4:31:
c2:90:53:92:f4:6a:7a:a6:00:3d:ca:84:14:3f:2a:
02:08:92:44:32:82:f2:c7:ba:fe:11:24:88:10:b1:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1A:DE:6F:DC:90:F6:C1:AA:67:AD:01:1E:F8:A3:68:84:EE:90:96
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23273.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.96.180.0/22
204.44.192.0/20
Signature Algorithm: sha256WithRSAEncryption
34:99:be:2c:66:07:6b:8d:7a:03:11:57:47:ca:b4:4c:2b:f5:
97:a0:31:95:1c:74:67:df:d9:a6:bf:09:a0:0d:82:32:df:ba:
73:3f:86:93:ca:57:78:65:e5:a0:1c:b4:8f:e2:31:bf:7b:41:
e8:17:94:df:96:59:e0:33:f0:75:ca:e9:ef:61:86:11:d9:a8:
03:03:f5:8c:b2:3b:01:0b:79:89:05:6d:b5:26:11:07:3a:6f:
86:3b:ff:fa:8f:2b:45:00:ed:f7:d3:ca:cb:f5:68:9e:17:eb:
bb:61:e6:88:2d:b5:09:be:77:90:03:60:dd:53:3c:7c:28:9e:
bf:c4:d0:c2:72:34:9b:12:90:01:ba:ac:4d:ed:fd:ab:60:fa:
a0:3b:e2:d2:82:53:fc:49:18:0b:48:92:ea:f7:9f:38:5b:fe:
de:0f:a6:7e:fa:74:85:4b:bb:2d:e3:57:ef:d1:4b:9a:9a:c4:
81:a1:39:aa:c6:bb:51:ac:b6:1d:e4:b0:ed:14:ef:2d:f3:55:
3b:8a:1f:11:d1:35:b9:b7:c7:9f:58:bf:a3:cb:4f:09:76:9f:
b0:a0:23:18:71:d8:bf:5e:18:a5:38:36:22:d7:c4:ec:5d:71:
ab:74:0b:04:11:11:9a:d7:2c:7e:bf:97:f2:4d:f1:3f:a6:1c:
e0:eb:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:09 2025 by rpki-client