Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
File: 3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa (raw, json)
Hash identifier: tRjTeim16u+h2g4AHsCy+S0XT4HaUBZxJ0c44ewWupY=
Subject key identifier: 64:10:9E:BA:38:79:1B:5A:6E:D9:A0:57:5F:3A:87:0D:00:2E:47:FF
Certificate issuer: /CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
Certificate serial: 3C6EA17B3BDF182C66E4B504DC85C58837369A99
Authority key identifier: FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
Signing time: Wed 03 Jan 2024 03:27:23 +0000
ROA not before: Wed 03 Jan 2024 03:22:23 +0000
ROA not after: Wed 01 Jan 2025 03:27:23 +0000
asID: 54110
IP address blocks: 199.182.132.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:6e:a1:7b:3b:df:18:2c:66:e4:b5:04:dc:85:c5:88:37:36:9a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
Validity
Not Before: Jan 3 03:22:23 2024 GMT
Not After : Jan 1 03:27:23 2025 GMT
Subject: CN=64109EBA38791B5A6ED9A0575F3A870D002E47FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:2e:e4:4b:a4:7a:12:87:17:b1:f4:e0:f2:
b2:18:27:29:2f:73:21:83:6c:ff:1e:50:05:61:d6:
73:01:10:31:ed:40:e5:ae:d6:d5:92:f9:93:2c:85:
74:a3:5e:b7:3a:0b:33:73:68:8c:11:e1:9f:6e:cd:
76:05:b3:53:d2:50:11:9f:a5:0b:11:f2:ce:7a:97:
4c:12:8c:2f:4d:a4:8b:f9:99:08:b9:8b:27:6c:f9:
05:40:96:db:fa:23:3d:79:4f:58:7d:76:43:3e:60:
4b:a5:a3:98:5f:6a:ea:6e:8b:e1:6f:c7:73:46:41:
08:ce:ee:95:ab:eb:08:a2:65:74:87:0c:3f:85:83:
28:85:c1:a9:6f:58:32:9f:f0:f4:08:29:e6:39:54:
1b:d6:53:5d:f2:2d:80:46:65:1a:a4:7f:c8:64:65:
cf:c3:5f:17:73:94:2f:df:b0:34:60:cc:f4:66:b8:
69:26:d7:3d:af:23:07:01:5a:93:ca:03:66:df:1c:
a8:b7:95:61:9c:1d:8c:15:db:f7:6f:56:a8:f9:fa:
02:55:bf:0f:87:04:9a:61:3e:2a:a6:65:20:25:b1:
2c:70:3a:ad:ad:9c:1e:4c:92:8d:6c:f7:75:5b:d3:
0d:d2:69:66:58:e6:a1:34:ca:bb:71:e2:49:a4:6e:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:10:9E:BA:38:79:1B:5A:6E:D9:A0:57:5F:3A:87:0D:00:2E:47:FF
X509v3 Authority Key Identifier:
keyid:FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/FB251CC7AAB29D28F17756B88E15DC43DC5ACF09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.182.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:7e:4d:b5:18:98:00:56:3c:5d:f1:83:c5:b5:9b:63:6d:ee:
80:f2:aa:82:43:23:60:a0:55:f1:f3:67:ea:fa:41:18:f9:34:
f0:59:0d:83:63:cc:f5:df:71:ad:b9:56:e3:2d:f6:af:fa:79:
77:e8:d4:46:6d:b6:42:d8:55:42:f3:89:3d:3e:79:55:c5:18:
43:8f:be:17:48:4b:39:91:35:ec:b2:e2:b9:7b:66:f1:2d:22:
93:bc:17:cb:d6:0d:a7:2b:00:1c:d7:03:59:01:85:fc:1b:cd:
39:50:04:34:26:eb:c4:85:23:29:f9:df:e4:86:c8:fb:bf:2f:
a6:64:95:71:a0:a1:fe:51:86:ab:48:93:fd:3e:48:a9:5a:e4:
6f:68:9f:bd:a9:75:3e:54:88:fc:3c:87:bb:56:15:69:1a:35:
04:5a:9c:78:b6:79:f4:3d:84:e0:89:c7:6e:26:51:61:bb:c9:
4e:50:9c:ee:41:c9:95:33:dd:2d:f9:de:3d:1a:de:36:fa:bf:
35:18:b4:6c:2b:56:c9:48:9f:89:7c:64:2f:67:87:19:ae:05:
28:46:dd:b0:b2:37:c0:55:8a:c3:40:28:6c:11:f7:f1:b7:42:
15:31:57:14:90:70:c5:df:de:da:db:05:30:aa:fe:cf:51:da:
84:03:c5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org