Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3230362e3136382e33362e302f32332d3234203d3e203534313130.roa
File: 3230362e3136382e33362e302f32332d3234203d3e203534313130.roa (raw, json)
Hash identifier: K2mYt96MrOvMwpBvZeoed8xlDq+vlHCii907gU+eXng=
Subject key identifier: 14:7E:78:80:3A:2C:57:0E:2F:B3:95:16:CD:85:D3:4A:48:FB:04:BF
Certificate issuer: /CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
Certificate serial: 20D5DA0F769DD93EB53B8E4679E76651B5B2B2AD
Authority key identifier: FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3230362e3136382e33362e302f32332d3234203d3e203534313130.roa
Signing time: Tue 12 Dec 2023 20:31:49 +0000
ROA not before: Tue 12 Dec 2023 20:26:49 +0000
ROA not after: Tue 10 Dec 2024 20:31:49 +0000
asID: 54110
IP address blocks: 206.168.36.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d5:da:0f:76:9d:d9:3e:b5:3b:8e:46:79:e7:66:51:b5:b2:b2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
Validity
Not Before: Dec 12 20:26:49 2023 GMT
Not After : Dec 10 20:31:49 2024 GMT
Subject: CN=147E78803A2C570E2FB39516CD85D34A48FB04BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:98:5f:2e:b7:26:f0:fd:21:dc:8b:b7:a7:
69:4f:cb:b8:3e:fe:00:81:e1:40:83:c8:6f:10:f1:
93:c0:f8:07:0d:e0:7d:3f:db:23:65:bb:ee:82:2d:
6f:02:ed:8f:93:d6:8b:a6:3c:d9:9c:84:54:3b:86:
6d:3e:6d:00:dc:f1:50:73:ea:6e:4b:04:45:e2:35:
60:b3:80:de:d7:c7:de:ce:97:c1:20:ef:58:0a:7f:
e6:48:92:3d:2b:9f:ee:bc:4a:39:2b:a1:ba:c1:6b:
46:0e:41:52:f1:37:e2:c8:99:66:70:2f:b8:dd:66:
6e:c2:ea:a5:d7:53:2b:b5:38:45:c1:d8:a9:70:5e:
33:55:e9:67:e2:af:9b:93:50:bb:e7:88:69:52:d3:
e5:5b:f1:d9:8e:4d:4c:4d:da:6b:ec:c9:61:d7:6a:
68:33:db:9b:e5:40:f9:49:4a:c1:91:6d:c0:82:81:
29:98:10:f7:28:2b:d0:95:a1:04:e5:c8:ec:6c:dd:
be:23:17:7d:f7:fa:82:70:c2:41:20:4f:a6:71:ad:
b8:29:87:69:23:27:44:c7:a0:31:f2:d5:74:c9:65:
09:49:cc:0c:5b:20:24:ed:74:c3:27:77:8b:ff:70:
54:d4:e1:9f:58:7d:2b:ae:f0:06:c7:82:0b:c2:75:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7E:78:80:3A:2C:57:0E:2F:B3:95:16:CD:85:D3:4A:48:FB:04:BF
X509v3 Authority Key Identifier:
keyid:FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/FB251CC7AAB29D28F17756B88E15DC43DC5ACF09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3230362e3136382e33362e302f32332d3234203d3e203534313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.168.36.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:14:bb:a6:06:b7:7a:f7:3f:f9:b4:9f:16:1e:38:90:2c:93:
3e:12:0a:56:1d:28:42:fe:72:1b:ca:a7:86:d7:b7:c4:8d:31:
b0:db:b4:37:eb:c1:16:47:b2:4a:e4:a8:af:09:a3:d4:2a:61:
4d:da:3b:ae:85:06:04:9d:e3:70:52:53:c0:ff:a8:08:4d:7f:
7c:f8:fd:55:22:c6:2a:3d:af:5b:5f:b3:38:00:cb:8d:f1:81:
b5:8e:c1:0c:52:fb:13:4d:dc:0f:59:3a:d2:0c:0f:c4:a8:2c:
3c:dd:8f:70:8f:18:3f:9b:2c:9a:49:a5:89:7d:05:8e:11:f9:
22:31:f2:20:b1:35:90:27:41:7b:1f:cd:f1:d6:c5:71:d2:29:
48:0f:09:55:8c:ff:44:f6:f8:90:ed:70:d7:14:a6:bd:dd:3a:
52:31:96:13:62:45:37:57:ea:d3:c8:b3:8e:62:fb:71:3a:c7:
dc:d4:2e:aa:b7:72:5e:b9:64:89:2f:4b:ae:e7:58:97:9b:1a:
0c:15:70:7b:01:cb:ed:14:20:14:18:5d:7f:28:ee:23:aa:ed:
c6:eb:0d:5d:cc:a8:25:38:f2:7a:e5:7e:4e:03:5f:c0:25:a6:
93:2b:19:96:62:d5:e7:4a:99:c8:6d:30:d1:2b:2d:8f:6c:9a:
c8:fb:16:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org