Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa
File: 32332e3134322e32342e302f32322d3234203d3e20323035363633.roa (raw, json)
Hash identifier: 4dT2MNCIqN4cC8laBTcI/CCDQEO8dF7z2wS0MROreZc=
Subject key identifier: 13:BF:27:D5:55:34:34:86:EE:63:2C:11:E5:3B:E7:1B:A0:47:90:E6
Certificate issuer: /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial: 7D79E3DDC41488D60B385934458278C4911CA920
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa
Signing time: Tue 05 Nov 2024 03:39:59 +0000
ROA not before: Tue 05 Nov 2024 03:34:59 +0000
ROA not after: Tue 04 Nov 2025 03:39:59 +0000
asID: 205663
IP address blocks: 23.142.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:79:e3:dd:c4:14:88:d6:0b:38:59:34:45:82:78:c4:91:1c:a9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Validity
Not Before: Nov 5 03:34:59 2024 GMT
Not After : Nov 4 03:39:59 2025 GMT
Subject: CN=13BF27D555343486EE632C11E53BE71BA04790E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:43:6f:18:fa:79:05:0e:11:8c:a2:e6:ca:6c:
27:3c:ca:bf:31:27:47:5c:b0:2c:fb:c1:92:22:ef:
bd:5f:78:50:e7:c4:f4:52:11:de:d5:a2:a5:25:4d:
4f:ae:b5:86:5f:df:c4:ab:ea:c8:1d:bc:19:3d:41:
9f:51:db:72:df:75:49:81:c7:77:6e:92:a7:d7:ac:
a9:8b:f2:be:5d:e6:6c:ab:74:2a:e8:d0:ac:b4:f1:
66:8c:4a:82:f0:d1:be:ea:df:d0:2c:ab:11:4d:93:
8e:ac:2f:86:30:bc:2b:be:41:db:82:f2:f4:9a:7b:
1b:0a:62:e4:75:db:f7:83:c5:0d:7a:25:2e:8e:29:
53:79:5c:55:b4:06:32:54:6c:40:0c:60:6c:c8:26:
44:b0:ba:16:bb:62:8a:08:2a:98:0d:be:67:05:9f:
01:7b:5b:0a:f7:33:44:66:6f:53:04:32:b3:ac:23:
32:9a:60:8c:fc:31:81:ff:04:7b:cc:d9:e9:67:d4:
8e:df:80:e3:4d:84:0d:d8:a7:e2:55:df:8b:9b:ed:
42:60:57:7f:bd:62:65:58:05:c0:b9:24:2e:46:10:
a7:4f:a3:14:f3:75:6d:bc:72:f6:a8:2c:af:2c:72:
d0:b4:cf:5e:7d:ad:d7:7e:cc:1d:cb:e0:8f:70:2a:
4f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BF:27:D5:55:34:34:86:EE:63:2C:11:E5:3B:E7:1B:A0:47:90:E6
X509v3 Authority Key Identifier:
keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.142.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:98:1e:31:fb:e3:8b:96:08:5b:a5:39:ba:fa:ea:89:8e:f6:
14:e1:14:48:47:5b:f9:6b:0e:dc:34:7c:8b:a3:40:09:c5:51:
63:cc:32:bb:74:42:04:d5:85:19:17:a9:00:81:c6:1a:64:d5:
6f:09:1e:33:29:62:43:b3:4e:27:75:22:7a:63:1f:27:f4:e2:
69:d0:ef:a5:56:9b:02:ae:8a:6e:5d:45:84:ae:28:13:22:9d:
ef:81:38:2c:46:da:2a:fe:e2:bd:98:f7:bd:61:9a:af:2b:74:
ee:9b:42:7e:30:7d:14:3e:5a:ff:3b:e8:37:b1:3d:8c:d0:55:
62:9e:4a:ac:9f:99:fc:ed:85:bc:b1:b8:26:06:cf:4d:7d:f7:
fc:78:6e:cb:49:78:be:d8:cc:82:f9:43:d2:3e:0f:ff:c8:17:
14:25:91:b9:61:e7:c9:68:a5:3e:ed:e7:19:9a:a2:f4:8e:c9:
4a:02:35:4b:b3:f3:85:50:e2:f8:b2:0e:9d:e1:a2:b2:80:8c:
e6:87:6b:bb:00:e4:7b:9e:70:10:f4:52:33:92:7d:9e:70:61:
55:3c:74:22:51:34:0c:89:9b:39:96:cb:95:56:1f:00:24:ab:
ab:57:f1:45:cc:58:4e:9a:42:a1:ad:6f:ef:cb:04:cd:7f:4f:
6a:30:34:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:21:12 2025 by rpki-client