Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa
File: 32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa (raw, json)
Hash identifier: 054/ryaaEbOl2LhmO5VbxaMA+2AFtQof00O7DPv+zhE=
Subject key identifier: 7A:5E:F7:A9:4A:BB:F3:6C:BB:A6:30:E5:7A:81:C9:DE:8D:5B:7F:9B
Certificate issuer: /CN=2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0
Certificate serial: 3E1907F66E99843F46DA490B7FF63522CE2BB049
Authority key identifier: E6:93:D1:C7:7F:F6:45:B5:C9:57:59:A0:D6:CE:A4:88:2D:05:9D:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa
Signing time: Sat 08 Apr 2023 09:20:12 +0000
ROA not before: Sat 08 Apr 2023 09:15:12 +0000
ROA not after: Sat 06 Apr 2024 09:20:12 +0000
asID: 202400
IP address blocks: 23.147.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:19:07:f6:6e:99:84:3f:46:da:49:0b:7f:f6:35:22:ce:2b:b0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0
Validity
Not Before: Apr 8 09:15:12 2023 GMT
Not After : Apr 6 09:20:12 2024 GMT
Subject: CN=7A5EF7A94ABBF36CBBA630E57A81C9DE8D5B7F9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:f4:1e:65:e9:fd:75:86:3e:ce:65:b2:ec:
c0:65:4b:d1:bb:34:3e:3c:97:7d:26:89:11:68:b6:
4c:bc:c6:36:cf:17:ec:2d:23:67:6e:9e:c4:10:3a:
48:20:34:6a:e8:7f:e3:83:51:54:de:79:c7:5b:96:
05:0f:30:3b:84:0a:b1:16:dc:4e:2b:9e:d4:30:71:
41:53:70:47:2e:e8:e0:4f:df:53:b5:6a:c3:58:68:
81:1e:1d:75:a4:98:39:c3:3a:96:50:14:ae:b4:c5:
0b:26:36:2d:d8:b3:46:8c:cf:04:bf:3d:06:82:eb:
43:8c:44:b7:7c:cb:db:40:54:4d:50:18:2a:e0:e9:
99:0b:e1:47:98:fd:52:98:ef:7a:d0:c7:1b:30:d4:
0b:79:6b:db:3a:d8:80:ca:31:02:86:e6:70:b7:8e:
48:fa:f9:80:b5:93:7e:9d:15:31:06:f9:2b:9b:af:
0b:e6:13:e4:d8:31:f0:37:6b:2f:c9:35:1c:58:ae:
21:ff:60:a8:ca:51:92:33:1e:c2:01:0f:05:5e:9c:
e6:68:41:92:39:71:6f:b2:0a:00:7f:2c:c7:a2:7e:
b5:0b:98:d3:8d:4c:4b:b4:c6:9b:9c:6c:a8:20:39:
49:fc:d8:35:c8:a1:9b:72:76:b0:80:0f:61:55:1b:
88:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5E:F7:A9:4A:BB:F3:6C:BB:A6:30:E5:7A:81:C9:DE:8D:5B:7F:9B
X509v3 Authority Key Identifier:
keyid:E6:93:D1:C7:7F:F6:45:B5:C9:57:59:A0:D6:CE:A4:88:2D:05:9D:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/E693D1C77FF645B5C95759A0D6CEA4882D059D34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.147.120.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a9:ac:6f:67:f2:9b:ff:f7:18:90:8e:87:75:a9:d3:2d:6f:
37:63:52:d4:ff:bb:be:f4:98:f8:ff:12:52:31:c0:d7:fe:e6:
a2:c6:cf:b6:16:ed:1b:16:60:c8:f9:d9:43:55:e5:91:3b:4b:
83:24:ce:60:ae:5c:a4:b4:69:a0:e5:a2:29:63:e0:17:aa:5c:
d9:79:81:9b:8e:11:27:6d:91:b8:e2:34:a3:fa:f8:c6:b6:14:
09:d2:64:6c:01:09:eb:df:74:f9:d6:c2:a4:d8:bb:d7:7f:52:
a0:a3:36:5a:ba:18:84:e6:00:5b:65:54:97:9e:e3:7e:0a:c2:
b9:06:38:0b:6f:aa:f4:c4:1c:9d:c1:b8:b3:32:81:b4:38:a2:
05:8b:f4:bf:d1:95:eb:2b:11:cc:82:f2:2e:34:46:d7:f3:e2:
7b:71:31:78:d5:85:b5:97:94:b6:57:45:24:42:00:10:ad:eb:
ce:ae:35:19:2c:ee:b2:5a:23:fc:56:a7:22:42:38:34:17:3d:
66:4b:6e:d5:0c:e3:d0:08:d9:ee:b6:ef:67:05:45:c3:75:d3:
e7:1a:a5:98:26:d2:04:db:c8:38:59:cd:78:d8:c1:4a:59:f3:
16:09:aa:30:12:db:bf:a9:a1:c1:dc:b9:1a:6c:4f:6e:1e:e4:
8c:df:3b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:24:57 2025 by rpki-client