Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e20323035323230.roa
File: 3137332e3234372e3232352e302f32342d3234203d3e20323035323230.roa (raw, json)
Hash identifier: OPClOMHKKwhVCMb5SDGyMixO3rF1vGO+IxPOKKd5v3o=
Subject key identifier: 38:70:2A:94:BB:72:4C:91:EB:90:B1:78:85:CE:17:BF:7C:A0:F2:FE
Certificate issuer: /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial: 30344A924778DBE4C490CA923CADCA42E37A9C51
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e20323035323230.roa
Signing time: Sat 03 Aug 2024 19:57:31 +0000
ROA not before: Sat 03 Aug 2024 19:52:31 +0000
ROA not after: Sat 02 Aug 2025 19:57:31 +0000
asID: 205220
IP address blocks: 173.247.225.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:34:4a:92:47:78:db:e4:c4:90:ca:92:3c:ad:ca:42:e3:7a:9c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Validity
Not Before: Aug 3 19:52:31 2024 GMT
Not After : Aug 2 19:57:31 2025 GMT
Subject: CN=38702A94BB724C91EB90B17885CE17BF7CA0F2FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0d:63:8d:ae:c4:b0:1f:fd:0d:00:53:fe:4d:
80:9b:bb:81:bd:33:5b:d9:fa:7d:44:7e:f4:ff:d3:
d9:f3:55:1a:21:90:9c:3e:06:f1:aa:e3:ff:03:06:
e3:6c:72:b5:38:23:87:27:0b:c8:ca:87:9d:de:8d:
3c:4b:79:1a:06:21:41:63:27:9f:4c:20:15:fa:bd:
a5:10:c3:77:67:62:e7:9c:a0:4e:bc:97:71:22:5e:
37:e7:fc:4f:2a:ec:55:b9:7d:8b:de:15:cf:78:e2:
44:cc:20:23:ca:de:b4:76:ef:5b:80:b8:6f:3e:a0:
f6:18:0c:be:85:27:8b:b4:87:b2:73:17:c9:f7:0c:
b2:15:5f:7b:70:29:1d:47:dc:5d:f7:21:53:be:5b:
2a:60:4a:f6:ad:76:c4:38:cf:31:eb:f4:e0:8e:9d:
30:cc:42:4a:17:ac:22:a2:54:df:8a:c0:cc:6b:11:
36:7c:04:d3:4c:b7:9d:48:ed:3e:2b:58:a0:2f:74:
49:e9:94:1d:44:09:27:0c:d2:06:70:7f:f7:07:0a:
4b:f2:9e:10:b6:91:93:07:92:cd:22:de:ef:11:ad:
8c:ba:d2:08:75:c4:12:ee:50:3a:cc:a1:40:b3:32:
92:7f:bf:fe:47:2e:54:8d:7b:97:45:2f:13:90:6e:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:70:2A:94:BB:72:4C:91:EB:90:B1:78:85:CE:17:BF:7C:A0:F2:FE
X509v3 Authority Key Identifier:
keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e20323035323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.247.225.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7b:02:26:a7:86:50:0e:d6:5c:c3:0f:5a:29:c4:63:dc:7d:
28:57:e0:55:df:c5:f5:3b:b8:b7:dd:cb:24:de:96:21:23:c7:
4d:8c:a0:25:ec:f7:e3:c3:e8:aa:0d:e4:77:24:ee:f1:30:56:
c5:b7:18:2a:4b:d2:a7:15:44:c1:53:9c:60:53:13:14:2b:29:
28:78:24:46:3f:5e:8e:d0:ba:47:a9:43:09:6a:f8:b8:a0:60:
93:8b:c6:52:6a:09:02:c1:16:3c:28:86:c2:4a:8c:af:b2:b5:
12:75:9e:94:b6:e4:bc:d6:de:10:3b:00:c6:f8:fd:8d:96:c4:
00:1b:d5:00:70:c0:91:d4:a5:51:44:44:42:9a:29:9d:a8:09:
93:d7:6c:1a:8b:7a:b0:de:37:ab:ed:cb:8c:84:03:18:b5:75:
8c:2b:d7:a7:fb:a9:96:da:24:f4:b7:17:b3:35:ae:68:0d:ce:
cb:c8:a8:08:44:0b:d0:6c:0b:fc:66:83:63:a4:1d:3b:6d:3c:
f0:f4:a9:80:95:f1:20:b9:6a:45:38:68:41:91:d1:61:30:5b:
00:40:12:66:44:9a:74:b6:6d:35:7f:20:d5:e0:4a:58:01:b0:
7a:20:f4:bb:b9:45:ae:7f:ab:db:dc:f7:1d:bb:0f:81:09:55:
9b:6a:c7:be
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUMDRKkkd42+TEkMqSPK3KQuN6nFEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjQwODAzMTk1MjMxWhcNMjUwODAyMTk1NzMx
WjAzMTEwLwYDVQQDEygzODcwMkE5NEJCNzI0QzkxRUI5MEIxNzg4NUNFMTdCRjdD
QTBGMkZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g1jja7EsB/9
DQBT/k2Am7uBvTNb2fp9RH70/9PZ81UaIZCcPgbxquP/AwbjbHK1OCOHJwvIyoed
3o08S3kaBiFBYyefTCAV+r2lEMN3Z2LnnKBOvJdxIl435/xPKuxVuX2L3hXPeOJE
zCAjyt60du9bgLhvPqD2GAy+hSeLtIeycxfJ9wyyFV97cCkdR9xd9yFTvlsqYEr2
rXbEOM8x6/Tgjp0wzEJKF6wiolTfisDMaxE2fATTTLedSO0+K1igL3RJ6ZQdRAkn
DNIGcH/3BwpL8p4QtpGTB5LNIt7vEa2MutIIdcQS7lA6zKFAszKSf7/+Ry5UjXuX
RS8TkG6VrQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFDhwKpS7ckyR65CxeIXOF798
oPL+MB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMyMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzUzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACt9+EwDQYJKoZIhvcN
AQELBQADggEBAGh7AianhlAO1lzDD1opxGPcfShX4FXfxfU7uLfdyyTeliEjx02M
oCXs9+PD6KoN5Hck7vEwVsW3GCpL0qcVRMFTnGBTExQrKSh4JEY/Xo7QukepQwlq
+LigYJOLxlJqCQLBFjwohsJKjK+ytRJ1npS25LzW3hA7AMb4/Y2WxAAb1QBwwJHU
pVFEREKaKZ2oCZPXbBqLerDeN6vty4yEAxi1dYwr16f7qZbaJPS3F7M1rmgNzsvI
qAhEC9BsC/xmg2OkHTttPPD0qYCV8SC5akU4aEGR0WEwWwBAEmZEmnS2bTV/INXg
SlgBsHog9Lu5Ra5/q9vc9x27D4EJVZtqx74=
-----END CERTIFICATE-----
Generated at Sun Sep 22 08:53:09 2024 by rpki-client on console-ams.rpki-client.org