Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e2031323339.roa
File: 3137332e3234372e3233302e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: /qI/+4+tSX8+/OGO92tr3RVCpwHRYAoYven8pLn3XtY=
Subject key identifier: 02:97:50:3C:EE:96:4D:E3:4E:C7:4F:1D:02:E8:05:45:EB:56:1D:3B
Certificate issuer: /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial: 5329E9E67436A53DE6309F0BDE4D711AF84E87C2
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e2031323339.roa
Signing time: Sat 06 Jul 2024 14:58:55 +0000
ROA not before: Sat 06 Jul 2024 14:53:55 +0000
ROA not after: Sat 05 Jul 2025 14:58:55 +0000
asID: 1239
IP address blocks: 173.247.230.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:29:e9:e6:74:36:a5:3d:e6:30:9f:0b:de:4d:71:1a:f8:4e:87:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Validity
Not Before: Jul 6 14:53:55 2024 GMT
Not After : Jul 5 14:58:55 2025 GMT
Subject: CN=0297503CEE964DE34EC74F1D02E80545EB561D3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:66:3b:34:be:fe:df:2c:fd:eb:e2:62:f3:
3b:ec:ee:e5:25:be:10:0c:99:85:43:84:f3:7c:3a:
ed:2d:44:48:f3:db:15:92:43:30:5a:0c:a7:bb:6e:
c5:62:e3:3d:9d:3e:db:5c:ab:25:c3:d7:9b:6d:25:
be:c3:34:4b:2c:5c:f6:46:f7:85:3f:69:6f:18:78:
30:ab:bb:5b:36:bb:16:29:74:b8:1a:55:99:96:c0:
34:fe:4b:91:12:e0:47:29:28:44:d7:f3:19:91:39:
05:2f:4a:d1:37:41:bf:f7:b9:07:96:29:09:21:77:
92:b1:36:e1:6f:3b:89:d1:10:4b:4d:97:f8:0e:b2:
5c:ac:fb:76:e9:29:7d:dc:48:b1:bf:1c:f2:d5:83:
0e:ad:bb:93:bc:0c:ee:0d:29:c5:88:5d:2d:a5:19:
75:7b:85:e5:e7:34:63:94:e4:8d:8f:b7:a8:89:a3:
21:5e:e1:c3:3d:ff:0e:f8:fb:fd:fd:0b:83:31:fb:
d8:73:03:ab:f8:2f:53:a0:fa:fa:5a:df:3a:e0:a9:
39:ca:ee:90:1d:d8:2d:46:0e:83:12:38:9c:0e:a5:
11:89:93:1e:f6:a3:d2:93:4c:95:fa:05:24:c3:af:
c2:dd:b5:6e:a4:ac:23:74:85:d5:56:b3:78:ca:4d:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:97:50:3C:EE:96:4D:E3:4E:C7:4F:1D:02:E8:05:45:EB:56:1D:3B
X509v3 Authority Key Identifier:
keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.247.230.0/24
Signature Algorithm: sha256WithRSAEncryption
33:18:aa:75:13:76:ff:0a:10:9c:0a:af:56:af:e4:99:a2:db:
c8:02:a6:cc:8d:66:38:08:a2:1c:61:fe:85:18:b9:62:16:7b:
46:e5:95:c4:d9:05:60:74:79:0d:55:f9:86:37:22:55:40:3e:
67:13:e6:24:34:fe:a0:e5:03:5f:35:e2:52:98:8e:ea:82:c1:
ac:6c:ba:0d:a1:aa:34:c6:b3:d8:72:c7:d1:c9:e0:ef:2c:45:
61:81:ac:ad:2a:1f:2f:71:4e:49:9a:d5:bf:06:32:4e:16:4a:
80:a8:12:b2:0d:ee:e9:21:5a:59:65:56:7e:84:37:07:24:f1:
09:be:da:9e:8b:1d:3d:ac:4a:aa:af:3d:02:5d:e3:94:4e:ee:
a9:3a:cd:7c:d7:1f:e3:4f:a2:9d:ca:fa:2e:21:c7:2c:06:4a:
a3:a9:f6:ce:5b:fe:66:00:b5:b9:e0:69:a3:96:90:38:2f:5c:
ef:9f:7b:23:9e:aa:16:8a:4a:fe:d5:5a:dc:d3:cf:c1:15:a6:
e9:cd:d2:dc:c0:3f:12:5c:57:33:ca:d5:1f:76:c8:27:23:6e:
04:40:2e:f7:f4:6b:36:b9:a6:a9:99:66:86:f3:6f:2e:7b:f2:
d9:36:da:54:66:11:e2:d5:b5:d8:02:9b:c4:5d:1a:b9:ca:93:
d3:6b:80:a5
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUUynp5nQ2pT3mMJ8L3k1xGvhOh8IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjQwNzA2MTQ1MzU1WhcNMjUwNzA1MTQ1ODU1
WjAzMTEwLwYDVQQDEygwMjk3NTAzQ0VFOTY0REUzNEVDNzRGMUQwMkU4MDU0NUVC
NTYxRDNCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6FmOzS+/t8s
/eviYvM77O7lJb4QDJmFQ4TzfDrtLURI89sVkkMwWgynu27FYuM9nT7bXKslw9eb
bSW+wzRLLFz2RveFP2lvGHgwq7tbNrsWKXS4GlWZlsA0/kuREuBHKShE1/MZkTkF
L0rRN0G/97kHlikJIXeSsTbhbzuJ0RBLTZf4DrJcrPt26Sl93Eixvxzy1YMOrbuT
vAzuDSnFiF0tpRl1e4Xl5zRjlOSNj7eoiaMhXuHDPf8O+Pv9/QuDMfvYcwOr+C9T
oPr6Wt864Kk5yu6QHdgtRg6DEjicDqURiZMe9qPSk0yV+gUkw6/C3bVupKwjdIXV
VrN4yk2UzQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFAKXUDzulk3jTsdPHQLoBUXr
Vh07MB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMzMzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMyMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK335jANBgkqhkiG9w0BAQsF
AAOCAQEAMxiqdRN2/woQnAqvVq/kmaLbyAKmzI1mOAiiHGH+hRi5YhZ7RuWVxNkF
YHR5DVX5hjciVUA+ZxPmJDT+oOUDXzXiUpiO6oLBrGy6DaGqNMaz2HLH0cng7yxF
YYGsrSofL3FOSZrVvwYyThZKgKgSsg3u6SFaWWVWfoQ3ByTxCb7anosdPaxKqq89
Al3jlE7uqTrNfNcf40+incr6LiHHLAZKo6n2zlv+ZgC1ueBpo5aQOC9c7597I56q
FopK/tVa3NPPwRWm6c3S3MA/ElxXM8rVH3bIJyNuBEAu9/RrNrmmqZlmhvNvLnvy
2TbaVGYR4tW12AKbxF0aucqT02uApQ==
-----END CERTIFICATE-----
Generated at Sun Sep 22 08:53:09 2024 by rpki-client on console-ams.rpki-client.org