Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233342e302f32332d3233203d3e20323132323338.roa
File: 3137332e3234372e3233342e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier: 8J5gk0MN6CaXUR8QJiZ89SdIRC5BMypLc08K5Plxmqw=
Subject key identifier: 07:AE:E8:BB:48:F3:24:D2:A0:78:6C:8E:EC:47:B1:FA:90:85:11:B3
Certificate issuer: /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial: 15AF42782E06A62E7BC468DCDE9A831C9D9BB2DB
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233342e302f32332d3233203d3e20323132323338.roa
Signing time: Tue 06 Aug 2024 10:03:53 +0000
ROA not before: Tue 06 Aug 2024 09:58:53 +0000
ROA not after: Tue 05 Aug 2025 10:03:53 +0000
asID: 212238
IP address blocks: 173.247.234.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:af:42:78:2e:06:a6:2e:7b:c4:68:dc:de:9a:83:1c:9d:9b:b2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Validity
Not Before: Aug 6 09:58:53 2024 GMT
Not After : Aug 5 10:03:53 2025 GMT
Subject: CN=07AEE8BB48F324D2A0786C8EEC47B1FA908511B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:d9:90:1c:89:5c:4b:0b:86:56:ba:35:63:
3c:21:90:74:0f:46:ab:a8:86:11:1c:ae:b1:af:55:
f9:ff:df:5a:d9:92:ed:f9:99:9e:9c:8c:b5:78:58:
97:6c:94:7b:d6:e1:ab:15:ae:d9:b9:b3:81:c7:1c:
2d:e4:2b:9c:5f:f3:d4:36:bf:ee:04:fe:24:35:a3:
d4:c0:f5:a6:2e:16:ac:e1:0c:14:43:4e:13:d2:d8:
42:de:10:6b:71:1d:cf:02:67:92:8a:06:8f:1a:6b:
cd:49:08:7a:a2:bf:fe:d0:0e:e1:3d:0d:47:80:29:
db:76:55:65:75:7e:96:ee:e4:84:0a:53:1d:a7:2b:
1b:df:cb:0c:ae:d6:a5:16:6e:60:97:bf:31:86:43:
63:09:d6:3c:bf:60:3c:89:76:1e:b3:c6:04:63:15:
13:7d:14:98:1c:a7:46:5f:08:bd:a9:d7:e4:16:ff:
66:93:65:56:c7:75:6f:06:7c:dc:3a:59:71:33:eb:
1a:98:e1:21:a5:13:30:c0:5f:b5:ed:03:22:7b:f1:
ea:e4:1e:ea:fd:e9:f4:24:2e:a1:30:55:c6:3a:97:
de:fe:77:72:38:19:fc:2e:52:58:3b:bd:64:47:d3:
95:a6:2d:32:ce:44:49:fd:95:37:e2:7f:c8:cb:23:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AE:E8:BB:48:F3:24:D2:A0:78:6C:8E:EC:47:B1:FA:90:85:11:B3
X509v3 Authority Key Identifier:
keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233342e302f32332d3233203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.247.234.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:ef:bb:88:45:64:70:fa:2b:be:5b:c1:59:65:5c:72:c4:d3:
b0:e2:92:96:e7:de:57:b1:47:01:c8:f9:85:6c:22:a3:10:84:
b3:23:33:62:a3:ae:18:e2:ee:ef:27:c8:5a:4e:74:6d:dc:79:
77:11:53:fd:0c:74:1c:f0:71:ae:59:a9:5f:67:b8:ee:81:b4:
eb:a6:b2:e4:bc:1d:a7:24:ad:c6:bf:37:0c:42:9c:36:6c:4c:
9f:24:58:a5:58:46:4e:ac:27:f5:5f:0a:8a:41:66:f8:89:67:
f0:2d:69:55:20:6f:2f:b4:93:f5:87:69:47:78:0e:0a:54:a5:
45:68:07:3c:09:84:f7:f5:28:67:7c:0c:b3:cf:c5:83:f1:a2:
34:c4:a4:04:4d:b3:0a:87:42:5f:1e:2f:83:7c:4c:b8:25:2a:
a1:fe:e4:86:a3:72:df:c3:c2:46:ea:12:80:c9:1d:95:2f:10:
68:51:7b:1a:d8:d6:6f:cb:3f:be:c5:60:e8:c9:bd:f8:79:6a:
61:24:d0:c2:bc:29:b7:88:be:f1:eb:4d:e0:d9:08:6e:92:07:
7e:8e:8b:1b:22:6a:33:a4:b0:61:c7:b8:4c:41:98:8e:c8:fa:
75:1a:82:f0:66:8f:6f:e5:65:e7:b8:10:3f:a6:c1:e3:ab:84:
35:94:4b:53
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUFa9CeC4Gpi57xGjc3pqDHJ2bstswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjQwODA2MDk1ODUzWhcNMjUwODA1MTAwMzUz
WjAzMTEwLwYDVQQDEygwN0FFRThCQjQ4RjMyNEQyQTA3ODZDOEVFQzQ3QjFGQTkw
ODUxMUIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU3ZkByJXEsL
hla6NWM8IZB0D0arqIYRHK6xr1X5/99a2ZLt+ZmenIy1eFiXbJR71uGrFa7ZubOB
xxwt5CucX/PUNr/uBP4kNaPUwPWmLhas4QwUQ04T0thC3hBrcR3PAmeSigaPGmvN
SQh6or/+0A7hPQ1HgCnbdlVldX6W7uSEClMdpysb38sMrtalFm5gl78xhkNjCdY8
v2A8iXYes8YEYxUTfRSYHKdGXwi9qdfkFv9mk2VWx3VvBnzcOllxM+samOEhpRMw
wF+17QMie/Hq5B7q/en0JC6hMFXGOpfe/ndyOBn8LlJYO71kR9OVpi0yzkRJ/ZU3
4n/IyyP9HwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFAeu6LtI8yTSoHhsjuxHsfqQ
hRGzMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMzMzQyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGt9+owDQYJKoZIhvcN
AQELBQADggEBAB3vu4hFZHD6K75bwVllXHLE07Dikpbn3lexRwHI+YVsIqMQhLMj
M2Kjrhji7u8nyFpOdG3ceXcRU/0MdBzwca5ZqV9nuO6BtOumsuS8Hackrca/NwxC
nDZsTJ8kWKVYRk6sJ/VfCopBZviJZ/AtaVUgby+0k/WHaUd4DgpUpUVoBzwJhPf1
KGd8DLPPxYPxojTEpARNswqHQl8eL4N8TLglKqH+5Iajct/DwkbqEoDJHZUvEGhR
exrY1m/LP77FYOjJvfh5amEk0MK8KbeIvvHrTeDZCG6SB36OixsiajOksGHHuExB
mI7I+nUagvBmj2/lZee4ED+mweOrhDWUS1M=
-----END CERTIFICATE-----
Generated at Sun Sep 22 08:27:35 2024 by rpki-client on console-fra.rpki-client.org