Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/32332e3133382e3233322e302f32342d3234203d3e20393435.roa
File: 32332e3133382e3233322e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier: qaHWOYJNpbml0MoW+uepxuwqEZUWGRxHB6Xa6foSGuc=
Subject key identifier: 3D:EA:D3:75:01:19:D7:7F:C2:6B:B9:57:F5:C2:76:1C:86:8C:F9:E6
Certificate issuer: /CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
Certificate serial: 5403B4A8A51D07C752BFC907AC55341CC67643A5
Authority key identifier: DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
Authority info access: rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/32332e3133382e3233322e302f32342d3234203d3e20393435.roa
Signing time: Mon 07 Oct 2024 10:02:57 +0000
ROA not before: Mon 07 Oct 2024 09:57:57 +0000
ROA not after: Mon 06 Oct 2025 10:02:57 +0000
asID: 945
IP address blocks: 23.138.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:03:b4:a8:a5:1d:07:c7:52:bf:c9:07:ac:55:34:1c:c6:76:43:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
Validity
Not Before: Oct 7 09:57:57 2024 GMT
Not After : Oct 6 10:02:57 2025 GMT
Subject: CN=3DEAD3750119D77FC26BB957F5C2761C868CF9E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fd:3c:f9:4f:ff:23:95:9e:85:73:87:8b:40:
0e:18:72:4a:aa:e6:e1:8f:88:8f:6d:fb:28:8c:70:
15:19:d4:65:93:98:c3:41:f7:52:03:42:a3:89:9b:
08:25:aa:33:c8:25:3e:23:6a:50:a2:4b:69:e9:98:
1b:e9:c4:b8:52:6e:17:8f:2a:7b:19:f2:68:9d:12:
70:9b:c2:99:0d:b4:70:47:d6:d9:26:7f:31:1c:cc:
3d:87:87:1e:37:ed:d6:6b:68:40:45:1a:35:50:7e:
f8:63:90:84:f4:3e:87:1b:8f:9b:7c:33:4e:aa:fc:
40:cc:1a:49:a7:d4:e5:05:00:d7:8b:3c:14:ae:42:
3a:06:d9:b6:dd:91:89:cf:87:72:f8:9b:46:cd:d6:
d9:2c:a5:d5:b4:36:e6:ca:2b:f1:2c:54:c9:0d:bd:
7e:7d:2f:8f:f8:25:c7:9e:eb:14:51:72:af:0c:74:
96:02:6d:ef:e4:84:74:fa:52:23:73:5d:2b:9d:00:
b4:27:a5:5e:4a:c4:f4:cd:8a:7a:d2:cc:59:fd:7b:
64:c0:bd:10:b0:d6:ab:3b:b1:aa:2b:17:69:88:54:
12:8e:ae:90:ca:d7:e1:ba:59:bb:99:72:b8:20:25:
53:5f:90:f5:e6:dc:c4:06:3b:00:0b:6b:26:65:98:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:D3:75:01:19:D7:7F:C2:6B:B9:57:F5:C2:76:1C:86:8C:F9:E6
X509v3 Authority Key Identifier:
keyid:DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/32332e3133382e3233322e302f32342d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.138.232.0/24
Signature Algorithm: sha256WithRSAEncryption
06:05:45:35:bd:9c:49:2b:9c:33:6c:4c:95:32:c7:2d:fc:98:
9e:e7:3a:f8:21:02:d0:24:91:7a:ad:f0:1b:55:2f:a5:c6:68:
f1:cc:03:f0:71:5d:1f:55:c8:4e:15:6b:f2:d4:c6:77:5e:67:
fe:0b:99:65:cb:45:8a:85:9d:da:c4:96:c7:05:48:04:e9:66:
7a:bf:32:20:f2:6c:45:cd:32:89:ec:24:50:26:41:7a:f9:cf:
d7:17:77:02:92:4c:12:c8:40:a5:17:69:61:8b:24:20:3a:58:
e0:4c:53:c7:92:a0:a4:ac:7f:be:97:57:41:97:0e:f8:5c:b3:
d5:36:fe:8a:29:2b:4b:8d:70:e3:f4:f3:54:fd:fe:9c:44:5b:
95:21:f3:2f:e7:19:bb:d2:66:88:be:10:e3:e8:09:37:a6:d2:
a7:f9:97:66:a4:e6:8e:1d:79:97:1d:f6:58:22:5b:6e:d7:d1:
84:0c:1e:22:9b:c5:d6:bb:b8:af:6f:0f:32:be:bb:8a:c5:92:
e1:b7:24:54:87:5e:82:c7:64:6c:23:1d:6f:c0:f2:89:23:44:
62:02:5e:2e:83:c7:97:05:61:4c:ae:81:16:b4:69:8c:86:8c:
08:96:b1:3d:c9:df:37:60:e7:c3:49:66:17:91:01:67:b4:17:
9a:c5:22:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUVAO0qKUdB8dSv8kHrFU0HMZ2Q6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREFCMUM5Q0EyODAwN0RCM0UzQkY5MkVGMkVDRkFCMDcz
MEQ5QjIyODAeFw0yNDEwMDcwOTU3NTdaFw0yNTEwMDYxMDAyNTdaMDMxMTAvBgNV
BAMTKDNERUFEMzc1MDExOUQ3N0ZDMjZCQjk1N0Y1QzI3NjFDODY4Q0Y5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs/Tz5T/8jlZ6Fc4eLQA4Yckqq
5uGPiI9t+yiMcBUZ1GWTmMNB91IDQqOJmwglqjPIJT4jalCiS2npmBvpxLhSbheP
KnsZ8midEnCbwpkNtHBH1tkmfzEczD2Hhx437dZraEBFGjVQfvhjkIT0Pocbj5t8
M06q/EDMGkmn1OUFANeLPBSuQjoG2bbdkYnPh3L4m0bN1tkspdW0NubKK/EsVMkN
vX59L4/4Jcee6xRRcq8MdJYCbe/khHT6UiNzXSudALQnpV5KxPTNinrSzFn9e2TA
vRCw1qs7saorF2mIVBKOrpDK1+G6WbuZcrggJVNfkPXm3MQGOwALayZlmD0lAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUPerTdQEZ13/Ca7lX9cJ2HIaM+eYwHwYDVR0j
BBgwFoAU2rHJyigAfbPjv5LvLs+rBzDZsigwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMTAvREFCMUM5Q0Ey
ODAwN0RCM0UzQkY5MkVGMkVDRkFCMDczMEQ5QjIyOC5jcmwwZQYIKwYBBQUHAQEE
WTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC82L0RB
QjFDOUNBMjgwMDdEQjNFM0JGOTJFRjJFQ0ZBQjA3MzBEOUIyMjguY2VyMIGeBggr
BgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xMC8zMjMzMmUzMTMzMzgyZTMyMzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDM5MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEABeK6DANBgkqhkiG9w0BAQsFAAOCAQEABgVFNb2c
SSucM2xMlTLHLfyYnuc6+CEC0CSReq3wG1UvpcZo8cwD8HFdH1XIThVr8tTGd15n
/guZZctFioWd2sSWxwVIBOlmer8yIPJsRc0yiewkUCZBevnP1xd3ApJMEshApRdp
YYskIDpY4ExTx5KgpKx/vpdXQZcO+Fyz1Tb+iikrS41w4/TzVP3+nERblSHzL+cZ
u9JmiL4Q4+gJN6bSp/mXZqTmjh15lx32WCJbbtfRhAweIpvF1ru4r28PMr67isWS
4bckVIdegsdkbCMdb8DyiSNEYgJeLoPHlwVhTK6BFrRpjIaMCJaxPcnfN2Dnw0lm
F5EBZ7QXmsUiwQ==
-----END CERTIFICATE-----
Generated at Tue Oct 8 22:48:48 2024 by rpki-client on console-fra.rpki-client.org