Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e32392e302f32342d3234203d3e203130313033.roa
File: 3231362e3134362e32392e302f32342d3234203d3e203130313033.roa (raw, json)
Hash identifier: mMoq58hi7C7I0h4JlDCtSBKFtybj4Phch6TcjnUwZOg=
Subject key identifier: BB:46:D6:84:9D:21:20:D9:F1:E1:6E:35:E6:77:A1:3F:3D:E2:D4:B9
Certificate issuer: /CN=07839405DFEB9B4CC12DD8DA940D6685691D1D4A
Certificate serial: 696119169A3A3ABBCF38D90755E680A6D4E00498
Authority key identifier: 07:83:94:05:DF:EB:9B:4C:C1:2D:D8:DA:94:0D:66:85:69:1D:1D:4A
Authority info access: rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e32392e302f32342d3234203d3e203130313033.roa
Signing time: Thu 20 Jun 2024 05:23:00 +0000
ROA not before: Thu 20 Jun 2024 05:18:00 +0000
ROA not after: Thu 19 Jun 2025 05:23:00 +0000
asID: 10103
IP address blocks: 216.146.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:61:19:16:9a:3a:3a:bb:cf:38:d9:07:55:e6:80:a6:d4:e0:04:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07839405DFEB9B4CC12DD8DA940D6685691D1D4A
Validity
Not Before: Jun 20 05:18:00 2024 GMT
Not After : Jun 19 05:23:00 2025 GMT
Subject: CN=BB46D6849D2120D9F1E16E35E677A13F3DE2D4B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:10:63:89:58:7e:a8:18:79:57:f6:d8:97:
6f:3e:d8:8d:15:15:cf:45:0e:21:aa:77:b7:d1:03:
8c:51:5d:05:01:b7:0a:81:e2:80:5e:73:ed:9d:78:
07:3a:57:ab:6e:2c:0b:60:39:f3:bd:88:4b:85:6c:
ec:b8:15:be:be:58:04:aa:be:11:26:26:33:0b:52:
1c:bc:ec:3b:4d:53:0d:bd:38:32:46:62:9f:d8:8b:
43:9b:02:ec:3d:62:5a:40:7d:e2:92:e3:60:27:ae:
c5:b0:15:21:3c:e2:a5:20:cb:1d:df:f7:04:13:59:
20:b8:e4:8f:23:92:ad:ae:b7:5b:77:87:14:9a:9d:
ed:72:23:42:4c:7c:d2:69:42:97:86:e6:57:af:5d:
39:f9:7b:4f:6e:5e:57:63:ee:69:6c:3b:20:b0:d5:
42:85:fa:81:e0:bd:8c:e6:5d:36:08:02:d6:0f:06:
b5:73:e5:93:9b:61:74:df:71:6f:07:35:13:da:3e:
1d:6a:cd:6e:df:2e:38:95:2f:85:19:75:08:11:0b:
da:f0:bf:37:fa:4b:17:40:65:6d:98:dc:14:23:af:
16:6a:2b:6c:69:d3:6a:0b:af:5a:9e:df:31:9c:88:
7c:b4:5d:f5:7f:9b:80:eb:fc:6e:93:ff:a2:3f:1c:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:46:D6:84:9D:21:20:D9:F1:E1:6E:35:E6:77:A1:3F:3D:E2:D4:B9
X509v3 Authority Key Identifier:
keyid:07:83:94:05:DF:EB:9B:4C:C1:2D:D8:DA:94:0D:66:85:69:1D:1D:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e32392e302f32342d3234203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6f:16:04:56:70:bf:bf:a5:5c:8f:8f:6e:69:ef:15:ef:2c:
fe:bb:a1:06:07:f6:5d:ee:9e:84:39:c7:ad:b6:4e:be:7e:4d:
30:9f:83:70:ca:b8:91:b3:e0:06:b2:e0:49:ca:52:77:1e:56:
1d:49:82:5a:1f:d8:55:7c:69:d4:2a:8e:95:b1:39:a4:26:86:
f1:26:b9:59:28:c0:ac:fb:5a:18:74:51:d9:a3:c4:d9:c0:c8:
25:1c:a1:5f:07:18:c0:fd:15:ab:72:81:93:70:5a:fe:92:be:
01:a0:5c:a9:d9:52:1e:62:06:ee:0f:b4:32:bb:39:f2:db:2f:
f8:15:16:44:a6:a6:76:ae:e8:a4:fe:bf:a8:66:0b:02:4e:7c:
8d:de:19:f2:ea:fe:b6:3d:8e:a8:c3:76:52:19:9d:06:1c:8e:
1f:fd:e7:13:49:fa:fb:c9:0d:f7:73:1c:b3:82:01:c6:52:17:
7b:fe:39:e1:91:f0:8d:99:5b:8f:27:a5:df:d4:7e:5d:92:eb:
40:33:a4:11:df:fe:61:26:13:12:fd:a9:ae:75:86:09:b6:01:
b7:7c:e6:c4:da:51:5e:67:be:10:f9:23:8e:e3:e5:1b:72:a6:
bb:12:29:e8:98:f5:dc:1e:8e:d8:86:2e:94:4a:0f:43:bb:72:
38:e3:f9:3e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIUaWEZFpo6OrvPONkHVeaAptTgBJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc4Mzk0MDVERkVCOUI0Q0MxMkREOERBOTQwRDY2ODU2
OTFEMUQ0QTAeFw0yNDA2MjAwNTE4MDBaFw0yNTA2MTkwNTIzMDBaMDMxMTAvBgNV
BAMTKEJCNDZENjg0OUQyMTIwRDlGMUUxNkUzNUU2NzdBMTNGM0RFMkQ0QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHyBBjiVh+qBh5V/bYl28+2I0V
Fc9FDiGqd7fRA4xRXQUBtwqB4oBec+2deAc6V6tuLAtgOfO9iEuFbOy4Fb6+WASq
vhEmJjMLUhy87DtNUw29ODJGYp/Yi0ObAuw9YlpAfeKS42AnrsWwFSE84qUgyx3f
9wQTWSC45I8jkq2ut1t3hxSane1yI0JMfNJpQpeG5levXTn5e09uXldj7mlsOyCw
1UKF+oHgvYzmXTYIAtYPBrVz5ZObYXTfcW8HNRPaPh1qzW7fLjiVL4UZdQgRC9rw
vzf6SxdAZW2Y3BQjrxZqK2xp02oLr1qe3zGciHy0XfV/m4Dr/G6T/6I/HDvZAgMB
AAGjggIjMIICHzAdBgNVHQ4EFgQUu0bWhJ0hINnx4W415nehPz3i1LkwHwYDVR0j
BBgwFoAUB4OUBd/rm0zBLdjalA1mhWkdHUowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMy8wNzgzOTQwNURG
RUI5QjRDQzEyREQ4REE5NDBENjY4NTY5MUQxRDRBLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzAvMDc4
Mzk0MDVERkVCOUI0Q0MxMkREOERBOTQwRDY2ODU2OTFEMUQ0QS5jZXIwgaIGCCsG
AQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8zLzMyMzEzNjJlMzEzNDM2MmUzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzEzMDMxMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEANiSHTANBgkqhkiG9w0BAQsFAAOCAQEAjm8W
BFZwv7+lXI+PbmnvFe8s/ruhBgf2Xe6ehDnHrbZOvn5NMJ+DcMq4kbPgBrLgScpS
dx5WHUmCWh/YVXxp1CqOlbE5pCaG8Sa5WSjArPtaGHRR2aPE2cDIJRyhXwcYwP0V
q3KBk3Ba/pK+AaBcqdlSHmIG7g+0Mrs58tsv+BUWRKamdq7opP6/qGYLAk58jd4Z
8ur+tj2OqMN2UhmdBhyOH/3nE0n6+8kN93Mcs4IBxlIXe/454ZHwjZlbjyel39R+
XZLrQDOkEd/+YSYTEv2prnWGCbYBt3zmxNpRXme+EPkjjuPlG3KmuxIp6Jj13B6O
2IYulEoPQ7tyOOP5Pg==
-----END CERTIFICATE-----
Generated at Fri Oct 11 13:27:55 2024 by rpki-client on console-ams.rpki-client.org