Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203139353231.roa
File: 32332e3134342e3136392e302f32342d3234203d3e203139353231.roa (raw, json)
Hash identifier: UrboJjBRLDaFk8pmLCx5oNn8klzp2edAa+fj0G8h/P4=
Subject key identifier: BF:2C:F2:C8:B5:52:BD:A0:F0:84:56:2A:18:E6:D2:21:C0:D3:A5:1A
Certificate issuer: /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial: 1CFF2CE98C21906CE956F8F690EC1FC08345D86B
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203139353231.roa
Signing time: Fri 06 Dec 2024 12:43:16 +0000
ROA not before: Fri 06 Dec 2024 12:38:16 +0000
ROA not after: Fri 05 Dec 2025 12:43:16 +0000
asID: 19521
IP address blocks: 23.144.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ff:2c:e9:8c:21:90:6c:e9:56:f8:f6:90:ec:1f:c0:83:45:d8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Validity
Not Before: Dec 6 12:38:16 2024 GMT
Not After : Dec 5 12:43:16 2025 GMT
Subject: CN=BF2CF2C8B552BDA0F084562A18E6D221C0D3A51A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:13:92:b6:ac:7a:62:87:9f:55:10:10:18:
23:8d:2f:e5:ff:a4:64:4e:c5:1b:74:12:68:0d:cc:
a3:cd:ef:63:d8:73:ba:41:12:69:e5:42:f4:c4:87:
1c:a3:8e:7b:f6:46:57:7f:4d:73:af:18:99:3a:28:
07:55:e4:17:98:fa:c4:55:f4:9a:77:c4:45:62:e9:
51:b0:40:fc:4d:8e:ea:78:cf:5e:9e:49:01:47:a9:
42:76:fe:67:5f:aa:e5:e6:cb:8b:13:e3:4e:a4:aa:
a3:81:45:09:e5:20:a5:1f:57:ba:d4:26:ab:88:06:
66:50:14:65:85:4f:f9:ce:6e:cd:c9:49:e0:ee:cd:
2e:f2:a4:04:5c:27:dd:25:52:9a:dd:33:09:ad:8d:
d2:74:b7:2c:8f:15:40:96:0c:83:e9:77:dc:ae:bf:
27:e8:d2:f7:4d:3d:6c:17:06:7e:0f:73:48:86:cb:
0c:33:8b:03:d2:6f:09:8c:be:dc:95:81:fb:46:b4:
cf:a2:c9:68:9f:a1:75:be:af:4f:4b:2e:00:cc:9c:
85:07:84:2b:8e:be:1b:98:60:87:a3:21:d4:cb:a1:
4f:37:81:a1:3c:df:ff:75:e3:a2:7e:85:bf:75:84:
d5:ac:ab:a5:eb:db:9e:67:7d:98:e1:67:b5:ca:38:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2C:F2:C8:B5:52:BD:A0:F0:84:56:2A:18:E6:D2:21:C0:D3:A5:1A
X509v3 Authority Key Identifier:
keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203139353231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.144.169.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e4:62:ea:00:48:1f:9a:b0:e8:cf:5d:ad:4d:19:92:b5:00:
dc:30:27:7b:56:f6:27:11:c2:3c:cb:70:84:1c:3f:8b:00:cd:
57:51:25:82:ec:80:b5:ad:3b:fa:47:3a:a3:98:49:59:fc:6a:
a0:d2:0a:4e:90:7e:43:7f:49:22:ad:b5:55:e8:1d:a0:b9:4e:
47:ff:ff:d8:88:f9:6d:25:69:b4:ea:0b:b9:a2:99:ad:df:8f:
9e:a2:4a:b5:90:77:68:d5:6c:72:ae:73:e8:66:5d:d9:3f:4b:
03:e6:66:4f:d3:96:c2:48:88:da:9b:81:f0:51:79:49:64:2a:
62:2d:6b:22:6c:7d:30:aa:d9:e3:c5:96:38:75:bb:d4:91:b7:
77:2d:5b:35:b5:ce:a7:87:d8:47:c7:a0:7b:98:1e:f5:f1:ed:
ed:2d:03:f9:42:4c:82:b0:09:be:fb:0a:21:c4:e5:70:d7:69:
bb:0d:bd:bc:cd:b5:55:92:b8:bd:bd:01:9d:20:d1:e0:25:c8:
74:7f:a1:8c:f2:6c:22:22:b1:10:2a:fb:0d:58:ae:26:8f:71:
f7:dc:5e:d5:7e:b6:82:3a:c7:8f:cd:fb:0a:1a:0d:ba:d4:ca:
99:c9:44:41:f4:c6:dc:d2:e4:f6:99:d9:1a:a1:0f:f4:49:45:
9e:62:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:58 2025 by rpki-client