Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/32332e3132392e3231322e302f32342d3234203d3e203136393039.roa
File: 32332e3132392e3231322e302f32342d3234203d3e203136393039.roa (raw, json)
Hash identifier: 5guVT4if0LrKDB3Q8rvRkxXnCmvFDzyjP40984fVdbU=
Subject key identifier: 64:B7:F0:0B:5D:0E:1F:85:40:3F:18:08:FE:33:75:AF:A8:69:42:B3
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 6AC32B1FBC32AC1C1B8DB284FAAF0FF412DE8F7A
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/32332e3132392e3231322e302f32342d3234203d3e203136393039.roa
Signing time: Thu 19 Dec 2024 14:15:36 +0000
ROA not before: Thu 19 Dec 2024 14:10:36 +0000
ROA not after: Thu 18 Dec 2025 14:15:36 +0000
asID: 16909
IP address blocks: 23.129.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c3:2b:1f:bc:32:ac:1c:1b:8d:b2:84:fa:af:0f:f4:12:de:8f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:10:36 2024 GMT
Not After : Dec 18 14:15:36 2025 GMT
Subject: CN=64B7F00B5D0E1F85403F1808FE3375AFA86942B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:2d:80:d5:2e:23:9c:a3:d3:88:56:55:28:
77:99:00:66:08:33:5d:0a:f9:ab:30:a4:5d:82:66:
7c:64:70:a7:1b:bc:9c:87:c9:04:8d:19:fa:78:cf:
78:3a:0e:d2:ab:fb:8f:59:c6:46:70:02:9e:99:c6:
48:21:9a:4d:4d:18:03:1c:ca:e4:d7:d2:69:9b:f8:
14:82:d6:a4:b9:9b:4b:59:32:7c:dd:a8:1e:68:23:
6f:37:53:0e:27:33:2c:de:23:b7:ad:8f:78:ac:4a:
1f:d5:8b:08:2d:b9:3a:fd:8b:5d:1a:49:91:54:e0:
47:6c:56:ef:46:b3:91:8d:05:d6:7b:8d:12:11:fd:
92:0a:1c:58:45:cb:db:75:95:c1:b3:34:85:9c:8f:
7c:0d:96:51:d5:f2:8d:60:c4:ac:0b:6c:55:20:c2:
9c:6d:42:04:b5:50:96:8d:4f:e5:f0:88:48:73:5d:
12:6e:18:54:73:94:93:af:87:c0:c8:33:d0:73:dd:
22:3f:7a:04:4f:b1:a4:a7:d4:0c:c0:7d:cb:3d:61:
0a:7a:66:67:73:30:cb:42:6c:f4:40:f0:fc:67:f5:
2b:12:31:13:c5:0d:ca:b5:97:7f:03:fb:41:70:27:
75:e9:fa:03:bc:0c:03:69:cf:64:ad:0c:e9:8f:e5:
4b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B7:F0:0B:5D:0E:1F:85:40:3F:18:08:FE:33:75:AF:A8:69:42:B3
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/32332e3132392e3231322e302f32342d3234203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.129.212.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f8:b5:48:7e:28:ba:d5:52:79:ba:92:29:2e:4d:c6:d8:d5:
8a:24:01:71:af:93:c2:a3:2f:2a:8b:5f:51:d5:60:99:f9:b5:
e9:7d:41:e3:7f:6f:01:72:f2:0e:3f:6f:66:fe:26:de:8f:8e:
cf:d8:03:a0:0f:d1:dd:29:03:3e:f6:88:df:96:49:ee:76:31:
13:63:bb:55:54:be:3e:ed:52:dc:1b:07:10:35:cf:b0:d9:23:
1c:ad:c7:67:c5:67:6b:ee:e1:4e:fc:9a:ba:1e:7b:83:00:8f:
95:6a:04:53:4d:8c:61:70:c7:d4:f0:be:ec:3b:d6:44:01:d5:
32:50:17:4f:a2:21:d5:94:8e:2d:de:5e:dc:e2:b7:94:3e:1a:
6a:da:7b:2b:74:ab:a7:33:33:64:27:e1:19:69:72:53:31:cb:
df:d1:3e:9b:8d:31:73:bb:d3:76:fd:18:71:c5:63:83:50:52:
c6:b2:55:70:09:63:44:18:99:77:c9:5c:df:f4:c8:3b:0a:84:
28:ce:60:a0:6f:c1:d6:26:a1:93:9c:d1:9f:10:55:0b:d0:a2:
f3:4a:0e:94:56:b9:97:a9:8b:8a:22:45:d0:ee:4b:3a:d6:82:
8a:17:12:00:be:15:ee:e7:e1:ab:28:2e:eb:d6:24:17:89:9e:
c8:1c:5b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:18:22 2025 by rpki-client