Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e31342e302f32342d3234203d3e2036323333.roa
File: 3130342e3234352e31342e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier: wBOqtkvpiOecj4e9IalrDt/1tgnOJOarTPyacCkkRqQ=
Subject key identifier: 51:B7:BA:D6:BA:0F:1B:A7:6F:22:BE:70:66:49:72:63:18:E2:81:99
Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial: 5B17C68C23025366A82EBE1D0F0F26CAA3F0A521
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31342e302f32342d3234203d3e2036323333.roa
Signing time: Sat 14 Sep 2024 01:22:26 +0000
ROA not before: Sat 14 Sep 2024 01:17:26 +0000
ROA not after: Sat 13 Sep 2025 01:22:26 +0000
asID: 6233
IP address blocks: 104.245.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:17:c6:8c:23:02:53:66:a8:2e:be:1d:0f:0f:26:ca:a3:f0:a5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Validity
Not Before: Sep 14 01:17:26 2024 GMT
Not After : Sep 13 01:22:26 2025 GMT
Subject: CN=51B7BAD6BA0F1BA76F22BE706649726318E28199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f5:87:87:9d:ea:12:b9:d7:0c:5f:25:4f:f0:
e2:d6:b9:32:78:e4:fa:cd:35:9e:6a:fa:f7:51:08:
93:0b:58:e8:df:be:da:f7:90:5d:7a:97:f2:7f:14:
18:5e:9b:ff:9e:2c:3e:c4:e0:ff:37:3e:58:ba:13:
63:88:41:50:80:5d:f8:86:f1:e3:0b:de:21:31:19:
33:33:f6:28:6c:f9:02:4d:9c:78:81:72:22:47:02:
25:3b:9c:1d:b4:25:71:e0:6e:4d:a7:ce:f8:bc:08:
26:4a:ef:e6:51:33:72:d5:59:aa:e3:a7:b9:e2:ef:
07:9e:ac:96:5d:f3:18:81:d3:b8:98:37:6a:00:3e:
de:c1:42:0c:b4:c8:31:36:09:38:08:16:96:53:13:
f9:c5:8f:67:ad:1b:ff:4f:8a:13:d3:fe:cf:1c:3d:
16:b6:4d:58:29:14:81:71:a2:23:8d:13:1b:34:19:
4c:b5:0d:e5:a8:c0:e1:5e:85:d5:28:eb:a5:c9:26:
08:67:62:71:d7:85:eb:47:30:10:ef:ba:fa:8c:c0:
bc:ba:80:1a:b1:cf:6a:f2:86:70:d1:a1:cd:c8:5a:
f0:a8:b2:64:c3:62:8a:17:d3:24:84:2a:f0:a3:ba:
c9:32:5c:91:73:f7:51:fa:78:0b:3b:07:68:e6:87:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B7:BA:D6:BA:0F:1B:A7:6F:22:BE:70:66:49:72:63:18:E2:81:99
X509v3 Authority Key Identifier:
keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31342e302f32342d3234203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.245.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ff:d5:bb:5b:c3:1c:35:fa:00:73:7c:7d:40:13:4e:fb:ff:
83:d5:50:fc:69:39:14:73:e1:0c:bb:b4:e1:62:3f:33:d4:6e:
a8:f9:ab:4b:c8:4d:8a:fa:8a:e0:35:6d:a4:cf:7f:6e:7d:a7:
d3:03:8e:b2:03:a9:fd:3a:0f:c2:dd:a2:6c:0e:62:56:fc:6c:
f0:ec:1a:39:13:9c:3e:27:ee:d2:b4:19:f8:78:28:b7:ca:67:
3c:7c:31:5d:6f:4d:2e:f2:be:f8:3f:1c:97:15:ee:d2:f2:49:
8b:42:94:d8:19:c9:8f:79:9c:47:87:e6:eb:cb:b1:e3:b3:10:
f0:f7:48:1a:ff:0f:98:42:fe:ab:99:44:89:2e:33:65:84:5c:
38:eb:6a:79:e0:44:e6:00:4d:3d:e6:a1:13:fd:9e:65:10:51:
1c:69:3b:d5:5a:e6:fa:d7:49:5f:2e:be:8f:77:c7:cb:bd:ce:
d4:d1:2c:e4:c0:5e:6c:a3:93:0f:d1:e7:c7:21:6b:2f:57:3b:
2d:ab:e7:5d:c3:66:9e:ed:1e:a2:7e:0d:0a:24:47:01:de:4f:
b0:b0:a8:d5:ff:b5:24:cf:c8:a5:29:6e:5c:aa:d6:5e:61:7e:
ab:e2:a0:a2:b1:f3:72:ef:b4:91:9a:db:56:37:f7:30:26:d1:
b6:86:d8:13
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUWxfGjCMCU2aoLr4dDw8myqPwpSEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk
MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjQwOTE0MDExNzI2WhcNMjUwOTEzMDEyMjI2
WjAzMTEwLwYDVQQDEyg1MUI3QkFENkJBMEYxQkE3NkYyMkJFNzA2NjQ5NzI2MzE4
RTI4MTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/WHh53qErnX
DF8lT/Di1rkyeOT6zTWeavr3UQiTC1jo377a95BdepfyfxQYXpv/niw+xOD/Nz5Y
uhNjiEFQgF34hvHjC94hMRkzM/YobPkCTZx4gXIiRwIlO5wdtCVx4G5Np874vAgm
Su/mUTNy1Vmq46e54u8HnqyWXfMYgdO4mDdqAD7ewUIMtMgxNgk4CBaWUxP5xY9n
rRv/T4oT0/7PHD0Wtk1YKRSBcaIjjRMbNBlMtQ3lqMDhXoXVKOulySYIZ2Jx14Xr
RzAQ77r6jMC8uoAasc9q8oZw0aHNyFrwqLJkw2KKF9MkhCrwo7rJMlyRc/dR+ngL
Owdo5ocFOQIDAQABo4ICXjCCAlowHQYDVR0OBBYEFFG3uta6DxunbyK+cGZJcmMY
4oGZMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm
NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2
ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi
ODE0YzUyNC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzMDM0MmUzMjM0MzUyZTMxMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGj1DjAN
BgkqhkiG9w0BAQsFAAOCAQEAo//Vu1vDHDX6AHN8fUATTvv/g9VQ/Gk5FHPhDLu0
4WI/M9RuqPmrS8hNivqK4DVtpM9/bn2n0wOOsgOp/ToPwt2ibA5iVvxs8OwaOROc
Pifu0rQZ+Hgot8pnPHwxXW9NLvK++D8clxXu0vJJi0KU2BnJj3mcR4fm68ux47MQ
8PdIGv8PmEL+q5lEiS4zZYRcOOtqeeBE5gBNPeahE/2eZRBRHGk71Vrm+tdJXy6+
j3fHy73O1NEs5MBebKOTD9HnxyFrL1c7LavnXcNmnu0eon4NCiRHAd5PsLCo1f+1
JM/IpSluXKrWXmF+q+KgorHzcu+0kZrbVjf3MCbRtobYEw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:34:33 2025 by rpki-client