Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e2033323830.roa
File: 36362e3131382e3234352e302f32342d3234203d3e2033323830.roa (raw, json)
Hash identifier: 4yrDtOuE7zerpjLdUYtbHVMPS+tEfIAjmXEHEYAJ3bw=
Subject key identifier: D4:95:FB:84:C5:DC:B1:8D:B5:6B:E1:AE:1C:D6:24:6B:33:DA:69:05
Certificate issuer: /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial: 762AF23383ECDE84CA709C051D17468FA4B95B6F
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e2033323830.roa
Signing time: Fri 08 Dec 2023 17:47:02 +0000
ROA not before: Fri 08 Dec 2023 17:42:02 +0000
ROA not after: Fri 06 Dec 2024 17:47:02 +0000
asID: 3280
IP address blocks: 66.118.245.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:2a:f2:33:83:ec:de:84:ca:70:9c:05:1d:17:46:8f:a4:b9:5b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Validity
Not Before: Dec 8 17:42:02 2023 GMT
Not After : Dec 6 17:47:02 2024 GMT
Subject: CN=D495FB84C5DCB18DB56BE1AE1CD6246B33DA6905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:05:9b:5a:8c:0f:d1:27:07:ff:44:20:da:b6:
88:3c:b9:58:4f:00:85:e4:e7:4b:06:14:49:20:5e:
1e:58:c4:c3:38:ea:db:27:2f:b9:35:61:5b:ad:8f:
23:1a:2d:8a:22:6b:05:e7:c8:73:5e:a4:56:fd:b0:
b2:eb:6b:4e:b0:a6:79:e0:23:3d:a6:3f:ae:3f:95:
82:c9:c2:9a:19:0b:cb:2c:5f:02:e4:93:12:62:54:
90:46:c1:c5:ef:96:7b:88:70:70:90:a9:27:82:a2:
a0:2a:56:6e:0a:69:b6:c2:a1:be:fd:75:77:92:ba:
f5:e2:d0:80:07:42:f5:57:7c:b6:f7:98:66:d2:f0:
2b:33:86:3c:de:90:e4:29:d4:f7:82:c1:bd:86:d6:
77:07:cf:82:7b:79:13:74:e7:1c:08:66:de:f9:bd:
8e:d0:51:17:9e:65:22:fa:37:2d:da:d7:a7:3b:56:
89:39:d4:85:2c:32:1a:ea:3f:b0:45:c8:fc:56:72:
ef:32:d6:11:9b:e7:a9:07:a3:3c:2b:a8:7d:fd:bf:
d3:12:72:bf:fd:9d:1b:73:02:e9:04:3b:21:c6:1a:
74:68:ba:22:0e:49:13:eb:e0:16:0e:de:f5:16:52:
34:45:1a:ac:e3:4b:46:3d:03:ba:fc:00:8b:30:0b:
f1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:95:FB:84:C5:DC:B1:8D:B5:6B:E1:AE:1C:D6:24:6B:33:DA:69:05
X509v3 Authority Key Identifier:
keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e2033323830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.118.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6f:49:fb:77:fc:e6:e3:df:d3:21:14:80:5d:12:84:6d:9b:
0f:da:79:5a:9a:5b:65:b5:42:de:7e:b0:63:30:28:46:c6:a7:
7a:26:a9:9e:5b:10:57:42:a9:71:01:3b:cb:5e:66:ca:91:9d:
0c:2f:c9:69:cd:df:8a:a9:33:3d:1f:72:d4:0e:0b:8c:cb:19:
a9:c9:d4:72:b0:2f:d3:31:93:b7:ae:91:b2:ad:bd:48:d6:8c:
ba:e4:1c:67:02:8b:e5:3d:c5:63:07:a1:b9:0c:14:94:91:bc:
da:98:7b:b4:1e:22:19:53:f3:dd:84:b9:37:df:b6:a6:9d:67:
41:9c:75:9d:e2:a0:99:cd:2a:dc:4b:e1:95:ff:e9:9f:28:a7:
da:bd:96:26:00:da:36:c2:f4:b9:88:4d:da:5f:f7:7d:0b:39:
9b:ff:fa:0e:2a:1d:45:49:46:c2:b5:b4:e8:b5:cd:3d:b9:67:
10:a8:bd:85:da:ca:6c:52:03:4a:6f:64:ab:8a:e3:2b:5c:cf:
2d:9f:ba:80:94:af:ea:7d:c7:6e:1c:fb:c1:4d:9c:e1:8f:46:
1e:0e:ce:ae:0b:b8:85:3a:aa:cc:11:d0:31:ed:6a:ac:7f:1c:
6a:7c:80:24:48:22:8f:c8:78:2b:3b:5d:8d:ee:4a:66:00:55:
f2:4c:0d:90
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUdiryM4Ps3oTKcJwFHRdGj6S5W28wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjMxMjA4MTc0MjAyWhcNMjQxMjA2MTc0NzAy
WjAzMTEwLwYDVQQDEyhENDk1RkI4NEM1RENCMThEQjU2QkUxQUUxQ0Q2MjQ2QjMz
REE2OTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wWbWowP0ScH
/0Qg2raIPLlYTwCF5OdLBhRJIF4eWMTDOOrbJy+5NWFbrY8jGi2KImsF58hzXqRW
/bCy62tOsKZ54CM9pj+uP5WCycKaGQvLLF8C5JMSYlSQRsHF75Z7iHBwkKkngqKg
KlZuCmm2wqG+/XV3krr14tCAB0L1V3y295hm0vArM4Y83pDkKdT3gsG9htZ3B8+C
e3kTdOccCGbe+b2O0FEXnmUi+jct2tenO1aJOdSFLDIa6j+wRcj8VnLvMtYRm+ep
B6M8K6h9/b/TEnK//Z0bcwLpBDshxhp0aLoiDkkT6+AWDt71FlI0RRqs40tGPQO6
/ACLMAvxMQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFNSV+4TF3LGNtWvhrhzWJGsz
2mkFMB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz
M2M1YzVmNmI1Yi8wLzM2MzYyZTMxMzEzODJlMzIzNDM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzMjM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCdvUwDQYJKoZIhvcNAQELBQAD
ggEBAGtvSft3/Obj39MhFIBdEoRtmw/aeVqaW2W1Qt5+sGMwKEbGp3omqZ5bEFdC
qXEBO8teZsqRnQwvyWnN34qpMz0fctQOC4zLGanJ1HKwL9Mxk7eukbKtvUjWjLrk
HGcCi+U9xWMHobkMFJSRvNqYe7QeIhlT892EuTfftqadZ0GcdZ3ioJnNKtxL4ZX/
6Z8op9q9liYA2jbC9LmITdpf930LOZv/+g4qHUVJRsK1tOi1zT25ZxCovYXaymxS
A0pvZKuK4ytczy2fuoCUr+p9x24c+8FNnOGPRh4Ozq4LuIU6qswR0DHtaqx/HGp8
gCRIIo/IeCs7XY3uSmYAVfJMDZA=
-----END CERTIFICATE-----
Generated at Fri Jan 5 14:35:23 2024 by rpki-client on console.sobornost.net