Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS32587.roa
File: AS32587.roa (raw, json)
Hash identifier: sj7T+mT1IPM21A7p4rMvGNt6aI6cvFropFLw/iFpmXI=
Subject key identifier: 6E:DC:B9:A2:CA:5A:0F:E8:1A:95:53:73:21:77:06:7A:5C:CF:7B:FD
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 08D17713E5B3B598696B696B3EDB7832245CA513
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS32587.roa
Signing time: Thu 23 Jan 2025 06:55:11 +0000
ROA not before: Thu 23 Jan 2025 06:50:11 +0000
ROA not after: Thu 22 Jan 2026 06:55:11 +0000
asID: 32587
IP address blocks: 50.121.66.0/23 maxlen: 23
50.121.72.0/22 maxlen: 22
50.121.76.0/24 maxlen: 24
50.121.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d1:77:13:e5:b3:b5:98:69:6b:69:6b:3e:db:78:32:24:5c:a5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Jan 23 06:50:11 2025 GMT
Not After : Jan 22 06:55:11 2026 GMT
Subject: CN=6EDCB9A2CA5A0FE81A9553732177067A5CCF7BFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b3:3f:34:2c:da:8c:61:41:65:9c:52:12:9a:
54:56:e0:81:7a:23:b7:79:43:ab:65:a2:0b:ff:5c:
1d:47:6a:b4:a5:9b:99:a4:09:91:6e:1d:22:83:0e:
b7:44:38:9b:5e:47:94:14:d1:f7:a4:41:60:6b:58:
32:09:03:b8:44:e1:2b:33:34:7d:84:cb:1e:ad:b2:
3e:ca:71:49:da:bc:5c:26:e2:7a:fe:fd:80:4e:42:
49:60:99:a5:18:f5:98:64:ed:50:9d:6a:aa:89:ad:
fd:2c:0e:87:42:5f:aa:57:4a:63:e7:82:a9:f8:a0:
ef:72:03:a8:17:57:f5:9b:18:ad:12:33:43:56:38:
cb:39:8a:5e:f6:79:ab:7d:a0:6e:8b:7e:2e:62:15:
f2:f5:50:04:41:14:92:6a:ca:0c:30:b5:47:b4:69:
b7:2e:8d:f0:76:a6:96:59:67:35:f2:10:c2:cc:15:
dd:50:7a:4b:d1:d7:be:9a:bd:eb:55:24:8b:9e:de:
92:c4:5c:ba:8d:77:f1:d3:05:ab:ac:a8:99:f1:11:
d1:c6:3c:8d:9a:d4:ed:c1:30:14:cf:76:11:e3:e2:
d5:fa:c4:99:70:fc:45:a1:3f:b3:4f:b7:da:0e:b2:
aa:f1:73:e9:76:2a:33:5f:d1:2d:21:32:62:a6:9d:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DC:B9:A2:CA:5A:0F:E8:1A:95:53:73:21:77:06:7A:5C:CF:7B:FD
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS32587.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.121.66.0/23
50.121.72.0-50.121.76.255
50.121.79.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:ae:6d:65:14:49:4d:d6:99:37:fd:cd:62:9c:d7:bb:71:3c:
6d:75:bc:00:0f:20:6b:dc:3d:1c:05:02:f4:3f:43:6f:62:e8:
78:c7:9a:9b:68:00:33:6d:80:c3:3e:f0:96:ee:a0:10:27:c7:
cf:32:eb:3d:96:be:d6:02:96:54:de:da:87:31:cb:3b:64:8a:
80:8b:1d:1f:cc:6b:0e:0a:5a:3f:15:f9:d5:bd:0c:da:41:64:
94:42:b6:cd:29:1d:85:a3:13:ca:7f:f4:37:f4:c8:cb:8c:46:
26:b2:5d:c6:16:29:69:58:b5:d1:41:19:02:c5:f3:08:d7:ae:
ce:64:e5:e5:60:7e:f4:d5:94:dd:41:80:ea:a8:06:37:26:7d:
ab:b9:cf:31:bd:bb:cd:51:73:e5:32:44:4f:4c:b6:60:65:e6:
4f:e6:bf:8c:f0:41:e9:32:42:33:a5:29:89:54:e9:e6:0d:90:
9b:08:3c:66:98:42:1a:a9:14:35:91:60:41:6a:5c:02:de:7e:
d9:09:47:42:ea:28:b0:56:6b:a5:b0:b7:75:97:8c:bd:64:4f:
ed:26:c6:ef:e4:fe:1f:ea:19:8a:93:c3:71:4a:d2:a4:59:eb:
52:27:57:29:a9:6c:78:85:b0:73:af:15:b1:e2:1e:36:bf:20:
e7:80:28:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net