Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214967.roa
File: AS214967.roa (raw, json)
Hash identifier: NSA5TnmTTrLbs4tMif35hbwHSQmf4XlYMiD6mej4d3w=
Subject key identifier: 2F:D1:D9:F1:93:BE:89:1D:8F:79:09:1C:DD:16:51:D9:15:A7:0E:0E
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 1FFD43452DD4198CA6EFA0B1C045A19132688348
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214967.roa
Signing time: Sat 20 Jul 2024 16:10:10 +0000
ROA not before: Sat 20 Jul 2024 16:05:10 +0000
ROA not after: Sat 19 Jul 2025 16:10:10 +0000
asID: 214967
IP address blocks: 23.95.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:fd:43:45:2d:d4:19:8c:a6:ef:a0:b1:c0:45:a1:91:32:68:83:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jul 20 16:05:10 2024 GMT
Not After : Jul 19 16:10:10 2025 GMT
Subject: CN=2FD1D9F193BE891D8F79091CDD1651D915A70E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:af:b8:66:33:8a:94:63:38:40:b9:f5:88:
61:4c:bf:71:a4:fe:95:6e:c6:f4:70:0c:56:7b:36:
50:a2:26:84:65:88:a0:7a:45:0b:ef:d1:9b:be:6d:
07:1c:56:db:18:8a:13:67:dd:01:8a:19:d8:26:ca:
98:77:a0:36:46:37:38:c2:ee:86:51:80:74:bb:04:
c5:5e:b9:7e:ac:92:c7:65:48:18:8c:af:32:c7:b2:
65:e0:15:8e:6e:c6:f9:38:39:c4:6e:bd:27:1a:fb:
05:03:b6:5c:ec:ea:38:af:3a:d8:68:90:22:36:65:
00:01:09:a8:b5:75:d8:3c:dd:b5:02:6c:83:83:dc:
aa:e6:5d:66:92:d4:45:6d:71:d5:fe:7b:83:9d:8a:
38:a9:d4:b9:70:43:6d:8e:17:90:ef:2b:f7:49:65:
54:a6:3a:e6:57:d2:6c:cf:34:26:10:12:b3:ff:98:
01:fd:2a:b1:5b:d2:93:8b:be:10:50:b4:8e:8f:5b:
e3:c0:49:a0:b5:56:49:e6:81:d0:99:87:a7:94:8c:
e7:bf:3c:c5:4c:4f:f5:3c:65:6f:82:35:e0:62:68:
3c:49:6d:fe:18:34:fe:bf:39:ab:a2:b6:93:a4:14:
90:0a:ab:98:0e:05:65:3c:91:c4:a9:21:e6:77:87:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D1:D9:F1:93:BE:89:1D:8F:79:09:1C:DD:16:51:D9:15:A7:0E:0E
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214967.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.95.123.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:65:65:1b:e7:ca:f7:2a:67:86:97:4d:33:4f:ee:e5:59:4e:
9c:ec:93:ac:30:86:bf:76:cf:21:b4:0c:b6:e7:29:e9:49:a1:
70:65:26:9e:ca:77:80:38:24:19:29:53:e1:57:93:3d:59:6e:
70:c3:3c:8f:4e:19:de:ca:8c:cc:75:dc:35:1a:72:eb:2d:55:
7e:5f:9d:ce:ee:f9:97:ec:40:e0:64:36:7f:1a:61:ed:7d:e0:
e0:48:bd:80:95:c3:a6:ca:84:7b:7f:27:a7:38:55:06:b7:39:
64:c9:e7:95:eb:9e:7c:67:51:46:2f:96:09:03:a9:51:f3:09:
02:5b:a1:8c:38:ce:72:a7:27:01:67:a8:0e:5b:78:5b:8d:c6:
0e:0c:93:34:16:db:44:36:97:f5:29:86:52:2d:ff:ef:2c:7f:
22:23:69:65:58:51:3f:56:a4:2f:9f:14:2c:fc:e6:dc:44:db:
52:da:ef:2e:26:ef:a4:fd:a5:c2:32:f3:ca:8c:89:52:b9:76:
75:a4:df:a4:2b:0d:fd:69:d9:5b:02:99:49:77:bf:de:41:c8:
e6:78:82:a1:fa:cf:cf:7b:3c:7d:82:b5:0f:b2:d0:ef:c1:8b:
e3:e3:00:93:e7:03:14:df:9f:0a:19:f9:8c:8f:79:25:dc:11:
1c:d7:d8:92
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUH/1DRS3UGYym76CxwEWhkTJog0gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQwNzIwMTYwNTEwWhcNMjUwNzE5MTYxMDEw
WjAzMTEwLwYDVQQDEygyRkQxRDlGMTkzQkU4OTFEOEY3OTA5MUNERDE2NTFEOTE1
QTcwRTBFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N2vuGYzipRj
OEC59YhhTL9xpP6Vbsb0cAxWezZQoiaEZYigekUL79Gbvm0HHFbbGIoTZ90BihnY
JsqYd6A2Rjc4wu6GUYB0uwTFXrl+rJLHZUgYjK8yx7Jl4BWObsb5ODnEbr0nGvsF
A7Zc7Oo4rzrYaJAiNmUAAQmotXXYPN21AmyDg9yq5l1mktRFbXHV/nuDnYo4qdS5
cENtjheQ7yv3SWVUpjrmV9JszzQmEBKz/5gB/SqxW9KTi74QULSOj1vjwEmgtVZJ
5oHQmYenlIznvzzFTE/1PGVvgjXgYmg8SW3+GDT+vzmroraTpBSQCquYDgVlPJHE
qSHmd4feowIDAQABo4ICfzCCAnswHQYDVR0OBBYEFC/R2fGTvokdj3kJHN0WUdkV
pw4OMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIxNDk2Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABdfezANBgkqhkiG9w0BAQsFAAOC
AQEAG2VlG+fK9ypnhpdNM0/u5VlOnOyTrDCGv3bPIbQMtucp6UmhcGUmnsp3gDgk
GSlT4VeTPVlucMM8j04Z3sqMzHXcNRpy6y1Vfl+dzu75l+xA4GQ2fxph7X3g4Ei9
gJXDpsqEe38npzhVBrc5ZMnnleuefGdRRi+WCQOpUfMJAluhjDjOcqcnAWeoDlt4
W43GDgyTNBbbRDaX9SmGUi3/7yx/IiNpZVhRP1akL58ULPzm3ETbUtrvLibvpP2l
wjLzyoyJUrl2daTfpCsN/WnZWwKZSXe/3kHI5niCofrPz3s8fYK1D7LQ78GL4+MA
k+cDFN+fChn5jI95JdwRHNfYkg==
-----END CERTIFICATE-----
Generated at Wed Sep 11 04:41:37 2024 by rpki-client on console.sobornost.net