Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e2031323339.roa
File: 3230392e38372e3136302e302f32312d3234203d3e2031323339.roa (raw, json)
Hash identifier: Qa0L+wM6KBHv3jtZqXOObsKYGMyRcNx6rYy+dGR6fiw=
Subject key identifier: 76:7B:0F:69:FC:0C:91:03:FB:61:9A:96:0F:73:B8:0C:BC:03:7E:0E
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 2C685DE196758E639779F40D09E7CCFF8708B3B0
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e2031323339.roa
Signing time: Thu 04 Apr 2024 15:59:05 +0000
ROA not before: Thu 04 Apr 2024 15:54:05 +0000
ROA not after: Thu 03 Apr 2025 15:59:05 +0000
asID: 1239
IP address blocks: 209.87.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:68:5d:e1:96:75:8e:63:97:79:f4:0d:09:e7:cc:ff:87:08:b3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: Apr 4 15:54:05 2024 GMT
Not After : Apr 3 15:59:05 2025 GMT
Subject: CN=767B0F69FC0C9103FB619A960F73B80CBC037E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:42:56:72:35:59:24:57:51:6e:fb:c2:29:c1:
91:fc:04:b1:c6:4e:db:e6:15:30:12:02:a3:63:41:
8c:33:c1:60:48:88:8e:92:0f:e6:0c:e9:c6:2e:d3:
26:87:99:83:e6:ae:f1:95:34:bf:d4:86:67:a5:bc:
69:5e:49:4e:b7:ab:92:e3:0d:2c:7b:43:13:cb:3e:
b5:ee:48:99:6a:17:33:1e:97:21:6b:69:cf:b4:48:
8a:d0:a5:11:c9:b4:7c:21:b1:29:ba:65:7e:6c:5d:
5c:39:86:12:e5:4b:81:49:c0:a2:ae:e8:b7:03:97:
2a:8a:8b:d6:37:82:a4:ba:b1:6e:ad:d2:12:eb:c6:
4c:5c:e6:20:97:74:ec:e9:c3:8a:a6:23:15:4f:ae:
39:0c:45:b7:b2:55:a0:fa:21:51:0c:9d:84:94:3f:
6d:14:4a:40:68:b9:60:ed:53:0c:2d:f4:19:20:f2:
79:6e:03:8b:49:bc:fd:83:76:90:18:56:79:e3:1c:
66:3f:f2:21:c0:f7:d0:07:88:49:42:4c:d5:ca:bd:
12:51:db:21:10:ad:94:0a:b4:7e:ac:9c:0f:b0:9a:
78:d0:0b:e8:5b:b3:21:44:a2:dd:27:87:59:e5:4c:
d0:19:eb:fb:d2:05:17:60:c6:af:20:65:32:4f:87:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7B:0F:69:FC:0C:91:03:FB:61:9A:96:0F:73:B8:0C:BC:03:7E:0E
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.160.0/21
Signature Algorithm: sha256WithRSAEncryption
72:fc:ed:4f:e4:2d:bc:08:3a:4a:09:ed:33:b1:7b:0f:6d:5a:
78:f6:e8:3b:ce:58:7f:2f:b8:e0:1a:34:51:4a:c0:23:8e:9b:
72:e8:92:7a:62:dc:91:bb:a2:4b:dc:ee:96:48:db:c6:85:ab:
24:bb:69:1b:37:79:9e:16:68:c7:2e:51:31:f9:ef:bb:61:30:
ad:4f:24:4a:98:7d:6b:32:19:ed:ac:ce:f2:7b:d4:c9:73:fc:
17:d7:3b:78:1b:43:ab:89:42:4b:8f:ef:d5:f5:63:fc:5d:8f:
eb:d0:cf:2b:34:57:2c:e6:4b:77:87:27:58:2c:96:b4:75:5b:
d0:81:2e:6e:74:1b:aa:3b:10:c4:0a:28:a5:58:29:9f:be:d2:
8c:1f:b3:b2:2b:94:55:a7:b7:0e:ac:13:4c:df:68:9f:6d:78:
57:ac:01:58:84:07:9b:3d:84:b9:70:f7:15:6b:3d:92:e6:a4:
9d:86:9c:7a:dd:f2:55:ab:d0:58:48:a2:aa:1a:7d:b7:49:cf:
75:5d:f0:3a:92:32:af:1d:52:9b:ce:92:da:59:43:64:ad:b8:
0e:06:db:43:b1:cb:cb:a5:65:32:3a:79:5a:05:bf:be:0c:ad:
e9:c9:5a:a3:0e:f2:8c:a8:c8:94:70:18:38:9e:4f:1a:4b:ef:
e4:50:9a:44
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIULGhd4ZZ1jmOXefQNCefM/4cIs7AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj
YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjQwNDA0MTU1NDA1WhcNMjUwNDAzMTU1OTA1
WjAzMTEwLwYDVQQDEyg3NjdCMEY2OUZDMEM5MTAzRkI2MTlBOTYwRjczQjgwQ0JD
MDM3RTBFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kJWcjVZJFdR
bvvCKcGR/ASxxk7b5hUwEgKjY0GMM8FgSIiOkg/mDOnGLtMmh5mD5q7xlTS/1IZn
pbxpXklOt6uS4w0se0MTyz617kiZahczHpcha2nPtEiK0KURybR8IbEpumV+bF1c
OYYS5UuBScCirui3A5cqiovWN4KkurFurdIS68ZMXOYgl3Ts6cOKpiMVT645DEW3
slWg+iFRDJ2ElD9tFEpAaLlg7VMMLfQZIPJ5bgOLSbz9g3aQGFZ54xxmP/IhwPfQ
B4hJQkzVyr0SUdshEK2UCrR+rJwPsJp40AvoW7MhRKLdJ4dZ5UzQGev70gUXYMav
IGUyT4eVjwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHZ7D2n8DJED+2Galg9zuAy8
A34OMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv
NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi
Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlNTIzODFkMDE4ZTg1
OTM4ODRkMmEzMC8wLzMyMzAzOTJlMzgzNzJlMzEzNjMwMmUzMDJmMzIzMTJkMzIz
NDIwM2QzZTIwMzEzMjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPRV6AwDQYJKoZIhvcNAQELBQAD
ggEBAHL87U/kLbwIOkoJ7TOxew9tWnj26DvOWH8vuOAaNFFKwCOOm3Loknpi3JG7
okvc7pZI28aFqyS7aRs3eZ4WaMcuUTH577thMK1PJEqYfWsyGe2szvJ71Mlz/BfX
O3gbQ6uJQkuP79X1Y/xdj+vQzys0VyzmS3eHJ1gslrR1W9CBLm50G6o7EMQKKKVY
KZ++0owfs7IrlFWntw6sE0zfaJ9teFesAViEB5s9hLlw9xVrPZLmpJ2GnHrd8lWr
0FhIoqoafbdJz3Vd8DqSMq8dUpvOktpZQ2StuA4G20Oxy8ulZTI6eVoFv74MrenJ
WqMO8oyoyJRwGDieTxpL7+RQmkQ=
-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:22 2024 by rpki-client on console.sobornost.net