Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e2037303239.roa
File: 3230392e38372e3136302e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier: rB8JOZXy70W7A8N/X8am4dFRaq49hx0mtxOm3ZIUnJw=
Subject key identifier: 8C:10:77:5A:A9:68:0E:4D:14:DB:68:4E:39:1B:9E:92:A6:66:89:70
Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial: 632219304E5238ECA587C2A24EF7F4846E510B08
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e2037303239.roa
Signing time: Thu 04 Apr 2024 15:59:05 +0000
ROA not before: Thu 04 Apr 2024 15:54:05 +0000
ROA not after: Thu 03 Apr 2025 15:59:05 +0000
asID: 7029
IP address blocks: 209.87.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:22:19:30:4e:52:38:ec:a5:87:c2:a2:4e:f7:f4:84:6e:51:0b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Validity
Not Before: Apr 4 15:54:05 2024 GMT
Not After : Apr 3 15:59:05 2025 GMT
Subject: CN=8C10775AA9680E4D14DB684E391B9E92A6668970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:cc:4d:db:b8:46:bf:9e:50:66:f8:8f:5a:
93:56:e7:8f:ae:ca:b9:19:56:ae:66:44:49:9a:2e:
c4:61:bd:b5:44:36:5d:bd:9e:da:01:e5:60:93:5e:
17:1e:5a:e2:96:13:95:7b:1c:d0:f5:de:eb:6a:8c:
29:e9:89:6f:15:11:37:e9:52:4c:6f:36:60:2f:3e:
c6:6d:b8:8a:49:b6:45:88:d4:a1:07:b4:e5:13:a4:
33:57:4d:45:e1:2d:d9:7e:b6:4b:ef:c8:cb:6d:c2:
fc:a3:ba:25:ff:2f:86:8f:87:e3:94:fb:79:be:fa:
21:20:ea:a9:f4:88:22:de:3a:8b:b8:a7:50:95:23:
79:2a:4e:11:3c:2b:ae:d1:ba:6b:62:33:34:0d:b5:
4a:78:10:02:49:5a:19:f0:e7:74:fa:0d:d8:b5:06:
a3:39:09:2f:c3:94:17:eb:9a:5e:62:95:fd:2b:d3:
c2:a3:60:1d:b2:2e:52:cd:34:71:c9:f2:04:ce:48:
2e:de:d2:f4:8d:79:29:ca:aa:e8:87:3f:0a:f2:7a:
56:78:c3:f2:8e:d6:97:78:2c:94:1a:c7:6c:4e:c0:
e4:ff:b3:8d:ee:0e:18:d5:7b:36:77:33:7c:93:01:
54:e6:fd:11:92:f2:ab:dc:48:06:d2:51:9c:b5:10:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:10:77:5A:A9:68:0E:4D:14:DB:68:4E:39:1B:9E:92:A6:66:89:70
X509v3 Authority Key Identifier:
keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.87.160.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:de:3e:01:5f:79:b3:2a:fc:5e:52:d3:61:92:15:92:b8:2b:
13:75:91:04:ea:61:2e:65:54:fd:09:83:1a:ae:62:a1:2a:65:
19:c2:83:7b:4b:63:03:09:9f:a4:65:4c:ee:bf:92:fb:61:f3:
6b:a1:72:73:12:77:8d:3d:39:fa:50:53:bc:d7:ae:fb:6e:68:
6f:78:71:59:6b:0e:af:53:5a:3f:ee:69:9f:ee:95:99:65:7a:
58:77:35:62:e6:86:81:e2:1f:15:06:c5:9c:9f:1e:b9:e0:ed:
d1:49:8f:15:52:b5:e5:c0:f4:68:48:18:80:13:50:7b:fc:99:
d7:4d:ac:2c:11:81:fe:db:f5:b4:c9:b6:bc:ed:99:82:ab:e6:
2c:e7:3f:fe:96:b3:d4:28:9b:b7:47:63:58:ea:c8:b9:f6:e3:
15:ae:0c:5b:04:33:4e:15:0e:29:4d:34:22:92:1b:9d:2e:e4:
f8:fc:c7:28:0b:fe:f1:3e:e6:fd:40:1d:87:7a:d5:26:b4:11:
56:b8:25:05:bd:d2:98:18:6d:59:f6:91:5c:e9:33:55:6d:3f:
51:80:df:8d:5f:ab:98:0f:3a:e7:8d:7d:dd:ea:8b:4f:e7:0d:
5f:4a:91:15:54:44:df:25:76:e3:71:0f:1b:1c:90:de:0e:4f:
9c:63:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:22 2024 by rpki-client on console.sobornost.net