Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS23352.roa
File: AS23352.roa (raw, json)
Hash identifier: Wm++dklHdY+/XdaoZuSdYQ2b4CssRJmMw7HxUlQJPcc=
Subject key identifier: 60:DE:6E:AF:E2:D7:2F:A0:F7:5C:99:9C:DE:E5:98:B4:2A:E2:F6:9F
Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial: 0BEC5969E9129E338AD0154AB80002A7D89A6A7B
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS23352.roa
Signing time: Thu 13 Feb 2025 18:16:09 +0000
ROA not before: Thu 13 Feb 2025 18:11:09 +0000
ROA not after: Thu 12 Feb 2026 18:16:09 +0000
asID: 23352
IP address blocks: 64.202.113.0/24 maxlen: 24
66.225.220.0/23 maxlen: 24
66.225.221.0/24 maxlen: 24
216.246.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ec:59:69:e9:12:9e:33:8a:d0:15:4a:b8:00:02:a7:d8:9a:6a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Validity
Not Before: Feb 13 18:11:09 2025 GMT
Not After : Feb 12 18:16:09 2026 GMT
Subject: CN=60DE6EAFE2D72FA0F75C999CDEE598B42AE2F69F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:bc:cd:5d:78:54:9e:7f:4a:81:71:95:e2:
34:64:44:3e:6e:85:84:f7:5f:82:ff:24:dd:4d:4a:
fd:ea:c3:8b:4f:45:bc:0a:b1:2a:1a:eb:2b:6c:5d:
b6:94:23:1e:a0:81:b2:18:ee:9e:4f:3d:b6:4e:6c:
f5:b1:d6:6c:73:21:06:c4:ee:f0:f8:12:24:e9:49:
43:bf:61:5f:ed:61:b0:ab:2d:9f:2d:48:21:b9:c0:
fa:ae:a0:da:3c:4f:5b:39:e9:cd:42:bd:0f:ac:4b:
42:29:88:54:81:26:24:46:65:9e:34:15:6b:59:69:
2b:fb:4a:26:c7:b9:67:08:7c:a2:5c:dd:51:5e:a0:
71:20:c0:d9:77:3d:de:7c:ff:78:89:bc:dd:e9:d8:
e6:85:6f:18:6a:a4:24:82:b0:8a:d3:70:e8:b5:31:
f3:70:3c:93:48:7b:e5:f8:50:87:96:07:47:50:ab:
fc:9e:a6:05:e5:a9:c8:05:61:c5:69:6e:36:2c:26:
ab:cb:4e:e2:52:bf:55:2f:d0:2b:17:3d:e9:40:89:
be:18:19:e8:7f:4e:52:27:03:1e:27:92:4b:24:ac:
6c:82:e5:a8:f0:2d:50:72:73:ea:0d:70:e7:6d:f1:
b5:f6:7f:8b:8c:0e:96:96:aa:34:0a:17:51:6c:00:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DE:6E:AF:E2:D7:2F:A0:F7:5C:99:9C:DE:E5:98:B4:2A:E2:F6:9F
X509v3 Authority Key Identifier:
keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS23352.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.202.113.0/24
66.225.220.0/23
216.246.80.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:cc:18:1f:58:a1:a3:06:1f:c9:8f:3c:bc:48:0d:81:4f:d8:
3d:8f:6a:2c:d5:3e:48:a2:3e:ac:bc:ef:b4:e7:f7:76:1c:c7:
8f:50:1a:b3:e4:c1:e9:d8:f8:1b:94:97:ba:50:a1:7c:5f:37:
09:8d:b2:33:0a:70:b8:36:bc:39:48:31:c6:9c:39:59:e8:b3:
47:2e:f6:64:23:0e:2e:80:ff:f9:2e:08:66:c9:e1:38:b8:28:
77:9d:30:e7:e9:35:e0:ce:b1:47:21:9d:67:3e:79:a1:9c:76:
85:39:8b:23:fb:71:4c:8f:f8:6b:5c:73:b3:c5:f8:85:29:fe:
c3:45:7e:4f:f0:15:79:e5:a0:ef:55:d5:eb:c9:c6:8c:22:e2:
5d:5b:69:b9:db:9c:90:80:d9:23:cb:57:00:e2:2c:cb:47:10:
34:65:33:3f:63:6a:c4:63:fb:1a:02:f5:7f:76:67:ed:c0:35:
f4:ca:5a:fa:a5:84:bf:b8:d8:d9:42:04:99:51:06:39:e9:3d:
83:75:bf:c8:a1:4a:60:a8:a1:cd:e2:12:b1:72:d4:e8:d1:cc:
86:3e:04:30:71:f3:d7:27:93:d7:04:86:94:23:96:42:d0:6e:
d0:04:ec:2d:6a:36:eb:02:85:6d:34:5d:80:14:54:9e:06:5d:
00:89:68:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:11 2025 by rpki-client on console.sobornost.net