Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa
File: 3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier: gd1Per2rsK67pVXD0Jo79ke0hj8XT/toXmDTz/cqrk8=
Subject key identifier: 56:14:F4:B3:CE:85:DF:2B:E1:01:AF:A1:57:2D:D4:C4:25:31:C4:65
Certificate issuer: /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial: 52CD8D79C128968C167A27F8A48E6B991AC80067
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa
Signing time: Tue 12 Jul 2022 05:47:33 +0000
ROA not before: Tue 12 Jul 2022 05:42:33 +0000
ROA not after: Tue 11 Jul 2023 05:47:33 +0000
asID: 398465
IP address blocks: 216.247.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:cd:8d:79:c1:28:96:8c:16:7a:27:f8:a4:8e:6b:99:1a:c8:00:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Validity
Not Before: Jul 12 05:42:33 2022 GMT
Not After : Jul 11 05:47:33 2023 GMT
Subject: CN=5614F4B3CE85DF2BE101AFA1572DD4C42531C465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:9d:24:f3:10:d6:24:c1:45:56:8b:26:bc:
d2:a4:cb:53:6d:fe:4e:96:b9:2c:35:80:26:68:16:
e3:1b:13:ce:bc:9b:1a:ee:75:88:3b:55:ae:de:9d:
d6:b1:06:f4:c4:f9:28:82:01:46:b4:96:af:a5:0e:
14:60:1b:7f:e4:e1:02:42:ca:0b:88:a7:de:f6:d0:
2e:ee:a9:1f:9a:99:e5:88:b4:45:f3:ba:8d:1c:b0:
62:61:28:10:88:a9:83:cc:cb:35:96:38:31:27:6d:
9e:13:a6:ab:74:17:d1:5d:65:0a:41:11:d6:e3:fb:
92:f0:5c:cc:16:ac:92:35:b6:2a:f2:2d:c7:5f:61:
62:0d:44:5f:8c:7c:48:50:5d:fc:27:56:8c:37:5c:
cc:c1:67:a9:88:f5:b8:67:ca:6b:47:11:78:f5:79:
a1:d7:40:56:e2:b8:b6:89:3e:39:b2:a0:e1:6d:b2:
6f:b6:ee:80:a7:e6:9b:1e:f8:6c:23:5d:87:a5:8d:
5b:65:e9:cd:ac:16:f4:3c:fe:2e:78:ce:b7:cc:76:
5e:9e:97:0f:57:ae:f5:f6:8a:8e:72:a8:d8:a1:d1:
52:ca:78:65:15:e4:b2:b3:06:db:08:9a:0d:a7:87:
cd:83:33:ef:bd:63:36:ef:eb:39:39:73:97:22:f0:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:14:F4:B3:CE:85:DF:2B:E1:01:AF:A1:57:2D:D4:C4:25:31:C4:65
X509v3 Authority Key Identifier:
keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.247.97.0/24
Signature Algorithm: sha256WithRSAEncryption
01:cb:21:74:15:cd:7e:5b:eb:a1:83:c5:b6:dd:8f:c2:f6:1b:
1f:60:88:8d:e2:62:73:02:33:a3:b3:93:57:91:7c:83:de:ac:
9b:b0:53:c4:83:93:27:8d:ed:57:80:05:f8:30:20:18:a7:bb:
b7:04:40:36:74:1c:88:41:58:c1:9c:c8:b8:fe:f0:9a:d0:dd:
12:b3:67:7d:c0:da:f5:4a:ae:98:a5:fd:d6:e7:d0:a4:47:e5:
b8:a0:f9:82:b9:81:29:80:6f:a6:81:11:60:f1:92:ef:e2:4e:
71:0c:e4:d5:41:36:08:f3:af:0f:4d:d7:96:59:0c:c4:b9:a2:
c7:51:b0:f9:a1:5b:90:5c:dd:2a:78:36:97:75:46:bf:90:d4:
15:be:78:09:94:b9:bd:bf:a1:3c:ec:a2:04:7f:e0:e7:8e:78:
66:73:9d:07:b7:da:95:24:92:21:6c:af:0d:53:67:a0:cd:93:
e5:ee:25:30:e1:22:f7:16:1c:90:64:0f:82:7c:8d:89:f9:69:
f6:50:8c:56:94:fd:62:78:f7:a6:30:d9:c3:ca:f4:26:8c:0b:
5a:16:14:06:33:a3:8f:7b:80:a8:c3:cd:5f:4e:91:62:b0:61:
89:a9:b0:8c:c5:88:21:a0:54:a2:1c:7b:eb:16:e7:ce:dd:df:
2b:e5:0d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org