Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3131312e302f32342d3234203d3e203131363131.roa
File: 3230362e3230362e3131312e302f32342d3234203d3e203131363131.roa (raw, json)
Hash identifier: xKvQ3NRTvvs57hxOKXrV5qorEdt6ZNtr1XaMaKhKojc=
Subject key identifier: 2F:26:23:E2:A3:56:B1:87:BE:26:26:A1:9E:CB:D1:ED:90:DC:AB:63
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 2AD310A3705B00135D4DA2FC442CC4E640639227
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3131312e302f32342d3234203d3e203131363131.roa
Signing time: Sat 06 Aug 2022 06:53:21 +0000
ROA not before: Sat 06 Aug 2022 06:48:21 +0000
ROA not after: Sat 05 Aug 2023 06:53:21 +0000
asID: 11611
IP address blocks: 206.206.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d3:10:a3:70:5b:00:13:5d:4d:a2:fc:44:2c:c4:e6:40:63:92:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Aug 6 06:48:21 2022 GMT
Not After : Aug 5 06:53:21 2023 GMT
Subject: CN=2F2623E2A356B187BE2626A19ECBD1ED90DCAB63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:19:db:cc:16:73:ed:a3:bb:53:87:fb:5f:
d4:d4:45:60:db:5a:99:b9:6b:20:3f:3c:9f:4d:73:
78:4a:e1:d3:16:85:d2:3a:d3:34:4c:fd:3b:d6:d7:
fc:5b:d4:55:53:71:90:22:9e:7d:49:4f:4f:15:c3:
bb:8e:bd:c4:bb:fe:67:ab:9d:f0:7d:c0:92:6b:71:
19:f8:ae:ef:8d:de:2c:e4:1c:96:05:29:79:d8:18:
f4:33:53:57:89:9a:56:ad:05:56:dc:99:94:a1:67:
68:45:e0:ac:bf:38:bb:ca:03:98:9d:26:35:28:1c:
1c:87:43:0c:1a:2d:ba:c2:79:22:53:c7:a2:39:4b:
49:43:da:b5:95:2d:67:f1:a6:f6:87:35:d8:46:60:
c9:1d:4e:bc:8d:32:30:84:ee:20:03:a4:e9:dc:c6:
ad:2f:4d:37:6a:2f:cd:b7:d5:e1:a5:62:0b:6f:eb:
27:4b:30:32:b9:fb:c7:6e:e0:f0:18:fb:c4:33:1c:
9b:d2:a0:ab:b3:cf:43:9c:ca:18:80:88:9d:d2:a4:
25:cf:71:fa:1d:d3:fd:23:48:ec:09:88:5b:56:9c:
c0:61:c4:ab:77:63:66:62:cd:c0:04:9d:8d:4e:db:
c5:b7:fe:61:01:ac:71:d0:b9:87:bb:ef:74:0c:0d:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:26:23:E2:A3:56:B1:87:BE:26:26:A1:9E:CB:D1:ED:90:DC:AB:63
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3131312e302f32342d3234203d3e203131363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.111.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4a:91:76:1c:f7:19:15:22:c8:01:8b:e7:ca:85:da:9e:d3:
35:24:b4:8a:78:25:f1:98:da:44:10:f6:28:eb:eb:1d:6f:9b:
b9:fc:ad:98:03:b2:be:b9:34:20:ce:36:70:61:0a:65:f6:7d:
e2:72:1e:fe:d2:ca:c5:eb:3d:da:79:3b:38:ba:a6:28:f1:e8:
3b:4e:fa:ea:04:bb:79:23:17:29:81:c1:ec:7b:02:d0:ce:e5:
d6:ae:46:9e:27:d7:3f:f5:b2:95:d6:c6:ad:02:b6:c1:e2:c8:
20:89:f0:af:6e:d1:a1:15:1a:55:e3:14:99:fb:59:ac:c1:2e:
9c:48:69:bf:bf:e8:3e:b9:28:6e:a4:48:d1:b1:5d:fa:cb:33:
ca:a6:d4:94:b2:b2:db:67:eb:c4:be:52:3f:07:64:96:51:ef:
ae:30:b0:7b:15:a2:67:1d:c4:63:05:c0:1c:31:f4:c7:e9:e1:
fa:82:b1:a0:56:f8:70:ec:e8:38:8e:fb:01:3b:2d:6b:a3:e5:
e6:0c:2f:bc:13:6c:b4:87:6c:ac:75:e7:7e:a0:77:92:23:1a:
e5:b4:02:f7:01:18:38:2d:29:5c:f7:d6:b4:6f:cf:b5:8e:e1:
e0:ba:7f:9f:64:08:ca:58:6d:f8:7a:07:97:8b:a5:78:6f:ce:
47:97:04:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org