Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3131322e302f32322d3232203d3e20323039373337.roa
File: 3230362e3230362e3131322e302f32322d3232203d3e20323039373337.roa (raw, json)
Hash identifier: +70VtXNbtwg2nMWRsTQyFvB3nQBxMNkel3R78E2KIW8=
Subject key identifier: FF:58:C8:B5:77:20:EC:9B:AE:FF:93:BD:09:E4:09:A9:A3:1A:23:43
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 0FB7C537AD726863F9D1855B57E6E9DCC7AB43F1
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3131322e302f32322d3232203d3e20323039373337.roa
Signing time: Tue 06 Sep 2022 11:26:51 +0000
ROA not before: Tue 06 Sep 2022 11:21:51 +0000
ROA not after: Tue 05 Sep 2023 11:26:51 +0000
asID: 209737
IP address blocks: 206.206.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b7:c5:37:ad:72:68:63:f9:d1:85:5b:57:e6:e9:dc:c7:ab:43:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Sep 6 11:21:51 2022 GMT
Not After : Sep 5 11:26:51 2023 GMT
Subject: CN=FF58C8B57720EC9BAEFF93BD09E409A9A31A2343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:f4:9a:45:4e:06:47:4a:06:f9:a5:48:9d:
ba:c7:bd:d9:e3:9d:84:c5:5c:63:ee:13:5f:1b:60:
9d:bf:39:3c:30:93:41:b2:4b:e5:99:68:5b:73:bd:
0e:c9:e9:df:8f:bb:b4:ac:ae:48:ef:2d:cc:25:ef:
79:53:1c:57:f9:e4:ec:81:94:be:78:44:9c:1c:d4:
1b:84:50:4e:d5:ff:20:90:fc:c5:5b:1c:e2:54:9c:
d9:94:e6:16:be:04:e9:96:32:93:7b:f7:f8:63:52:
19:d9:47:1e:4b:26:b7:86:55:08:ee:13:af:d5:82:
f5:c0:f6:58:23:34:74:b0:8f:92:48:41:cb:ad:36:
e1:2c:e4:0f:8c:93:99:73:d1:6b:f6:1b:41:5b:8e:
29:56:ad:e3:b9:e4:06:af:64:d0:f9:c4:3f:a4:d9:
ba:c6:2d:3a:77:b2:de:3f:8d:2e:5c:82:4d:3a:a7:
5b:46:36:76:c8:af:ea:b8:4e:02:77:5e:e2:b9:5f:
05:0f:e0:50:34:d3:ab:ed:29:cf:85:81:6a:ab:fa:
87:64:74:9f:8c:3c:25:fa:8b:d8:7c:ce:f3:89:6e:
fe:aa:60:f3:be:26:9f:02:47:23:3a:49:15:bd:8d:
10:a1:ef:ac:a6:6b:0e:7a:32:ba:16:5d:88:bc:04:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:58:C8:B5:77:20:EC:9B:AE:FF:93:BD:09:E4:09:A9:A3:1A:23:43
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3131322e302f32322d3232203d3e20323039373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.112.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:52:2c:49:07:1e:33:df:d1:ff:b9:4d:17:2f:b8:0b:90:4d:
06:a8:2f:b2:dd:63:c1:6f:80:68:67:a3:2d:33:bf:21:7b:62:
31:58:de:ab:5d:b5:fc:8b:e3:7a:45:84:bc:75:27:b4:1f:90:
81:f9:55:7b:3c:1e:90:ad:84:29:1b:53:dc:bf:97:a9:80:3e:
a3:ef:46:a0:0d:41:e2:30:ea:5a:de:72:85:d9:3a:ce:a7:41:
e5:f7:2b:27:9b:37:ac:62:06:e2:8b:a4:91:5f:54:1d:71:90:
fc:74:54:53:85:f4:c2:37:57:7e:ac:f9:9c:cd:cf:10:0f:5e:
4a:e2:ea:74:36:68:41:02:a3:ff:10:94:41:31:45:8c:70:5c:
02:0e:72:41:1d:e0:57:f3:3c:40:0c:f1:99:c5:30:ff:f3:62:
18:6d:46:53:0b:fe:ff:fd:f3:be:6c:18:50:b3:24:61:3f:01:
1b:f8:87:84:32:35:72:56:ac:2d:99:19:a8:4d:c7:a4:cb:69:
06:9a:bd:c5:09:28:ff:2a:62:58:f3:8a:71:54:a8:44:a1:20:
ab:53:bd:09:b4:e3:85:1b:1d:21:6e:76:23:44:ee:9d:4f:79:
87:e2:71:f8:fa:f7:e4:69:78:e1:42:32:d8:b7:f9:ab:28:c9:
51:4e:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org