Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3132312e302f32342d3234203d3e203439393939.roa
File: 3230362e3230362e3132312e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: 8BmXNtIqSqRLy5lOYcjLTXrZ7zm0RqnRElmhPH5bsVQ=
Subject key identifier: 9B:2A:AA:D3:1E:32:5C:C7:21:1E:69:FE:6C:FF:B6:2D:03:0F:64:DC
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 299995F38AAF6E5695DA856CE64247B2ACE46217
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3132312e302f32342d3234203d3e203439393939.roa
Signing time: Mon 18 Jul 2022 05:03:08 +0000
ROA not before: Mon 18 Jul 2022 04:58:08 +0000
ROA not after: Mon 17 Jul 2023 05:03:08 +0000
asID: 49999
IP address blocks: 206.206.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:99:95:f3:8a:af:6e:56:95:da:85:6c:e6:42:47:b2:ac:e4:62:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Jul 18 04:58:08 2022 GMT
Not After : Jul 17 05:03:08 2023 GMT
Subject: CN=9B2AAAD31E325CC7211E69FE6CFFB62D030F64DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:91:69:89:dd:df:3c:39:04:00:46:0b:de:
78:8e:04:4b:6b:1f:3e:2f:4f:08:92:43:a5:e7:78:
35:ce:c5:97:62:b0:69:d3:58:af:af:69:90:63:ee:
7c:be:be:c3:f7:85:cb:87:5d:4e:45:f6:a0:b8:a0:
c8:9e:d0:95:95:fb:a3:2d:e1:e4:7d:c8:55:95:ef:
d1:3e:22:5b:4a:9f:8b:93:ca:e7:15:75:a9:da:d2:
eb:68:66:7f:a5:a0:aa:9d:4e:f2:93:8c:07:30:e3:
ca:d9:35:73:37:5b:0a:0e:b6:47:36:52:81:e3:0c:
99:a7:d5:9a:26:f8:a4:af:5c:79:77:1a:3b:79:86:
11:80:f1:e4:e1:db:9e:56:a7:aa:6a:dc:51:08:96:
2d:32:c3:0a:53:83:48:a5:44:f4:47:29:e5:a4:63:
2a:f9:e4:21:79:a2:bd:1d:b0:59:b1:e7:3c:09:b4:
fc:27:95:e0:8c:e5:1f:b0:a6:98:b9:9c:6d:80:5b:
cb:15:36:49:1b:64:3e:1b:0b:7c:4e:d0:43:78:76:
5e:16:38:13:e4:4a:a3:0a:8e:9f:74:32:6b:ce:be:
83:d3:10:15:79:6a:73:cf:fe:81:ef:fe:36:d3:27:
41:64:8f:c6:5e:57:8c:bc:a6:36:6a:2e:0a:cf:56:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2A:AA:D3:1E:32:5C:C7:21:1E:69:FE:6C:FF:B6:2D:03:0F:64:DC
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3132312e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.121.0/24
Signature Algorithm: sha256WithRSAEncryption
da:fa:a4:35:13:b0:5d:dd:f6:c7:85:1e:ce:dd:35:b9:85:6f:
0b:e1:fd:d5:bc:4e:9b:aa:4a:7b:0a:40:2a:bd:2f:ef:9a:62:
99:0a:f1:9b:8f:6e:1e:ff:17:38:57:5d:26:ed:26:18:34:0f:
4c:e8:ed:2a:b6:0f:2e:4b:8d:9c:c8:0a:7b:c2:37:ac:82:f0:
16:8a:5b:8b:05:18:62:94:15:a0:50:2a:7a:32:7c:ce:97:66:
5e:18:eb:87:43:e1:97:f7:e7:62:79:a3:ca:80:61:74:b3:9f:
1b:e9:03:78:d3:10:2f:73:93:ae:13:3d:12:72:db:0c:a6:15:
10:55:28:de:24:ea:6c:8e:4e:be:96:79:86:3e:0b:c8:9d:1a:
20:89:ce:4e:44:0a:02:f3:b0:12:1d:be:9d:00:8f:78:a5:2e:
d4:d5:55:7f:0e:76:66:9e:e0:c3:6e:9c:cd:95:6f:19:19:6c:
9b:15:59:b6:fc:c5:30:af:4c:93:77:a2:7b:3f:ae:bd:fc:16:
2a:e7:db:09:b2:d3:25:87:5a:3f:dd:79:a3:04:59:f3:8c:4a:
14:84:03:07:e0:c3:00:0a:a2:2e:fe:43:33:0a:b3:cf:5f:09:
e3:28:85:f9:cf:ce:b9:aa:0b:41:f4:d1:a8:80:06:9e:76:86:
7b:00:21:ee
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUKZmV84qvblaV2oVs5kJHsqzkYhcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwNzE4MDQ1ODA4WhcNMjMwNzE3MDUwMzA4
WjAzMTEwLwYDVQQDEyg5QjJBQUFEMzFFMzI1Q0M3MjExRTY5RkU2Q0ZGQjYyRDAz
MEY2NERDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1yRaYnd3zw5
BABGC954jgRLax8+L08IkkOl53g1zsWXYrBp01ivr2mQY+58vr7D94XLh11ORfag
uKDIntCVlfujLeHkfchVle/RPiJbSp+Lk8rnFXWp2tLraGZ/paCqnU7yk4wHMOPK
2TVzN1sKDrZHNlKB4wyZp9WaJvikr1x5dxo7eYYRgPHk4dueVqeqatxRCJYtMsMK
U4NIpUT0RynlpGMq+eQheaK9HbBZsec8CbT8J5XgjOUfsKaYuZxtgFvLFTZJG2Q+
Gwt8TtBDeHZeFjgT5EqjCo6fdDJrzr6D0xAVeWpzz/6B7/420ydBZI/GXleMvKY2
ai4Kz1ZQNQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJsqqtMeMlzHIR5p/mz/ti0D
D2TcMB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWVj
NWYyODQwNjI1YS8wLzMyMzAzNjJlMzIzMDM2MmUzMTMyMzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNDM5MzkzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs55MA0GCSqGSIb3DQEB
CwUAA4IBAQDa+qQ1E7Bd3fbHhR7O3TW5hW8L4f3VvE6bqkp7CkAqvS/vmmKZCvGb
j24e/xc4V10m7SYYNA9M6O0qtg8uS42cyAp7wjesgvAWiluLBRhilBWgUCp6MnzO
l2ZeGOuHQ+GX9+dieaPKgGF0s58b6QN40xAvc5OuEz0SctsMphUQVSjeJOpsjk6+
lnmGPgvInRogic5ORAoC87ASHb6dAI94pS7U1VV/DnZmnuDDbpzNlW8ZGWybFVm2
/MUwr0yTd6J7P669/BYq59sJstMlh1o/3XmjBFnzjEoUhAMH4MMACqIu/kMzCrPP
XwnjKIX5z865qgtB9NGogAaedoZ7ACHu
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org