Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36362e302f32342d3234203d3e2031323939.roa
File: 3230362e3230362e36362e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier: 7XCBeR0J2yzpamd4LD1NbUd0Cg/x2b5xO/EYfA7KYp4=
Subject key identifier: 73:7D:AB:1F:92:D0:C3:D1:9C:05:14:05:0F:AC:4A:FF:EB:60:7F:95
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 3E08435A5CB418168C456680D0E55903473EE5FA
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36362e302f32342d3234203d3e2031323939.roa
Signing time: Mon 11 Jul 2022 08:30:44 +0000
ROA not before: Mon 11 Jul 2022 08:25:44 +0000
ROA not after: Mon 10 Jul 2023 08:30:44 +0000
asID: 1299
IP address blocks: 206.206.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:08:43:5a:5c:b4:18:16:8c:45:66:80:d0:e5:59:03:47:3e:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Jul 11 08:25:44 2022 GMT
Not After : Jul 10 08:30:44 2023 GMT
Subject: CN=737DAB1F92D0C3D19C0514050FAC4AFFEB607F95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:d6:ea:a7:fc:3f:30:43:35:fc:34:98:c7:
f1:31:3a:25:37:87:76:c1:61:37:bc:35:85:6c:3d:
9a:1d:44:f4:60:ac:f5:05:aa:7d:5a:1a:b8:21:b3:
9d:de:a1:0d:cf:3e:b8:b9:be:1a:3b:05:2a:bc:c7:
6b:80:6d:b0:a4:90:63:66:65:29:2b:ae:b4:1c:47:
c6:87:89:1f:e1:54:3d:41:cb:7c:aa:fc:89:77:e4:
d0:66:8a:87:24:a9:c6:0d:bd:a2:c8:d1:6b:83:a1:
14:b0:5e:b6:61:65:3e:23:77:1f:0c:2f:f5:da:20:
38:bd:af:66:8e:0a:6b:fe:d6:5c:f3:2e:25:51:7f:
dc:b8:21:d1:a2:ff:de:19:f3:1d:53:0a:b4:cf:6a:
e6:18:90:1e:13:9a:b5:f7:ac:09:96:dc:9b:66:b8:
77:87:89:7b:bd:ca:67:e7:3a:45:c6:fd:2c:33:a7:
a8:50:a4:e1:a9:97:a6:c3:2c:34:bf:82:03:49:5c:
fa:6c:4f:bb:b7:46:96:ff:4e:1c:1d:c4:fc:d2:21:
29:ad:fa:80:a1:41:19:37:04:85:dd:4e:b1:ef:52:
7c:94:f7:ab:b3:98:52:d0:10:59:45:3c:32:75:ef:
58:ca:ed:3e:2e:3d:49:83:49:66:59:ec:b0:58:a7:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7D:AB:1F:92:D0:C3:D1:9C:05:14:05:0F:AC:4A:FF:EB:60:7F:95
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36362e302f32342d3234203d3e2031323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.66.0/24
Signature Algorithm: sha256WithRSAEncryption
49:13:d8:45:51:0e:9a:c9:77:ba:eb:fe:7e:75:f3:51:34:52:
3d:be:17:54:71:bb:1b:4f:c6:99:74:af:df:48:59:bf:11:63:
49:61:4c:f8:1e:27:30:5b:03:33:9a:07:90:59:19:77:5f:56:
95:b9:10:6e:d5:ba:2c:76:bd:e4:bb:dc:41:d9:01:f0:40:e9:
77:25:6f:3d:19:46:d4:26:c8:5d:35:6d:f2:be:26:95:41:c5:
c8:e6:33:97:4c:2e:0a:17:6a:9b:c4:7d:20:f4:86:1f:41:6d:
da:18:29:65:c6:e0:77:83:ab:d5:66:e9:ce:c9:61:9a:3a:64:
6e:0e:89:21:ee:4b:b2:2a:05:fb:80:08:ff:5c:04:0e:63:6c:
2e:ab:b4:81:60:4b:e3:c3:35:a2:08:81:4f:c3:38:0d:9b:51:
8a:b6:60:99:68:11:eb:f1:b1:22:97:c7:53:47:91:40:f8:f0:
00:b8:1b:ce:e7:f6:28:70:2c:7a:d8:07:6a:ff:00:76:22:c6:
3f:9e:db:53:d9:96:b1:ea:0d:bf:e9:6b:a3:1e:2c:91:b2:35:
57:ba:d3:8f:31:17:bf:fd:09:e0:18:43:ef:70:88:d7:fe:d0:
e1:6e:7b:db:91:27:43:d5:66:e0:d2:2e:09:44:01:dc:58:38:
b6:c8:46:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org