Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36372e302f32342d3234203d3e20333938343635.roa
File: 3230362e3230362e36372e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier: hDuB77oJOw9LFh0sWvg0aDu7zQE6jXY7f8GvoVZLvJg=
Subject key identifier: AC:1C:49:24:A0:7D:9B:DF:5F:71:EC:E9:0F:5C:CC:E2:CE:3B:73:C0
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 9745026884BD5F73EB0DE3B0DF1D03A57469A3
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36372e302f32342d3234203d3e20333938343635.roa
Signing time: Mon 11 Jul 2022 08:30:43 +0000
ROA not before: Mon 11 Jul 2022 08:25:43 +0000
ROA not after: Mon 10 Jul 2023 08:30:43 +0000
asID: 398465
IP address blocks: 206.206.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
97:45:02:68:84:bd:5f:73:eb:0d:e3:b0:df:1d:03:a5:74:69:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Jul 11 08:25:43 2022 GMT
Not After : Jul 10 08:30:43 2023 GMT
Subject: CN=AC1C4924A07D9BDF5F71ECE90F5CCCE2CE3B73C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:58:52:a1:88:a5:d5:b0:1c:a0:80:08:d0:
52:51:ba:49:31:5e:87:28:60:b5:22:84:f3:1e:74:
b5:6e:0a:9d:fc:4e:ee:52:20:ba:ac:71:b5:2a:06:
91:11:e0:82:0f:19:8a:82:f2:f8:8b:75:09:a4:8b:
e1:1c:ba:af:77:75:8f:46:d6:09:df:34:a9:d5:03:
ce:31:1e:e4:39:26:f2:82:be:bc:85:7f:d5:94:cc:
42:ce:05:09:05:14:ff:ee:c8:29:2c:83:f1:9a:35:
02:08:d8:00:a2:ed:5f:31:de:2e:b8:60:13:a3:dd:
1f:eb:f0:ec:70:0a:3e:56:66:3a:62:20:0b:8c:83:
c7:66:58:f3:5f:13:d0:d3:cc:b7:2b:3d:d8:13:60:
cb:f3:7e:3e:10:33:2c:e1:80:2c:e5:fc:01:c7:2f:
38:ee:bc:d7:03:9c:b4:fe:fe:da:71:a0:f3:01:a3:
ad:7e:07:62:2c:0b:2c:70:73:fd:f1:f6:cd:5d:88:
ac:ae:7f:13:14:97:c6:fa:ce:18:65:4b:0b:cb:b6:
49:ff:c8:8e:d4:f6:94:67:2f:9d:06:ab:b2:94:ce:
32:65:db:0f:75:f2:93:98:66:69:6b:9c:79:ae:69:
ae:bf:da:6e:ad:d6:93:df:af:b6:cd:1d:cf:6a:6e:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1C:49:24:A0:7D:9B:DF:5F:71:EC:E9:0F:5C:CC:E2:CE:3B:73:C0
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36372e302f32342d3234203d3e20333938343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.67.0/24
Signature Algorithm: sha256WithRSAEncryption
03:58:cd:f2:5e:d8:45:be:3e:ad:1b:36:9a:8a:c0:e0:c0:73:
10:76:e0:eb:68:2a:a1:e4:ba:1d:f0:5b:ea:bd:3e:d0:a9:e5:
68:33:26:80:77:2f:be:ab:48:e8:6d:81:8c:6f:f9:76:a5:75:
62:82:cd:c5:ae:6e:af:41:2e:23:cd:57:f0:46:b5:df:1b:3c:
48:0e:31:de:56:cd:71:67:50:39:e6:18:43:66:41:c1:3e:58:
e7:68:a6:c1:8c:da:bc:ee:1b:4d:c1:92:eb:86:82:f1:94:36:
20:78:02:73:3a:a7:df:9c:11:15:44:b6:95:ac:6a:7b:f8:6c:
24:3e:fc:57:61:84:43:8c:d0:60:29:d8:0e:80:d9:16:53:51:
2f:a4:c8:92:d5:c6:70:d1:32:02:50:68:4b:33:4a:6b:30:51:
f7:d6:ff:b1:eb:66:18:56:a0:ac:a9:29:6e:06:29:f4:4d:73:
05:a1:ae:f4:63:5e:af:bf:95:f6:e9:e9:ce:30:92:56:f6:93:
47:b4:f0:61:e8:7c:d0:92:b7:34:d8:eb:24:bc:28:49:d7:c9:
1b:07:3e:2d:fa:44:84:ee:fa:ff:3c:62:50:cf:9e:2e:75:f1:
2b:61:a9:38:16:fd:f0:0f:f7:31:95:a0:65:b1:dc:84:69:6a:
a4:a2:ce:d1
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUAJdFAmiEvV9z6w3jsN8dA6V0aaMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwNzExMDgyNTQzWhcNMjMwNzEwMDgzMDQz
WjAzMTEwLwYDVQQDEyhBQzFDNDkyNEEwN0Q5QkRGNUY3MUVDRTkwRjVDQ0NFMkNF
M0I3M0MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD1YUqGIpdWw
HKCACNBSUbpJMV6HKGC1IoTzHnS1bgqd/E7uUiC6rHG1KgaREeCCDxmKgvL4i3UJ
pIvhHLqvd3WPRtYJ3zSp1QPOMR7kOSbygr68hX/VlMxCzgUJBRT/7sgpLIPxmjUC
CNgAou1fMd4uuGATo90f6/DscAo+VmY6YiALjIPHZljzXxPQ08y3Kz3YE2DL834+
EDMs4YAs5fwBxy847rzXA5y0/v7acaDzAaOtfgdiLAsscHP98fbNXYisrn8TFJfG
+s4YZUsLy7ZJ/8iO1PaUZy+dBquylM4yZdsPdfKTmGZpa5x5rmmuv9purdaT36+2
zR3Pam59awIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKwcSSSgfZvfX3Hs6Q9czOLO
O3PAMB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWVj
NWYyODQwNjI1YS8wLzMyMzAzNjJlMzIzMDM2MmUzNjM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzOTM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5DMA0GCSqGSIb3DQEB
CwUAA4IBAQADWM3yXthFvj6tGzaaisDgwHMQduDraCqh5Lod8FvqvT7QqeVoMyaA
dy++q0jobYGMb/l2pXVigs3Frm6vQS4jzVfwRrXfGzxIDjHeVs1xZ1A55hhDZkHB
PljnaKbBjNq87htNwZLrhoLxlDYgeAJzOqffnBEVRLaVrGp7+GwkPvxXYYRDjNBg
KdgOgNkWU1EvpMiS1cZw0TICUGhLM0prMFH31v+x62YYVqCsqSluBin0TXMFoa70
Y16vv5X26enOMJJW9pNHtPBh6HzQkrc02OskvChJ18kbBz4t+kSE7vr/PGJQz54u
dfErYak4Fv3wD/cxlaBlsdyEaWqkos7R
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org