Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36382e302f32342d3234203d3e2038313030.roa
File: 3230362e3230362e36382e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier: BOqfBj4/bw47o8V5zkHRDcCZhUJ3HzIE0eAnophuS0c=
Subject key identifier: 1F:3D:AD:89:D6:7F:2C:D4:0F:5F:DB:42:2C:C9:42:C4:BA:58:6A:2D
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 147ECB9901E8FE42C6C776357CFE67A869FC009C
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36382e302f32342d3234203d3e2038313030.roa
Signing time: Thu 14 Jul 2022 17:21:36 +0000
ROA not before: Thu 14 Jul 2022 17:16:36 +0000
ROA not after: Thu 13 Jul 2023 17:21:36 +0000
asID: 8100
IP address blocks: 206.206.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:7e:cb:99:01:e8:fe:42:c6:c7:76:35:7c:fe:67:a8:69:fc:00:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Jul 14 17:16:36 2022 GMT
Not After : Jul 13 17:21:36 2023 GMT
Subject: CN=1F3DAD89D67F2CD40F5FDB422CC942C4BA586A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:52:e1:27:45:d6:17:6c:4c:85:5b:f2:92:
e5:df:e5:e9:2a:a3:31:23:28:96:f9:b2:08:67:0f:
60:22:9a:f0:09:02:1a:0f:94:90:7e:ba:d2:31:00:
dc:4b:ba:2e:a3:22:10:b6:d0:f3:f5:12:d2:53:31:
46:80:68:15:84:4f:81:9c:77:a3:7d:fa:c0:7b:9b:
4a:0b:d6:85:5e:a2:ab:b5:72:4e:53:88:7f:8d:43:
ed:b6:96:31:92:af:92:55:4d:b0:38:a4:f3:77:17:
6e:2b:89:10:e8:30:dc:52:d0:f3:aa:aa:82:f0:98:
f7:ee:ac:04:58:94:4b:b2:08:b2:02:0b:86:50:51:
12:81:6d:c5:87:12:0d:51:a7:ca:b5:74:79:4e:f9:
e5:d6:8d:56:d8:27:17:fd:c7:c9:0c:a4:f6:5c:4e:
99:66:e6:d4:f1:cd:a1:1b:f4:df:76:81:31:f7:38:
55:5b:5d:dc:27:2a:03:d3:a9:90:f3:61:a9:34:2e:
21:90:cc:e5:94:1b:1d:34:15:36:4c:92:d4:be:04:
b1:12:4d:25:af:b6:74:cc:b0:a7:73:dd:8e:f4:df:
85:99:bd:d6:7e:11:dd:79:88:f0:2b:29:07:b2:e1:
e2:06:ac:ba:77:94:b0:38:2e:41:b5:80:a2:2e:57:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:AD:89:D6:7F:2C:D4:0F:5F:DB:42:2C:C9:42:C4:BA:58:6A:2D
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36382e302f32342d3234203d3e2038313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.68.0/24
Signature Algorithm: sha256WithRSAEncryption
70:4c:39:2d:74:f5:a3:2b:55:1f:4e:2c:a8:81:12:98:39:93:
04:91:2e:0b:70:65:fb:b0:cf:4a:8a:87:0f:1b:5c:6c:08:54:
37:77:71:3f:2b:a7:39:e1:6c:38:2e:16:a1:4e:3e:d0:c0:f4:
1f:fc:c0:2d:28:b9:34:9e:ab:0c:45:bc:05:a9:fe:46:b4:66:
d4:05:18:e9:e1:ec:88:a3:27:8c:0a:6a:33:dd:30:da:ea:9e:
c6:22:18:28:c3:6b:7f:7f:d1:de:aa:e7:50:2b:85:d8:1d:f1:
52:0e:f8:9a:7a:48:18:b2:fc:00:7c:53:38:d5:71:b3:8a:5d:
a2:69:3b:0a:b5:7e:45:33:27:dd:71:99:78:45:a0:62:5f:6b:
18:fb:19:e0:b1:5b:14:1f:46:0f:f1:36:7c:92:49:36:bd:d7:
e6:e7:20:78:9c:a7:d5:01:52:32:e6:2b:0e:f6:01:36:9b:c6:
b3:44:44:83:a6:8e:ca:6e:89:f1:29:70:a9:e6:c8:42:09:b5:
ae:d0:bd:b9:af:ca:f1:c9:df:2f:fd:42:01:17:51:ee:b1:e5:
33:f5:1d:a1:12:f7:39:45:47:73:b5:4c:a2:36:2b:00:62:7f:
c3:c2:db:23:95:b0:d5:90:6e:04:38:89:0e:e7:df:da:70:d3:
32:88:84:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org