Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36392e302f32342d3234203d3e20333938343635.roa
File: 3230362e3230362e36392e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier: L1YFbgy3WYgH10DPt+fJPjtLF2SuvToshjjWy7T5nTo=
Subject key identifier: A8:58:70:0D:EC:61:F3:76:66:C5:AA:F6:A8:1C:48:DE:64:3B:F0:0E
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 106A436E9378849887EDBDC5F50748C27EBE082D
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36392e302f32342d3234203d3e20333938343635.roa
Signing time: Mon 11 Jul 2022 08:30:51 +0000
ROA not before: Mon 11 Jul 2022 08:25:51 +0000
ROA not after: Mon 10 Jul 2023 08:30:51 +0000
asID: 398465
IP address blocks: 206.206.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:6a:43:6e:93:78:84:98:87:ed:bd:c5:f5:07:48:c2:7e:be:08:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Jul 11 08:25:51 2022 GMT
Not After : Jul 10 08:30:51 2023 GMT
Subject: CN=A858700DEC61F37666C5AAF6A81C48DE643BF00E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:30:c5:e6:95:71:89:35:08:bc:90:5c:99:
b9:5c:e9:97:a5:82:d6:86:6c:4a:df:22:78:23:ee:
cf:1c:9e:9b:ad:bf:91:c0:15:6d:82:18:04:65:20:
2b:2f:56:c6:16:9d:74:80:a9:b9:9b:50:54:1e:b6:
87:7c:57:07:e2:2c:51:8a:6a:55:01:26:26:22:8c:
3e:8e:a8:ec:db:62:74:c8:5a:f4:f5:2d:16:ae:da:
df:fd:28:3b:16:ec:52:4c:74:84:37:96:7a:04:c2:
59:81:5c:1a:10:6f:4a:1c:47:ee:34:fc:c5:53:9a:
53:db:f7:bf:db:fc:15:de:ee:a4:3f:33:69:b8:7a:
87:87:56:0a:b5:aa:ea:26:48:21:d5:75:e3:9c:69:
ce:6e:b0:4b:58:57:34:23:73:a7:97:84:79:46:33:
2b:a1:44:85:54:cb:ed:1f:a3:27:00:39:1f:8c:bc:
b4:36:3c:5b:8e:fb:95:d4:34:ed:a8:db:15:bb:5d:
5c:45:26:4b:20:17:97:3f:25:6e:a5:f6:91:a1:a5:
10:f4:64:b9:79:3a:5c:3a:23:1f:56:b0:96:c2:f3:
8e:3d:d3:fb:9b:53:f5:47:22:57:5a:cf:99:20:95:
87:2c:67:8d:df:10:d5:4b:5d:0b:9c:71:4c:68:14:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:58:70:0D:EC:61:F3:76:66:C5:AA:F6:A8:1C:48:DE:64:3B:F0:0E
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36392e302f32342d3234203d3e20333938343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.69.0/24
Signature Algorithm: sha256WithRSAEncryption
62:25:ab:8b:49:0f:7a:5a:76:14:78:57:c2:ea:00:08:31:23:
c5:ec:bf:b4:eb:07:ed:98:0d:bb:e5:2c:a0:68:31:b0:15:a5:
ca:52:06:51:1f:91:61:11:17:af:bb:70:a8:9a:5b:9d:e3:99:
c9:6a:5a:17:9f:50:02:32:95:ca:9e:6c:49:3e:61:b1:08:26:
af:de:69:48:32:11:8b:e7:2f:47:8f:42:a1:ed:b8:d5:89:af:
79:86:74:a3:72:fe:04:ad:83:9c:bf:fc:c6:de:0d:09:6f:93:
02:c9:2f:52:57:37:1f:a0:4a:c9:f5:f5:92:46:17:de:79:b2:
d8:c9:00:7d:9d:bd:2e:79:49:8f:bc:87:f1:0b:09:c6:6a:0e:
69:9e:b0:a1:3c:36:d5:54:97:f5:9c:6d:be:80:0a:14:30:08:
4b:a3:77:b9:e3:80:93:9d:98:2f:80:15:c0:ca:2f:a9:fe:58:
18:61:35:52:b8:b0:65:64:6b:77:de:13:b4:79:b2:f1:86:fd:
30:3a:d0:c4:96:86:31:a2:76:ca:fc:3b:49:c3:27:4e:30:a0:
1d:c0:94:e8:be:22:d6:f6:d1:82:63:6e:6c:fa:0a:b5:3f:16:
fb:a6:a0:37:9d:a4:ca:00:53:58:1e:45:66:12:29:07:5d:20:
6f:c4:11:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org