Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37312e302f32342d3234203d3e2031323939.roa
File: 3230362e3230362e37312e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier: 7chnSPEcV415Tla/Iv2SPuZ1iKvL+N/L6fvyeD1iGzU=
Subject key identifier: 87:99:A4:EA:DA:64:EE:D3:02:9E:B9:9F:51:E4:C6:7F:55:2F:09:C7
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 7DBC5E2CC09E340E4E24F20C1F5F481EE4F26B23
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37312e302f32342d3234203d3e2031323939.roa
Signing time: Mon 11 Jul 2022 08:30:40 +0000
ROA not before: Mon 11 Jul 2022 08:25:40 +0000
ROA not after: Mon 10 Jul 2023 08:30:40 +0000
asID: 1299
IP address blocks: 206.206.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:bc:5e:2c:c0:9e:34:0e:4e:24:f2:0c:1f:5f:48:1e:e4:f2:6b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Jul 11 08:25:40 2022 GMT
Not After : Jul 10 08:30:40 2023 GMT
Subject: CN=8799A4EADA64EED3029EB99F51E4C67F552F09C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:65:0b:c5:bf:79:a7:4a:0c:f8:99:46:c5:
71:96:22:d2:20:79:2e:29:ba:6a:53:f5:57:f1:0d:
44:05:15:00:64:29:e0:a7:ad:f1:0d:38:bf:1a:d5:
94:8d:b2:65:d1:1c:8c:09:51:9f:00:cc:5d:da:3b:
13:e7:b6:71:61:a5:d1:ce:53:1c:82:80:bd:cc:05:
ab:06:a4:b4:5c:c8:b3:e5:d8:3b:98:e4:57:82:0e:
74:5b:9b:18:26:9e:59:c0:f3:7d:ac:8e:d1:82:a6:
e2:44:22:ab:37:05:d5:a8:11:82:2d:e7:05:9b:e9:
99:b8:e0:d2:c7:9a:9a:ce:d2:64:cd:40:e5:0d:96:
bd:15:c0:af:ff:e0:70:ff:89:b5:87:1a:12:49:36:
98:dd:78:2a:5c:6b:cc:f2:6a:8e:b1:e9:11:2f:2b:
b4:6b:43:76:14:7d:9d:76:3f:f6:8e:d0:97:4e:fa:
00:af:22:4f:55:e6:7f:a4:a8:8d:7a:89:0b:1f:a0:
6a:d5:8e:4f:1b:00:50:70:e1:2d:55:10:0f:be:0e:
16:a1:2a:87:24:99:cb:f4:77:26:45:f3:2d:0f:10:
3d:9c:96:3d:84:59:72:de:c9:99:87:13:ac:6c:13:
a3:21:09:76:e3:c7:3d:66:74:90:54:74:0b:06:15:
e2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:99:A4:EA:DA:64:EE:D3:02:9E:B9:9F:51:E4:C6:7F:55:2F:09:C7
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37312e302f32342d3234203d3e2031323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c8:93:01:12:63:fe:03:82:84:0c:5f:30:ed:a9:a9:39:42:
20:0e:25:8b:d6:4d:62:c6:52:40:11:9d:52:93:35:bf:46:11:
d8:ef:ac:53:f3:b2:8e:06:60:da:b2:9b:ff:93:9e:d6:e7:e5:
d9:33:d2:24:1f:2b:96:2f:0f:a0:3b:a1:30:8a:9f:83:d0:28:
db:2f:bd:cf:4b:fa:96:2f:b7:e9:f1:f4:e1:87:7f:e7:7b:cc:
6d:a0:d8:10:c8:5b:ce:aa:a4:76:20:35:4d:17:e9:76:94:7c:
55:13:7b:ea:a9:45:28:69:42:25:14:8d:df:10:4c:53:92:f0:
5e:15:69:84:0d:b0:cd:67:1a:47:45:58:10:d1:b6:94:05:a7:
11:de:d7:8d:d7:e9:49:ef:b2:c9:8c:21:1e:e9:76:c8:1d:0f:
38:37:b6:8c:36:fa:58:02:04:39:28:b6:4c:24:65:af:1c:a3:
31:55:0b:84:1a:a7:3b:fa:27:24:5c:bc:e7:b0:be:0a:3b:e3:
df:65:32:8d:82:18:13:27:f1:53:ac:75:85:e1:9a:31:19:3f:
ec:fc:b8:22:48:e9:00:b6:94:65:f8:a4:12:0e:8d:f8:af:32:
e7:50:c7:69:0a:ca:c5:f0:ab:81:0c:1b:e7:08:80:78:05:eb:
12:04:4a:3c
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUfbxeLMCeNA5OJPIMH19IHuTyayMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwNzExMDgyNTQwWhcNMjMwNzEwMDgzMDQw
WjAzMTEwLwYDVQQDEyg4Nzk5QTRFQURBNjRFRUQzMDI5RUI5OUY1MUU0QzY3RjU1
MkYwOUM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCFlC8W/eadK
DPiZRsVxliLSIHkuKbpqU/VX8Q1EBRUAZCngp63xDTi/GtWUjbJl0RyMCVGfAMxd
2jsT57ZxYaXRzlMcgoC9zAWrBqS0XMiz5dg7mORXgg50W5sYJp5ZwPN9rI7Rgqbi
RCKrNwXVqBGCLecFm+mZuODSx5qaztJkzUDlDZa9FcCv/+Bw/4m1hxoSSTaY3Xgq
XGvM8mqOsekRLyu0a0N2FH2ddj/2jtCXTvoAryJPVeZ/pKiNeokLH6Bq1Y5PGwBQ
cOEtVRAPvg4WoSqHJJnL9HcmRfMtDxA9nJY9hFly3smZhxOsbBOjIQl248c9ZnSQ
VHQLBhXi1QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIeZpOraZO7TAp65n1Hkxn9V
LwnHMB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWVj
NWYyODQwNjI1YS8wLzMyMzAzNjJlMzIzMDM2MmUzNzMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADOzkcwDQYJKoZIhvcNAQELBQAD
ggEBAH3IkwESY/4DgoQMXzDtqak5QiAOJYvWTWLGUkARnVKTNb9GEdjvrFPzso4G
YNqym/+Tntbn5dkz0iQfK5YvD6A7oTCKn4PQKNsvvc9L+pYvt+nx9OGHf+d7zG2g
2BDIW86qpHYgNU0X6XaUfFUTe+qpRShpQiUUjd8QTFOS8F4VaYQNsM1nGkdFWBDR
tpQFpxHe143X6UnvssmMIR7pdsgdDzg3tow2+lgCBDkotkwkZa8cozFVC4Qapzv6
JyRcvOewvgo7499lMo2CGBMn8VOsdYXhmjEZP+z8uCJI6QC2lGX4pBIOjfivMudQ
x2kKysXwq4EMG+cIgHgF6xIESjw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org