Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37312e302f32342d3234203d3e2037303138.roa
File: 3230362e3230362e37312e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: Adr//m2DxMxFbGz9XG2KR01rIhKjktGtampgjTlDwPs=
Subject key identifier: 43:64:A0:4D:B5:6E:9C:D7:BA:91:13:A4:6A:A3:F1:84:58:BC:BB:DF
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 590CDAC1458F1C20F3374243DA0B345ADE3856D0
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37312e302f32342d3234203d3e2037303138.roa
Signing time: Mon 11 Jul 2022 08:30:57 +0000
ROA not before: Mon 11 Jul 2022 08:25:57 +0000
ROA not after: Mon 10 Jul 2023 08:30:57 +0000
asID: 7018
IP address blocks: 206.206.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0c:da:c1:45:8f:1c:20:f3:37:42:43:da:0b:34:5a:de:38:56:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Jul 11 08:25:57 2022 GMT
Not After : Jul 10 08:30:57 2023 GMT
Subject: CN=4364A04DB56E9CD7BA9113A46AA3F18458BCBBDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:b6:e6:81:01:0d:c0:1f:f2:df:50:9c:5d:
8d:6c:03:97:12:13:4a:6c:2f:16:1c:7e:4e:ab:c8:
5b:11:40:01:64:9a:c6:fb:bf:55:8b:1b:21:aa:15:
cb:ac:c7:ee:ec:a6:c3:5e:a2:1e:b4:29:1f:16:d2:
83:a4:b3:11:7a:dd:f9:8b:87:f6:93:47:6e:2f:b9:
02:7c:42:ae:8f:7b:94:e9:51:46:b0:40:bb:6c:e5:
aa:62:5d:e1:d9:54:6a:5b:0a:a5:01:a8:97:59:e9:
ba:02:c5:46:58:3a:d2:d1:e9:0f:50:75:a7:d5:65:
10:f1:dc:31:f4:76:0e:87:7d:2c:13:0d:54:d2:b9:
43:8b:e1:04:5a:a3:a0:61:c8:97:4a:f7:54:18:8b:
af:5f:f0:c4:7d:f4:5d:7a:e5:18:85:6d:6c:99:f9:
7f:ca:1c:d7:6e:8d:ca:cf:77:41:a3:9d:71:b3:26:
4f:02:72:a9:be:a8:09:e1:4e:c5:12:d1:19:b3:a3:
f6:49:a5:d3:b1:9b:ea:09:67:53:9d:2a:86:d0:d9:
c1:04:dc:27:bf:db:d9:70:2e:8f:b9:63:79:80:f3:
95:ef:23:6d:7e:5e:15:bf:dd:90:7f:c0:ad:60:f2:
32:a9:ce:36:23:b7:3f:71:c0:92:b1:37:aa:ff:db:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:64:A0:4D:B5:6E:9C:D7:BA:91:13:A4:6A:A3:F1:84:58:BC:BB:DF
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37312e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.71.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8d:1f:3a:08:dd:42:8a:48:5f:a3:8e:b8:71:e3:2b:39:69:
aa:c8:4c:0e:db:22:36:02:d2:56:e4:94:5b:8f:47:5e:b0:45:
59:03:00:9a:c6:b7:7a:aa:76:33:a8:11:72:37:73:4d:43:0f:
24:6a:f1:de:4c:a1:ea:a5:f7:a5:d5:f9:f9:31:4b:68:0f:a9:
7f:7e:69:50:a4:6c:f8:74:65:1e:cb:f7:a7:f9:4b:1f:d2:05:
9d:d2:cb:e5:05:5e:6c:85:9b:a7:56:d1:01:06:a5:ac:7a:e7:
d5:68:32:eb:75:39:3c:18:b3:2a:35:1a:01:87:40:cf:e2:be:
d8:f5:cd:a4:67:10:c0:77:7a:ec:24:bb:13:8d:a6:da:61:d2:
f8:df:d2:40:dc:f8:49:19:88:ad:ec:02:af:f0:a9:5c:97:9f:
06:ad:e8:3b:b3:49:9b:8d:ef:b6:00:46:53:27:00:39:dc:27:
0b:d7:97:4e:24:be:48:26:57:f3:ee:ec:fa:4a:e1:a6:62:f3:
a2:66:23:87:58:ad:8c:ea:e7:98:d9:0d:2e:46:b2:2a:4b:99:
67:08:43:7d:c1:72:f9:a3:ee:d6:03:28:4a:d8:36:d3:ff:8d:
9c:69:17:9b:4a:b3:ec:db:cd:7b:e4:49:cb:d3:12:e2:46:e6:
d6:f5:69:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org