Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37362e302f32342d3234203d3e20333938343635.roa
File: 3230362e3230362e37362e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier: uAdO5fY1Ryk8BckEf/eflw6jcy/1VLVNpp5gCZ2c1ts=
Subject key identifier: E5:91:CC:E8:95:C0:26:8B:CA:A9:CD:3F:A8:94:52:B7:44:31:7C:0A
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 2B46F6A967311EE62935559618363395C382BB03
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37362e302f32342d3234203d3e20333938343635.roa
Signing time: Mon 11 Jul 2022 08:30:48 +0000
ROA not before: Mon 11 Jul 2022 08:25:48 +0000
ROA not after: Mon 10 Jul 2023 08:30:48 +0000
asID: 398465
IP address blocks: 206.206.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:46:f6:a9:67:31:1e:e6:29:35:55:96:18:36:33:95:c3:82:bb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Jul 11 08:25:48 2022 GMT
Not After : Jul 10 08:30:48 2023 GMT
Subject: CN=E591CCE895C0268BCAA9CD3FA89452B744317C0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:cc:bc:35:a9:49:05:e8:f8:f5:f6:d1:8e:
f1:94:ad:38:06:cc:c8:5b:16:87:0a:e3:71:f3:ef:
3c:2a:04:51:ca:9e:cb:15:18:29:4e:9b:ca:90:74:
95:3d:9b:dd:3b:21:af:cf:0f:c0:d6:bc:b9:34:4d:
d2:a2:c9:ad:4f:21:81:ec:d4:ff:a2:6c:00:a8:de:
5e:73:46:9c:65:62:79:60:0d:68:7d:5e:32:89:49:
b1:1c:2d:b2:eb:23:f1:ed:fd:7d:53:29:e9:28:e3:
54:7e:95:72:5e:f4:22:c9:71:71:5c:a9:38:c3:a0:
c9:03:6d:50:d8:96:41:f3:19:12:88:52:75:2a:a4:
24:cc:95:7c:b3:d5:58:73:f6:15:87:cf:21:f1:6b:
68:50:4c:b3:95:c4:c3:97:1d:1e:16:15:70:44:c0:
21:42:39:23:a8:84:17:03:48:1e:32:3d:bc:e3:69:
d4:e9:ff:14:d8:c4:ee:34:4f:99:c1:7c:5b:d9:d8:
88:ca:f3:76:ef:62:01:7c:b9:1f:16:e7:c2:22:97:
ad:83:20:f0:b5:07:13:8c:e1:68:be:cc:e6:34:74:
83:71:2c:43:6d:5f:f8:0a:42:ec:9d:1e:f1:76:87:
09:8e:3c:24:ef:93:1e:e8:be:d4:84:a5:f7:74:9f:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:91:CC:E8:95:C0:26:8B:CA:A9:CD:3F:A8:94:52:B7:44:31:7C:0A
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37362e302f32342d3234203d3e20333938343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.76.0/24
Signature Algorithm: sha256WithRSAEncryption
16:31:0b:bc:ad:8c:ec:3b:36:6d:4b:7a:97:3d:b0:d5:c3:c6:
d9:f6:13:13:37:aa:c4:85:a2:6e:86:4b:79:3a:bb:e6:4d:d2:
01:1f:88:f3:6a:3a:f2:9a:8e:98:3c:92:02:a7:6a:2f:82:9a:
9b:33:90:22:85:3f:d2:00:cd:80:9e:d2:ef:5a:da:55:d0:e7:
5c:5b:7b:48:54:42:f5:d4:b6:c0:bf:82:d3:50:ab:31:17:57:
ba:bb:35:6e:b8:d2:7e:94:8a:00:80:ae:e0:92:22:d1:39:7a:
2c:d1:ea:93:5b:8a:c5:c9:6d:cb:ef:0e:9a:8c:3e:2f:52:b7:
69:27:98:70:90:96:66:c6:ea:2a:67:01:a9:e4:7d:d8:b0:3e:
43:e5:5e:03:e4:53:24:10:a8:23:91:92:84:57:19:28:5a:cc:
cf:0b:6a:2e:68:ac:e4:2a:93:29:2c:7e:36:e2:a1:9d:09:78:
ad:56:52:97:73:8e:77:73:d2:2b:05:d7:af:76:f8:f2:46:91:
79:45:c1:41:7d:eb:97:6e:67:11:c9:20:e0:15:77:5f:64:d9:
d0:42:7d:73:72:17:90:b4:09:b6:bd:81:00:a2:1c:e0:0e:70:
91:71:e9:8c:4d:a1:76:9e:20:db:d0:06:fe:cb:2f:57:8d:a8:
e0:40:72:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org