Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137322e302f32342d3234203d3e203430363736.roa
File: 3231362e3132322e3137322e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: FRJbdQRT/pS6tYEEs0LXCcm3vFRhGBOuLFpHvY4xarc=
Subject key identifier: 07:54:37:91:57:E8:AF:9C:DD:9D:C2:FF:30:75:B1:58:2B:02:3C:8F
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 22B767DCEFDBF545FFAB857B0FA793B3F88A7819
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137322e302f32342d3234203d3e203430363736.roa
Signing time: Mon 11 Jul 2022 08:30:50 +0000
ROA not before: Mon 11 Jul 2022 08:25:50 +0000
ROA not after: Mon 10 Jul 2023 08:30:50 +0000
asID: 40676
IP address blocks: 216.122.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b7:67:dc:ef:db:f5:45:ff:ab:85:7b:0f:a7:93:b3:f8:8a:78:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Jul 11 08:25:50 2022 GMT
Not After : Jul 10 08:30:50 2023 GMT
Subject: CN=0754379157E8AF9CDD9DC2FF3075B1582B023C8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a6:87:5c:22:dd:69:5a:1f:ca:cf:82:c3:5b:
d7:b7:f7:aa:f7:02:ab:fa:97:c0:90:4d:e3:a4:14:
9f:73:92:fa:0f:eb:74:85:7f:3d:60:01:1f:c5:f7:
71:85:69:56:ee:0f:4d:fd:61:97:9f:ff:57:5e:b9:
6b:21:a7:4d:e3:0f:21:f7:9c:c4:6c:b6:12:5a:75:
e2:9c:3f:de:91:1c:b0:80:5f:17:6f:bf:a1:de:8c:
62:b3:3a:ee:b1:80:70:90:c7:04:c3:1f:43:a9:28:
e9:d0:49:82:85:c6:52:92:aa:02:24:b7:58:49:f3:
5c:ac:2d:38:6d:1e:76:f8:69:15:26:23:9b:2d:af:
bf:f0:17:8a:b9:b5:76:65:f4:6d:c9:54:48:9a:53:
41:45:08:a8:16:1e:ab:0e:d8:19:f1:3a:76:6d:ec:
57:3d:a2:20:6a:95:0b:11:00:2a:ab:dc:06:98:a3:
64:77:b7:37:de:74:25:d7:c6:24:f8:fe:30:48:03:
5f:ca:de:fe:8a:5f:fb:c4:4c:1b:78:2a:4d:f7:8a:
ae:55:b5:dc:52:54:54:b7:b7:b2:3b:57:b3:81:dd:
03:82:0d:49:c5:c6:7c:80:05:26:94:bf:aa:2e:0d:
81:74:8d:9c:92:84:79:4d:05:bc:79:7b:2b:b1:d2:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:54:37:91:57:E8:AF:9C:DD:9D:C2:FF:30:75:B1:58:2B:02:3C:8F
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137322e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.172.0/24
Signature Algorithm: sha256WithRSAEncryption
38:14:c8:6e:0a:0c:dd:ec:9e:99:4e:95:14:61:51:38:83:86:
01:56:cf:f8:c0:2a:56:25:6b:74:5d:b6:bd:e3:7f:35:a8:51:
77:da:a1:38:93:c6:30:a4:7d:55:9f:bc:53:bf:13:c6:ee:27:
7d:15:26:20:87:99:3e:e7:a5:b3:be:23:98:32:39:5c:47:38:
8f:24:8d:90:47:da:9f:3a:b5:da:72:11:70:31:57:d1:fc:15:
35:05:5d:8b:8e:74:12:cd:75:0b:10:05:cd:ed:41:d3:96:90:
61:69:ee:68:0e:7e:cf:df:01:b3:7f:c8:cf:94:e3:de:95:9a:
36:da:22:5d:4f:c9:6a:3d:2e:c8:f9:3e:f5:87:30:b6:59:8d:
50:38:f1:cf:d6:c5:dd:02:c2:d9:90:02:6d:a0:69:37:65:47:
0f:41:93:6a:81:23:94:d7:4d:53:e1:63:92:4f:8b:c5:12:3b:
2e:1e:57:30:ec:6f:00:7b:a4:5f:d9:e5:72:8a:7b:98:ab:1d:
20:bc:5b:2e:9c:21:07:b1:bb:9f:31:e2:b2:95:f0:63:d2:c6:
62:71:57:22:a8:c7:4f:78:a2:2b:1c:f2:13:cc:99:51:ec:f0:
cf:04:59:4c:3a:22:b1:92:5c:88:5c:3d:aa:64:2d:5b:82:70:
6b:85:5d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org