Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137362e302f32322d3234203d3e203136353039.roa
File: 3231362e3132322e3137362e302f32322d3234203d3e203136353039.roa (raw, json)
Hash identifier: 7FeRN38xfJj5nNMpWxVk/wAQibi3XsqzOU3mse+H2/w=
Subject key identifier: D5:99:8B:8B:FF:1A:2C:29:F9:C0:83:20:AB:18:11:C9:16:A7:ED:87
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 379137FDC26A15B2E775062032212DEE3FCF6289
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137362e302f32322d3234203d3e203136353039.roa
Signing time: Mon 11 Jul 2022 08:30:53 +0000
ROA not before: Mon 11 Jul 2022 08:25:53 +0000
ROA not after: Mon 10 Jul 2023 08:30:53 +0000
asID: 16509
IP address blocks: 216.122.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:91:37:fd:c2:6a:15:b2:e7:75:06:20:32:21:2d:ee:3f:cf:62:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Jul 11 08:25:53 2022 GMT
Not After : Jul 10 08:30:53 2023 GMT
Subject: CN=D5998B8BFF1A2C29F9C08320AB1811C916A7ED87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:11:15:0e:56:01:3f:29:87:e4:79:4b:18:
ed:ba:0f:07:90:57:78:a4:d8:79:1c:3b:3f:f6:26:
bb:20:46:4c:bc:6f:07:ab:81:6a:47:2c:00:c4:8d:
db:4c:29:0f:ab:3b:5f:45:32:1d:3d:a2:0f:ce:d2:
a0:0d:20:bd:f2:75:52:9f:e0:36:63:21:40:b8:16:
d7:f0:f8:6b:31:53:7c:9c:d6:95:2a:6e:7d:09:e1:
fe:56:29:aa:10:d9:b4:fc:d7:b2:9b:6f:f7:a7:69:
42:00:38:23:d6:d2:83:9d:49:81:ba:4b:07:a7:3c:
81:36:88:53:a0:af:b8:37:e3:12:9f:7d:37:1a:2b:
a1:8a:36:8d:4f:7e:c8:81:26:b6:19:4e:09:0d:68:
dc:3b:ef:fb:d4:12:da:59:22:a4:e0:b9:f5:03:18:
0b:c9:c3:f1:91:22:ff:d6:3e:21:c1:68:a2:ca:8c:
18:40:4d:4b:4e:e7:26:bd:28:52:b0:03:9c:b2:a1:
6b:5c:4a:e0:7f:42:93:e6:ff:d4:53:c0:33:50:7a:
cd:3e:4c:af:4b:68:29:78:62:40:02:04:92:7f:bd:
0b:30:79:2c:ab:5d:df:bb:aa:56:21:e7:50:5b:4b:
ee:63:0b:e7:43:e5:f4:8a:f6:86:d5:96:f3:37:44:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:99:8B:8B:FF:1A:2C:29:F9:C0:83:20:AB:18:11:C9:16:A7:ED:87
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137362e302f32322d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.176.0/22
Signature Algorithm: sha256WithRSAEncryption
07:a4:1e:ce:52:94:45:59:49:62:b5:cc:12:61:15:54:3e:ce:
32:ab:5e:d1:e6:d2:0a:04:29:14:b2:b6:81:a7:d6:8d:f2:05:
f5:46:35:66:52:01:cf:10:6c:48:aa:e5:60:57:f5:8a:cd:1f:
71:40:b9:34:07:aa:b5:7e:6c:b5:f9:88:1d:bf:41:cf:70:3b:
01:0a:3f:b2:ba:60:18:28:9d:cd:b0:b6:71:5f:e5:94:07:e8:
b9:ce:38:e1:76:05:69:ea:19:8a:68:0b:63:03:59:ae:6a:ee:
77:02:78:c8:58:05:ab:33:59:b4:8f:35:90:1a:5d:07:5f:28:
ef:b0:26:d2:aa:98:6b:fe:b4:dc:2e:71:8c:3f:5e:cb:2b:86:
69:7f:86:09:62:61:26:df:38:f1:c1:50:0a:f7:fd:cb:62:33:
8e:a4:f5:ff:52:dc:0a:4a:5e:e4:c4:5a:fd:fb:ad:0a:09:85:
b8:45:4f:94:43:21:be:75:aa:2d:84:d1:01:73:03:4e:cd:1f:
58:cc:4e:f2:75:43:f3:cd:e8:d4:19:a2:21:c3:10:d7:08:22:
7d:00:76:1e:eb:e8:6e:8d:2c:99:83:7c:a3:43:b9:28:0b:0e:
91:66:c0:ad:a8:75:35:35:53:b5:7f:95:65:a8:71:2d:c3:4e:
41:3b:fa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org