Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS136744.roa
File: AS136744.roa (raw, json)
Hash identifier: vOgXiQnsIBCEo0nr3MdkwQ2ZiBbNk6FV4bYFTAP1rlo=
Subject key identifier: AD:09:59:98:37:DA:7E:1C:EE:F8:30:DA:0D:AE:54:33:A5:DD:E1:8A
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 097C278D7D4CA5C4F1465753A1F809B702FACB3B
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS136744.roa
Signing time: Thu 08 Sep 2022 06:49:10 +0000
ROA not before: Thu 08 Sep 2022 06:44:10 +0000
ROA not after: Thu 07 Sep 2023 06:49:10 +0000
asID: 136744
IP address blocks: 216.122.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:7c:27:8d:7d:4c:a5:c4:f1:46:57:53:a1:f8:09:b7:02:fa:cb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Sep 8 06:44:10 2022 GMT
Not After : Sep 7 06:49:10 2023 GMT
Subject: CN=AD09599837DA7E1CEEF830DA0DAE5433A5DDE18A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:15:d0:fd:b9:7a:11:34:df:14:07:41:6a:21:
20:1e:cb:49:0b:61:64:81:ae:3e:e6:83:33:a4:26:
5b:18:15:ac:16:cc:5e:8a:82:95:0b:38:02:b7:44:
eb:42:e6:15:f2:ef:af:17:f9:6e:34:93:de:86:77:
06:d6:14:aa:dd:fc:72:00:8b:4c:78:b2:d9:5d:b1:
aa:27:75:1e:f1:50:b4:ea:59:24:67:94:f0:00:71:
74:8e:1f:e9:74:ce:5a:e1:9e:98:1c:d2:5d:f4:07:
b4:e3:08:12:d9:dc:8e:80:4b:b3:05:4a:4a:42:95:
29:c7:7c:39:0a:1a:d1:17:45:6a:53:53:81:a9:90:
bb:f8:32:b3:65:d4:97:09:da:54:da:a8:c1:a5:5a:
b5:c0:04:8d:c3:bb:ba:8d:10:f2:37:70:3d:cc:e5:
ce:0d:71:f6:af:43:f5:e3:9b:6a:98:eb:52:f7:91:
a6:00:6b:8d:d2:8e:df:73:ae:5d:19:fa:dc:cd:e0:
93:e1:3e:43:3a:65:a3:54:40:51:34:44:a6:07:7e:
26:8a:e4:2f:a6:fe:d1:70:6d:48:bb:34:81:73:1a:
47:56:ec:5b:99:3f:f6:8e:31:57:13:33:85:fb:e5:
44:3f:1d:20:2a:f2:00:58:e7:6a:49:eb:ee:c6:75:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:09:59:98:37:DA:7E:1C:EE:F8:30:DA:0D:AE:54:33:A5:DD:E1:8A
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS136744.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.162.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cc:3c:cb:7f:f4:01:44:3c:51:d1:9c:1f:5c:76:01:88:94:
38:b5:d8:52:47:20:56:26:71:8e:58:a0:72:ab:47:7a:01:16:
a6:0e:80:87:e6:de:b5:2c:c6:03:93:ab:34:b4:3d:9c:11:0c:
8f:29:50:81:58:f0:0a:ac:2b:7d:8c:e5:81:11:9c:3d:b9:2b:
74:24:76:60:f6:4e:37:8b:72:7b:f1:e6:00:26:0d:28:02:d7:
92:d4:99:62:59:18:5a:f8:b1:d0:0e:73:85:43:4d:2a:58:ee:
b9:bd:df:8a:e1:df:fe:14:02:90:0b:b5:b5:e2:89:2d:d6:6b:
33:b2:2e:de:ee:16:00:f2:82:e4:4b:fe:6a:66:53:d9:96:60:
72:52:dc:8d:80:ac:63:99:64:b4:93:15:40:a2:79:d5:13:33:
8c:65:49:9b:14:41:0e:f2:53:eb:ca:a8:ef:73:77:ff:44:0a:
5d:9c:45:3c:6e:2c:8c:9b:f4:a8:0f:2b:85:fd:fd:92:d1:12:
8e:82:90:c1:29:04:15:9e:71:69:39:b6:f5:85:a8:e0:55:01:
0c:39:5e:6d:98:ab:ca:c2:85:af:20:b6:b7:50:ea:cb:aa:bc:
80:58:ff:e3:11:7b:21:34:44:97:61:f9:49:e0:fd:a7:a6:9e:
60:21:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org