Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS138687.roa
File: AS138687.roa (raw, json)
Hash identifier: 942Z6IvyxelV5qp+EmAH0J3WRMKBbEnLvdfFqKXeg8g=
Subject key identifier: BD:8D:A1:07:BF:49:4D:F3:E3:14:A0:6C:19:33:B6:29:B0:71:70:AC
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 4171EBA91A54A64ADAB5C422EDC27C4231716F57
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS138687.roa
Signing time: Tue 13 Sep 2022 03:41:14 +0000
ROA not before: Tue 13 Sep 2022 03:36:14 +0000
ROA not after: Tue 12 Sep 2023 03:41:14 +0000
asID: 138687
IP address blocks: 206.206.98.0/24 maxlen: 24
206.206.124.0/24 maxlen: 24
206.206.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:71:eb:a9:1a:54:a6:4a:da:b5:c4:22:ed:c2:7c:42:31:71:6f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Sep 13 03:36:14 2022 GMT
Not After : Sep 12 03:41:14 2023 GMT
Subject: CN=BD8DA107BF494DF3E314A06C1933B629B07170AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:d6:64:9e:d6:89:cf:4d:26:3f:65:eb:a0:
54:a8:ec:a9:50:11:da:d5:35:40:85:5d:12:e7:89:
c5:7e:84:02:0a:ea:56:7f:f3:46:81:f7:a4:98:7d:
90:e5:70:3a:04:35:7c:1a:9b:01:0d:24:93:8c:79:
d3:e1:d8:da:fb:38:43:b1:48:33:69:61:57:22:a7:
8c:63:64:ec:39:5e:3b:5e:1b:c5:af:ed:3e:4b:e2:
2a:d1:1a:14:49:f2:39:64:0a:2f:fd:ef:6f:38:59:
84:6e:27:8e:c2:c2:a5:6e:6a:96:8d:da:24:1d:b6:
a3:a6:b7:9f:ff:2c:80:b4:7f:c1:89:28:aa:b2:ba:
c9:53:35:e4:4a:66:90:6d:54:2d:28:84:a9:ec:0d:
96:b4:e7:b0:98:33:9a:83:5b:f7:e9:7e:05:0a:68:
bc:36:b4:be:3d:e9:85:d0:e2:52:18:18:68:15:c7:
d2:e6:a9:9d:5f:74:4a:df:25:c6:d6:6a:63:60:21:
18:a8:db:ac:c5:b3:86:52:da:12:bc:f0:10:f2:ee:
71:ea:2f:bf:93:a8:bb:39:44:b1:f4:3c:fd:a6:55:
b7:43:91:12:8a:4f:68:d6:0e:c2:7b:1d:fb:fd:ed:
ef:30:f3:6f:f0:7d:02:8a:9f:9d:bc:72:6f:df:79:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8D:A1:07:BF:49:4D:F3:E3:14:A0:6C:19:33:B6:29:B0:71:70:AC
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS138687.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.98.0/24
206.206.124.0/23
Signature Algorithm: sha256WithRSAEncryption
66:33:7c:4f:d2:17:16:27:d2:ce:90:df:a6:cd:68:a1:1a:36:
a6:b7:b7:54:9b:3b:3d:e3:a0:f2:a7:4c:46:2f:a6:35:bf:d8:
44:26:b5:fa:30:c2:a6:c5:63:28:39:9b:88:3b:22:82:f9:9a:
10:2c:79:35:a4:bd:4c:58:3d:67:26:6a:0d:d1:0e:f8:fa:e7:
f6:65:25:e2:26:cd:69:dd:60:88:3a:2d:33:02:83:9f:51:6e:
55:4b:26:98:dc:1b:b9:ee:fb:df:31:ae:b1:5c:77:c2:56:93:
53:6c:62:90:fe:32:22:84:0f:9d:ec:d1:45:ca:01:52:0f:a8:
51:31:ae:51:11:5f:43:9f:88:cf:18:af:f5:07:86:8e:20:7b:
cc:81:dd:06:4f:3b:64:84:c6:27:01:12:0f:ba:fa:9e:bc:f6:
b8:b2:a4:64:10:8e:75:f4:72:aa:2d:f9:be:5e:4a:5e:04:d2:
4d:24:14:a2:4f:82:c7:9c:88:00:ec:94:ce:ac:06:af:f4:eb:
fb:bf:f8:06:2d:fd:5e:ca:6f:e4:ba:99:dc:79:7a:dc:c6:ad:
1b:68:e0:7a:ed:11:88:45:91:c6:2e:7c:77:33:90:fc:a9:6d:
99:47:94:12:35:8b:3c:49:77:31:51:2c:71:b2:a9:cb:1a:f6:
31:b8:cc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org