Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS139571.roa
File: AS139571.roa (raw, json)
Hash identifier: 6MyIWzmChf2nSSBxFUUNtP43h7EBim0oiNv3SKwIDnU=
Subject key identifier: C0:7C:B3:5A:E8:04:29:CE:1C:CD:44:27:3B:BE:A3:57:71:E1:DD:3D
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 538CB2C6ECCD80EEE66FB37A9BFAE5EB04C5E39E
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS139571.roa
Signing time: Thu 08 Sep 2022 06:49:07 +0000
ROA not before: Thu 08 Sep 2022 06:44:07 +0000
ROA not after: Thu 07 Sep 2023 06:49:07 +0000
asID: 139571
IP address blocks: 216.122.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:8c:b2:c6:ec:cd:80:ee:e6:6f:b3:7a:9b:fa:e5:eb:04:c5:e3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Sep 8 06:44:07 2022 GMT
Not After : Sep 7 06:49:07 2023 GMT
Subject: CN=C07CB35AE80429CE1CCD44273BBEA35771E1DD3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d4:c2:0c:22:e9:30:31:49:29:a5:fb:cd:dc:
24:b3:b9:ab:62:5e:61:27:14:a0:f0:67:de:05:8a:
df:83:9f:df:1d:f2:86:3f:13:3a:0d:8b:39:a8:7a:
47:5a:a7:b9:f6:0d:d3:1a:61:53:17:84:f4:c9:0f:
67:cc:20:67:09:f4:a4:d7:52:35:06:15:4c:d9:f3:
69:8d:9d:dc:31:7c:92:eb:30:48:d7:99:34:e7:29:
95:c4:2d:08:f3:51:e5:72:45:a2:ca:dc:37:cd:45:
fd:4b:b3:86:c9:0c:3c:59:a4:3f:b3:96:da:87:64:
dc:8e:52:0b:ae:6b:99:4f:64:e8:36:45:c5:af:73:
1e:6c:72:cb:c5:38:3b:f6:84:09:34:ec:f6:ed:74:
16:65:59:f4:44:5d:cf:01:92:ca:30:b6:d4:a0:db:
13:ac:d8:fb:13:78:3a:aa:32:05:91:db:24:70:2c:
22:1d:94:44:fe:48:14:89:16:a0:74:4b:80:28:06:
6f:50:58:a6:f3:60:a5:44:eb:6b:8a:5c:34:b6:cb:
c5:f4:49:81:fe:86:92:7f:82:0d:07:6f:2e:ae:90:
0d:3f:aa:80:17:51:a0:4c:e2:9c:33:8f:0c:8a:ac:
b2:5c:c1:b8:59:30:71:7c:01:fe:8d:06:5d:ee:5b:
91:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7C:B3:5A:E8:04:29:CE:1C:CD:44:27:3B:BE:A3:57:71:E1:DD:3D
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS139571.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:12:ff:7b:85:f1:bf:ec:2c:c9:1a:98:27:20:93:90:ee:e0:
47:11:13:c4:ac:db:3d:80:67:0d:ba:57:1b:65:c7:fe:00:3c:
4a:2b:44:a6:25:4b:87:a1:f7:85:c8:2f:36:f4:23:7b:9e:c2:
94:97:93:89:d4:fd:e8:44:f7:bc:89:87:6f:7d:00:66:7c:d1:
21:af:9b:b9:02:11:bd:b2:53:ac:d2:de:1a:f1:af:80:1c:bc:
95:a7:c5:b7:9e:29:20:a3:05:b3:2f:57:24:c0:7c:dd:e8:b4:
cf:fe:43:4e:d8:9c:df:0d:93:7d:e9:1b:04:ac:9a:1c:56:eb:
aa:d8:0d:95:66:3e:a5:5e:21:51:6e:93:2b:d3:79:0c:0b:52:
08:54:99:c2:a9:3a:7a:4a:bc:53:9f:bd:c4:53:0c:ad:a9:7c:
89:52:cb:a3:45:e8:ef:66:09:89:5d:0b:89:f5:b3:a8:06:b9:
8c:9e:35:9c:8a:d2:e1:43:49:42:c5:0f:99:08:ba:c9:a1:c7:
bc:9c:86:15:33:78:ac:9c:76:55:8d:65:d7:81:0e:7a:92:54:
79:30:c3:43:99:6a:ed:3a:8c:d0:cd:c5:22:95:57:86:35:26:
e7:0f:1b:2e:a5:4f:13:ce:26:e4:42:f0:75:b7:37:ed:dc:96:
84:c1:ec:0d
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUU4yyxuzNgO7mb7N6m/rl6wTF454wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwOTA4MDY0NDA3WhcNMjMwOTA3MDY0OTA3
WjAzMTEwLwYDVQQDEyhDMDdDQjM1QUU4MDQyOUNFMUNDRDQ0MjczQkJFQTM1Nzcx
RTFERDNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dTCDCLpMDFJ
KaX7zdwks7mrYl5hJxSg8GfeBYrfg5/fHfKGPxM6DYs5qHpHWqe59g3TGmFTF4T0
yQ9nzCBnCfSk11I1BhVM2fNpjZ3cMXyS6zBI15k05ymVxC0I81HlckWiytw3zUX9
S7OGyQw8WaQ/s5bah2TcjlILrmuZT2ToNkXFr3MebHLLxTg79oQJNOz27XQWZVn0
RF3PAZLKMLbUoNsTrNj7E3g6qjIFkdskcCwiHZRE/kgUiRagdEuAKAZvUFim82Cl
ROtrilw0tsvF9EmB/oaSf4INB28urpANP6qAF1GgTOKcM48MiqyyXMG4WTBxfAH+
jQZd7luRjwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFMB8s1roBCnOHM1EJzu+o1dx
4d09MB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMC9BUzEzOTU3MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANh6uzANBgkqhkiG9w0BAQsFAAOC
AQEAshL/e4Xxv+wsyRqYJyCTkO7gRxETxKzbPYBnDbpXG2XH/gA8SitEpiVLh6H3
hcgvNvQje57ClJeTidT96ET3vImHb30AZnzRIa+buQIRvbJTrNLeGvGvgBy8lafF
t54pIKMFsy9XJMB83ei0z/5DTtic3w2TfekbBKyaHFbrqtgNlWY+pV4hUW6TK9N5
DAtSCFSZwqk6ekq8U5+9xFMMral8iVLLo0Xo72YJiV0LifWzqAa5jJ41nIrS4UNJ
QsUPmQi6yaHHvJyGFTN4rJx2VY1l14EOepJUeTDDQ5lq7TqM0M3FIpVXhjUm5w8b
LqVPE84m5ELwdbc37dyWhMHsDQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org