Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: wBCsU/J9PH8qAK+QeRfCAzOgG5atYHQZEIROnfwpM0A=
Subject key identifier: A5:25:E4:CA:98:59:4C:0E:F1:4E:52:C8:02:48:42:C4:EE:50:29:0E
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 0BDFD059481EC29B48B779A5BA5EC9348435736B
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS16509.roa
Signing time: Thu 08 Sep 2022 06:49:06 +0000
ROA not before: Thu 08 Sep 2022 06:44:06 +0000
ROA not after: Thu 07 Sep 2023 06:49:06 +0000
asID: 16509
IP address blocks: 216.122.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:df:d0:59:48:1e:c2:9b:48:b7:79:a5:ba:5e:c9:34:84:35:73:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Sep 8 06:44:06 2022 GMT
Not After : Sep 7 06:49:06 2023 GMT
Subject: CN=A525E4CA98594C0EF14E52C8024842C4EE50290E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:ae:30:2a:a4:99:30:52:a9:51:c2:77:d7:
1d:8d:97:22:53:c1:cb:6f:e4:74:58:b0:dd:59:af:
04:de:27:8b:14:fb:5b:f8:20:47:e6:5d:c5:6c:69:
d7:0a:27:b6:ba:39:fd:d2:54:98:95:31:a4:46:66:
f7:f8:6d:57:56:ad:15:26:4f:1d:a8:1b:32:73:13:
0b:e6:3a:f0:20:c9:65:b8:d7:a2:ff:bb:68:ea:8f:
71:29:8c:9e:2b:5e:4c:39:02:fc:95:d0:df:5e:8d:
0c:1f:fa:50:97:0a:18:15:8b:a2:dc:9e:ad:7b:68:
47:91:b2:6b:ea:b2:fe:37:a7:8a:cb:19:24:5e:fe:
16:8f:1a:73:e1:f6:0e:dc:07:31:70:2f:b5:0e:52:
23:7b:2b:2e:26:b5:0d:8d:42:24:59:28:7b:ea:36:
aa:8e:8e:e0:8c:54:94:c4:84:2b:58:a1:8b:b7:36:
ea:99:47:5e:cc:0a:e1:a6:82:0d:b9:54:89:7a:1d:
98:64:a5:c3:d8:c2:20:f2:8c:57:5d:42:d0:43:fd:
25:9f:bc:2d:72:08:d1:2c:53:fc:e1:17:4c:13:5e:
b4:86:86:fe:17:bd:25:b7:a3:13:3f:8b:a0:25:67:
0f:eb:ab:c1:a0:80:92:d3:f5:4a:bb:08:59:8f:cf:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:25:E4:CA:98:59:4C:0E:F1:4E:52:C8:02:48:42:C4:EE:50:29:0E
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.176.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:23:7a:e8:92:2e:ab:39:85:b9:43:d2:2a:61:2e:cd:7d:8e:
17:f1:31:2b:ef:52:e5:83:e0:e4:50:f5:3e:56:b1:60:d5:ca:
1b:68:28:36:f0:87:e3:c5:f4:9a:2c:70:93:1a:26:12:49:ad:
96:80:68:47:41:ef:2e:cb:b6:e5:a2:fd:b1:39:51:70:62:74:
51:af:09:02:05:7d:0a:ba:7d:69:c5:10:4f:05:49:9b:1f:7c:
3f:61:39:2d:e4:82:8a:87:a2:fb:67:54:f5:d2:f5:c2:58:2f:
41:2a:11:10:72:3e:38:92:2f:42:c1:ef:33:c4:42:a0:69:66:
d9:09:fe:74:bc:b6:43:42:25:04:c9:de:2b:f4:13:4d:b5:65:
6c:72:7e:ee:c1:a4:85:42:0f:26:3a:cc:39:09:3e:06:74:7e:
c5:e8:47:6a:6a:50:49:99:03:f9:c9:5f:b1:c2:4a:6a:68:e7:
28:e7:92:b5:41:6a:bb:b7:ab:71:9b:2c:40:47:fb:ba:e5:4e:
2e:6c:87:24:b6:ad:03:0c:a2:5d:8e:cd:5b:38:ea:a9:c6:1f:
96:8d:9e:65:0c:9b:89:86:99:ab:b4:81:b9:b1:0d:a0:59:eb:
a9:e8:d3:42:62:ea:f8:54:1b:1b:38:74:7f:0a:5e:61:fe:a0:
3c:8d:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org