Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS20454.roa
File: AS20454.roa (raw, json)
Hash identifier: gGKqN2u4KYu5WUqjQPrt7CFtDpS7oUN7GnfBlIirR0I=
Subject key identifier: FE:2B:97:05:60:3A:44:0F:9A:08:16:0D:E6:D5:07:A6:D8:2D:77:10
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 1F7E733211C9D426936A67001F29FFE52B6293BB
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS20454.roa
Signing time: Mon 31 Oct 2022 17:07:53 +0000
ROA not before: Mon 31 Oct 2022 17:02:53 +0000
ROA not after: Mon 30 Oct 2023 17:07:53 +0000
asID: 20454
IP address blocks: 206.206.65.0/24 maxlen: 24
216.122.165.0/24 maxlen: 24
216.122.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:7e:73:32:11:c9:d4:26:93:6a:67:00:1f:29:ff:e5:2b:62:93:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Oct 31 17:02:53 2022 GMT
Not After : Oct 30 17:07:53 2023 GMT
Subject: CN=FE2B9705603A440F9A08160DE6D507A6D82D7710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:14:3f:71:5f:95:eb:8a:28:71:57:74:03:0c:
0a:39:35:14:1c:86:bc:7a:6d:ec:ac:f4:88:dd:8a:
d5:7c:bb:01:56:2b:c2:c4:ea:2f:0b:b3:5d:88:f0:
9e:8c:d8:9b:b4:c2:e8:33:41:15:cb:78:d3:37:d4:
f6:82:50:e0:ff:cf:db:2c:78:b4:09:99:9e:bb:1f:
31:75:5c:a4:e8:c0:f3:50:5f:a8:99:36:61:be:02:
7d:83:43:11:17:d3:2a:d9:e8:f7:d0:f9:9a:d9:d5:
46:6c:05:20:9f:1c:68:c1:85:0d:15:f6:5e:d3:d9:
5d:a7:fe:9b:c0:33:d2:7d:ab:6f:d5:ee:ac:a0:0b:
49:ea:98:35:fc:0a:08:60:66:e1:84:11:d0:0f:56:
23:25:fd:a0:05:50:1e:86:c1:95:a5:e6:fc:47:39:
e5:8e:cf:b9:4f:70:5a:09:03:6a:0c:26:4d:d5:46:
f4:8e:45:e9:55:f2:15:69:16:2b:32:e2:67:0c:54:
22:97:34:b1:17:23:28:9b:a2:6f:d1:81:1d:9e:7f:
42:61:8b:55:dd:18:3b:e5:44:b4:61:c3:66:7c:2b:
00:08:8a:28:78:74:bb:42:49:2e:52:2c:5f:f7:55:
54:b6:1d:d1:bf:0a:46:1a:14:9b:21:eb:4a:2c:d8:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2B:97:05:60:3A:44:0F:9A:08:16:0D:E6:D5:07:A6:D8:2D:77:10
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS20454.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.65.0/24
216.122.165.0/24
216.122.187.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b4:94:b8:cb:b4:9e:44:04:4c:9b:31:5e:d2:7e:cc:0e:b0:
0d:29:06:6b:cc:a2:a3:b1:73:c8:1b:17:13:31:61:29:78:a2:
61:fd:f4:ab:b2:6b:66:a2:8d:58:d8:95:58:bd:1f:b9:5a:48:
52:3e:e4:97:51:1b:84:e6:73:f7:db:ea:90:47:7a:bc:bd:f4:
e9:09:14:56:9d:23:83:f3:2d:7a:2f:e4:0b:22:37:1e:a3:29:
ba:c6:4c:1e:ff:79:80:00:25:93:0d:cd:23:2a:b9:96:c9:48:
fe:66:c5:34:7f:ae:4f:ec:0a:fd:dc:3a:e2:14:5c:76:6e:20:
fc:95:99:69:8b:31:b9:ca:3b:47:bf:7f:b5:e4:ca:22:46:9b:
45:26:c4:1f:fc:47:d5:b6:b7:b0:a1:bb:47:9d:e6:ba:25:89:
92:44:dd:80:b5:7c:74:f2:89:4d:7d:d9:c1:36:ba:47:74:b6:
b3:33:68:3a:de:05:cb:55:59:bd:0c:b6:24:53:39:66:2e:fd:
41:86:1d:ba:cb:12:6e:c0:bb:65:e0:3f:94:22:34:59:52:cd:
7e:9d:c4:06:d6:e5:79:98:ec:dc:96:ce:cd:0c:13:99:03:f0:
18:29:68:53:4d:15:db:94:08:c5:d4:1a:2a:48:4c:a8:e5:d9:
11:b8:bd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org