Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS211585.roa
File: AS211585.roa (raw, json)
Hash identifier: pmv8Y+nbJWNIyifg7gnTKN0K9hevshdYwJ2YSFiXU4A=
Subject key identifier: AF:02:69:2D:C0:02:E7:1B:CE:88:31:30:C5:A9:1B:29:ED:53:FF:53
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 197262EA6D709BED167D189BC3B9A1A00CCD7974
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS211585.roa
Signing time: Thu 08 Sep 2022 06:49:09 +0000
ROA not before: Thu 08 Sep 2022 06:44:09 +0000
ROA not after: Thu 07 Sep 2023 06:49:09 +0000
asID: 211585
IP address blocks: 206.206.96.0/22 maxlen: 24
206.206.116.0/22 maxlen: 24
216.122.185.0/24 maxlen: 24
216.122.186.0/24 maxlen: 24
216.122.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:72:62:ea:6d:70:9b:ed:16:7d:18:9b:c3:b9:a1:a0:0c:cd:79:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Sep 8 06:44:09 2022 GMT
Not After : Sep 7 06:49:09 2023 GMT
Subject: CN=AF02692DC002E71BCE883130C5A91B29ED53FF53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:23:3f:1d:c3:0c:0a:bf:c9:7a:07:13:44:
3d:29:43:8a:72:54:01:ac:ff:15:86:1d:c6:de:60:
79:20:d1:76:07:7c:91:bf:d7:af:60:55:80:4b:d7:
0c:d8:1f:6e:69:e5:14:2b:cc:7e:19:29:fc:2c:af:
8f:42:2c:c6:4e:7e:db:d2:07:1b:af:3d:18:1a:67:
a3:42:c2:fc:9b:d3:4c:fd:30:c3:d5:84:30:1b:2f:
16:3e:70:99:a9:51:9a:db:f9:3a:d5:33:fc:d5:3b:
7e:27:de:09:f0:67:3d:37:f6:42:b6:4f:1e:0f:24:
58:0d:a1:6b:4e:40:93:58:ba:af:f9:b0:cd:00:25:
fb:2a:2f:14:f5:78:2d:54:3d:eb:13:2e:31:ca:bd:
af:9f:f0:1b:b5:0a:8f:42:f9:94:ff:40:86:a0:21:
86:13:d2:13:72:ad:9d:5f:94:ba:45:8c:8e:3b:4b:
70:0a:14:f4:2a:4f:21:ff:9d:1e:b2:89:c8:88:5b:
4f:d3:29:1f:5f:c1:89:c9:f2:74:18:e3:55:b4:5e:
5b:6c:a9:92:9b:de:78:6e:69:ab:19:e0:89:74:87:
4e:0d:19:67:d9:c5:42:d7:19:bd:ba:6e:f4:31:53:
ef:a6:d3:14:a1:c1:b4:3d:7f:7e:cc:fb:4d:00:cf:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:02:69:2D:C0:02:E7:1B:CE:88:31:30:C5:A9:1B:29:ED:53:FF:53
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS211585.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.96.0/22
206.206.116.0/22
216.122.185.0-216.122.186.255
216.122.190.0/24
Signature Algorithm: sha256WithRSAEncryption
55:31:9d:18:d7:ae:51:4d:9a:7e:22:eb:4e:82:4d:b9:4d:55:
f4:9a:85:21:3f:21:3e:54:92:63:cb:31:e5:9b:79:ff:90:20:
4a:b9:6f:30:63:7e:3a:55:92:b7:32:ab:cc:60:73:d3:b9:d4:
58:ac:17:62:c3:55:ee:57:7a:6b:45:90:8f:16:48:26:91:81:
e1:a5:1c:fd:29:5a:de:e1:cc:71:61:71:fe:a6:60:bf:6f:bd:
32:52:98:23:09:54:61:ae:d3:4b:13:c9:cc:d2:4b:0b:83:4c:
c1:ec:40:6a:fb:b6:2f:a1:ec:82:e1:7b:e4:a4:61:cd:e6:c3:
88:a0:1a:48:b5:04:38:19:a9:a7:c1:ac:61:fe:37:ab:98:c1:
57:b3:95:8f:03:c5:fd:5a:8a:11:1e:8f:1c:ce:4b:86:5a:d1:
24:43:88:da:cd:73:4b:c2:55:54:6b:f0:d5:8c:3d:30:14:e6:
91:a1:4c:d9:a8:1b:35:c9:2c:12:40:25:e5:fb:58:ff:da:cb:
af:85:9d:87:1c:96:bf:1b:d6:92:8a:b1:e1:b1:c4:d8:76:8f:
2d:06:df:c5:1c:63:54:34:ec:f7:4b:ae:d7:22:66:27:ff:88:
5b:38:9f:d7:bc:d0:4e:60:51:d1:b6:cb:89:e0:f9:8f:9c:02:
62:1a:30:55
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIUGXJi6m1wm+0WfRibw7mhoAzNeXQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwOTA4MDY0NDA5WhcNMjMwOTA3MDY0OTA5
WjAzMTEwLwYDVQQDEyhBRjAyNjkyREMwMDJFNzFCQ0U4ODMxMzBDNUE5MUIyOUVE
NTNGRjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYIjPx3DDAq/
yXoHE0Q9KUOKclQBrP8Vhh3G3mB5INF2B3yRv9evYFWAS9cM2B9uaeUUK8x+GSn8
LK+PQizGTn7b0gcbrz0YGmejQsL8m9NM/TDD1YQwGy8WPnCZqVGa2/k61TP81Tt+
J94J8Gc9N/ZCtk8eDyRYDaFrTkCTWLqv+bDNACX7Ki8U9XgtVD3rEy4xyr2vn/Ab
tQqPQvmU/0CGoCGGE9ITcq2dX5S6RYyOO0twChT0Kk8h/50esonIiFtP0ykfX8GJ
yfJ0GONVtF5bbKmSm954bmmrGeCJdIdODRln2cVC1xm9um70MVPvptMUocG0PX9+
zPtNAM9mjwIDAQABo4ICmTCCApUwHQYDVR0OBBYEFK8CaS3AAucbzogxMMWpGynt
U/9TMB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMC9BUzIxMTU4NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAs7OYAMEAs7OdDAMAwQA2Hq5AwQA
2Hq6AwQA2Hq+MA0GCSqGSIb3DQEBCwUAA4IBAQBVMZ0Y165RTZp+IutOgk25TVX0
moUhPyE+VJJjyzHlm3n/kCBKuW8wY346VZK3MqvMYHPTudRYrBdiw1XuV3prRZCP
FkgmkYHhpRz9KVre4cxxYXH+pmC/b70yUpgjCVRhrtNLE8nM0ksLg0zB7EBq+7Yv
oeyC4XvkpGHN5sOIoBpItQQ4Gamnwaxh/jermMFXs5WPA8X9WooRHo8czkuGWtEk
Q4jazXNLwlVUa/DVjD0wFOaRoUzZqBs1ySwSQCXl+1j/2suvhZ2HHJa/G9aSirHh
scTYdo8tBt/FHGNUNOz3S67XImYn/4hbOJ/XvNBOYFHRtsuJ4PmPnAJiGjBV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org