Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: 958EoQ8xSywnOV2XIPGTam8hiIEDVk5dOiUbbUjP+g4=
Subject key identifier: BD:A9:F7:B8:26:06:09:20:4C:59:97:3D:32:5F:D5:63:97:EE:9C:81
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 26F23A6B0510D5F9D389C45C9872A9B879897AF8
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS212238.roa
Signing time: Tue 15 Nov 2022 13:42:45 +0000
ROA not before: Tue 15 Nov 2022 13:37:45 +0000
ROA not after: Tue 14 Nov 2023 13:42:45 +0000
asID: 212238
IP address blocks: 206.206.85.0/24 maxlen: 24
216.122.163.0/24 maxlen: 24
216.122.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f2:3a:6b:05:10:d5:f9:d3:89:c4:5c:98:72:a9:b8:79:89:7a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Nov 15 13:37:45 2022 GMT
Not After : Nov 14 13:42:45 2023 GMT
Subject: CN=BDA9F7B8260609204C59973D325FD56397EE9C81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:1b:e5:39:15:61:65:e9:b5:15:f2:8a:4f:
c4:cb:00:cf:0e:5b:41:91:ad:4b:60:11:fe:82:4f:
2a:09:a4:e5:60:0b:1c:17:fe:9b:6b:74:54:42:eb:
b4:c6:bc:0f:cd:24:9b:48:93:e1:4b:37:10:3f:61:
87:31:ed:d7:8a:75:2f:b9:17:7f:b9:d3:1c:59:1c:
98:4d:76:89:3a:6a:52:96:68:8d:52:61:3d:bb:a0:
c5:b4:76:86:b4:f2:4a:a4:48:fd:bc:82:2d:3e:6e:
c8:23:40:83:77:8f:f4:92:87:86:7f:ef:49:44:17:
53:77:fb:f7:3a:b2:00:26:63:a0:70:07:12:d4:52:
54:ff:12:67:7b:1a:2d:e4:fc:42:45:13:d0:8f:09:
41:b6:58:b5:98:6a:0b:c7:9f:cb:cf:91:db:c0:7b:
5c:69:27:6d:60:8b:5e:fb:35:68:27:e6:c1:1a:d8:
15:4b:15:d3:34:b4:99:b1:a9:f3:03:87:f4:28:db:
66:db:b7:64:be:1e:86:f2:23:22:19:0b:ca:d0:b1:
05:bc:80:32:3f:ec:4f:24:dc:c2:d5:4f:57:91:da:
b4:26:f9:53:c2:68:1f:52:56:f8:d4:fc:4b:52:2e:
ab:55:d6:b6:87:4a:02:e2:63:0a:7d:66:e7:ee:d3:
7b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A9:F7:B8:26:06:09:20:4C:59:97:3D:32:5F:D5:63:97:EE:9C:81
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.85.0/24
216.122.163.0/24
216.122.189.0/24
Signature Algorithm: sha256WithRSAEncryption
46:82:ca:e4:9e:e2:f6:f3:fb:46:cd:a2:d6:0e:d4:25:cb:d4:
2d:66:ab:30:fe:e1:c4:c5:ea:9a:53:f5:2d:c0:7a:ed:de:f5:
b2:07:6f:97:92:a0:4f:77:12:b8:8c:f7:ed:4d:1e:99:91:ba:
b7:e3:fa:1e:58:b2:98:85:9d:b0:7b:1e:46:23:a9:09:4e:d5:
dc:b6:d7:45:d7:ba:19:1c:d9:3b:99:db:8c:42:85:86:73:fb:
be:81:8f:45:62:e5:6a:b5:50:b9:61:6e:59:6f:1d:93:37:e2:
7d:05:82:69:47:e6:21:56:eb:eb:c8:49:6a:83:3e:29:4f:15:
99:6b:35:2f:11:50:4e:6c:30:4f:d1:72:39:38:e1:38:07:ae:
fb:9e:05:15:79:60:ea:f0:61:86:16:1e:40:37:6e:86:c9:69:
e8:59:3d:dc:07:67:b9:35:89:6a:6c:ed:4f:b7:33:f9:42:e8:
67:6b:56:cd:35:7d:ec:b3:64:03:9a:aa:43:06:d2:95:20:e3:
a0:02:29:03:53:ee:0d:cc:6f:88:bf:6e:b4:1f:1b:d4:a9:da:
02:12:2f:b3:7a:e9:b8:b6:6a:9b:9b:0b:cd:ee:b4:90:f7:02:
a2:5d:c6:2c:00:64:fb:cf:d3:6d:e6:00:22:b1:fa:37:d8:b6:
8c:70:e6:96
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIUJvI6awUQ1fnTicRcmHKpuHmJevgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIxMTE1MTMzNzQ1WhcNMjMxMTE0MTM0MjQ1
WjAzMTEwLwYDVQQDEyhCREE5RjdCODI2MDYwOTIwNEM1OTk3M0QzMjVGRDU2Mzk3
RUU5QzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuAb5TkVYWXp
tRXyik/EywDPDltBka1LYBH+gk8qCaTlYAscF/6ba3RUQuu0xrwPzSSbSJPhSzcQ
P2GHMe3XinUvuRd/udMcWRyYTXaJOmpSlmiNUmE9u6DFtHaGtPJKpEj9vIItPm7I
I0CDd4/0koeGf+9JRBdTd/v3OrIAJmOgcAcS1FJU/xJnexot5PxCRRPQjwlBtli1
mGoLx5/Lz5HbwHtcaSdtYIte+zVoJ+bBGtgVSxXTNLSZsanzA4f0KNtm27dkvh6G
8iMiGQvK0LEFvIAyP+xPJNzC1U9Xkdq0JvlTwmgfUlb41PxLUi6rVda2h0oC4mMK
fWbn7tN7dwIDAQABo4ICizCCAocwHQYDVR0OBBYEFL2p97gmBgkgTFmXPTJf1WOX
7pyBMB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMC9BUzIxMjIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAM7OVQMEANh6owMEANh6vTANBgkq
hkiG9w0BAQsFAAOCAQEARoLK5J7i9vP7Rs2i1g7UJcvULWarMP7hxMXqmlP1LcB6
7d71sgdvl5KgT3cSuIz37U0emZG6t+P6HliymIWdsHseRiOpCU7V3LbXRde6GRzZ
O5nbjEKFhnP7voGPRWLlarVQuWFuWW8dkzfifQWCaUfmIVbr68hJaoM+KU8VmWs1
LxFQTmwwT9FyOTjhOAeu+54FFXlg6vBhhhYeQDduhslp6Fk93AdnuTWJamztT7cz
+ULoZ2tWzTV97LNkA5qqQwbSlSDjoAIpA1PuDcxviL9utB8b1KnaAhIvs3rpuLZq
m5sLze60kPcCol3GLABk+8/TbeYAIrH6N9i2jHDmlg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:19 2023 by rpki-client on console-fra.rpki-client.org