Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS272011.roa
File: AS272011.roa (raw, json)
Hash identifier: OhZFArg6rTHvFcOhY7btwhW3/IG/izELRWQu2ui0S2g=
Subject key identifier: 0A:78:BA:76:2D:E2:2F:1C:4A:59:16:23:05:78:77:FA:E0:F2:59:D4
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 52C25F36FCE79590EE1320F26019B67B496A4CEC
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS272011.roa
Signing time: Thu 08 Sep 2022 06:49:07 +0000
ROA not before: Thu 08 Sep 2022 06:44:07 +0000
ROA not after: Thu 07 Sep 2023 06:49:07 +0000
asID: 272011
IP address blocks: 216.122.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c2:5f:36:fc:e7:95:90:ee:13:20:f2:60:19:b6:7b:49:6a:4c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Sep 8 06:44:07 2022 GMT
Not After : Sep 7 06:49:07 2023 GMT
Subject: CN=0A78BA762DE22F1C4A591623057877FAE0F259D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:43:30:d9:66:25:c5:b2:31:a5:ad:75:21:
33:27:2c:e4:12:02:e3:12:af:9f:96:cc:41:34:9e:
78:94:1c:0f:67:9e:64:b1:77:6f:80:07:d0:8a:c0:
8f:cb:0d:10:5e:55:77:f4:d6:1c:24:9d:55:4f:fe:
6f:46:48:f4:94:2f:4c:2f:ca:dc:7b:0e:20:c3:aa:
c6:c0:fe:f0:80:1b:70:b5:fd:11:ce:7f:ea:84:cd:
9d:dc:43:a8:0f:80:6c:14:88:6c:2d:64:5a:d6:be:
46:23:d3:26:ef:f5:d2:9c:67:8f:ab:71:d8:46:c1:
12:7e:13:54:87:58:41:a4:65:60:b8:a2:19:25:68:
5b:00:ff:7f:45:48:77:72:57:6a:30:46:f4:84:69:
ea:d1:01:57:f1:a7:1a:02:b2:bc:84:ee:6f:40:3e:
80:14:b9:b7:ae:90:1d:4f:1e:cc:41:b1:73:14:a2:
f6:e9:27:60:df:76:16:c3:a1:72:a1:d4:25:92:4f:
49:8e:74:d4:ea:d7:b2:f8:63:d9:8b:89:19:98:db:
da:7e:1b:09:d8:c0:8e:fa:8d:81:9a:ab:a6:92:46:
04:1a:83:a8:d7:f3:62:cb:4e:60:9a:42:0c:c2:b4:
63:57:d3:61:ec:74:41:1a:93:86:ca:39:63:5e:c7:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:78:BA:76:2D:E2:2F:1C:4A:59:16:23:05:78:77:FA:E0:F2:59:D4
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS272011.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.181.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:51:3b:aa:5b:64:d3:a9:4e:44:77:8a:a1:20:11:9b:d8:d9:
80:a5:d3:bb:c1:c8:5d:cd:f0:b3:fd:ca:4e:9e:65:be:50:35:
70:6e:98:49:85:a8:1d:95:96:c0:67:a6:22:e6:92:ca:bc:e9:
d0:62:d0:bc:45:68:b8:50:5b:f0:99:ed:4b:79:63:ff:42:f1:
dc:51:19:48:a9:ab:a8:cf:17:58:2f:51:eb:06:2e:73:f9:90:
95:19:1d:1a:a0:e1:a6:84:75:d3:3c:ac:53:a5:e8:34:49:51:
27:36:06:bf:26:69:61:c6:e3:45:55:6d:d1:37:a9:bd:42:bb:
ea:d4:32:f4:8a:9b:78:ce:e5:0e:c7:ec:b5:2a:6b:27:b6:53:
55:a9:34:02:79:7f:29:41:f5:47:0f:2c:99:a6:25:7a:0b:ee:
08:ad:7c:98:0c:f5:1d:53:24:26:53:76:8b:53:07:d7:37:c1:
1c:53:6c:17:c3:2e:02:f9:a7:0e:b9:a8:12:00:88:3b:70:cc:
b7:93:05:15:98:53:d9:03:0a:54:30:84:1f:b1:b2:b3:d7:3b:
b4:be:f5:7f:97:8e:30:7a:88:18:cf:f2:49:3a:b4:fa:e2:ee:
ba:ab:1b:bd:fa:80:eb:6f:94:7e:cb:69:5b:06:dc:99:c0:53:
5b:c8:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org