Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS32244.roa
File: AS32244.roa (raw, json)
Hash identifier: 8ZKU4Y0YTL7xwrlah0wGpXZnZuyl7MWmn/gGnHnX+ms=
Subject key identifier: D4:B5:5D:57:32:46:73:6F:74:CA:2D:22:46:63:AD:7B:96:C2:DB:89
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 268501412E6D669D6FD167154C421D6D3CF3CB6A
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS32244.roa
Signing time: Thu 08 Sep 2022 06:49:07 +0000
ROA not before: Thu 08 Sep 2022 06:44:07 +0000
ROA not after: Thu 07 Sep 2023 06:49:07 +0000
asID: 32244
IP address blocks: 206.206.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:85:01:41:2e:6d:66:9d:6f:d1:67:15:4c:42:1d:6d:3c:f3:cb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Sep 8 06:44:07 2022 GMT
Not After : Sep 7 06:49:07 2023 GMT
Subject: CN=D4B55D573246736F74CA2D224663AD7B96C2DB89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:17:8f:25:97:04:40:57:b7:b8:34:96:56:
30:79:59:93:70:f5:aa:5b:f7:c9:af:23:ad:4f:45:
b0:c4:0f:bd:b0:e3:02:c4:55:41:b1:2d:76:dd:fe:
67:5a:1a:18:c3:8e:a2:dc:db:0b:56:6a:dd:c8:97:
54:5e:e5:07:fe:b1:8d:8f:04:70:55:0f:1b:32:e3:
46:fb:5c:05:4e:df:6c:64:27:28:d0:00:ad:a1:34:
60:1d:b5:ea:fb:62:ba:8c:f3:66:dd:58:31:d7:89:
a6:01:0b:1f:c2:be:88:ca:a3:b9:08:75:0e:8b:23:
76:b2:39:f3:6f:56:60:e9:90:c2:af:62:35:0c:ea:
a5:c1:c3:66:5d:f8:79:28:ce:08:a1:69:5e:79:7e:
ae:11:43:3a:e8:28:71:a5:70:b3:20:41:2a:78:bb:
4d:0c:b7:c2:ab:99:e9:c8:a9:66:83:22:09:2c:23:
02:43:c2:d4:7d:59:60:79:0c:9d:8e:f1:8d:17:b8:
eb:76:b3:6d:a9:c4:4e:bd:2b:9b:61:fa:4f:ea:52:
81:2b:3f:be:cd:fc:c0:55:d7:32:0a:e3:0b:19:2d:
92:7f:d4:10:b1:a0:75:34:b2:32:9a:b3:81:5a:7b:
be:70:50:03:0a:c3:15:a6:e6:62:03:63:96:6e:92:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B5:5D:57:32:46:73:6F:74:CA:2D:22:46:63:AD:7B:96:C2:DB:89
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS32244.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.100.0/22
Signature Algorithm: sha256WithRSAEncryption
48:47:90:4d:0a:d1:75:bb:b8:3d:19:02:6b:71:f4:dd:ab:db:
e7:a8:79:65:ee:fa:83:82:ed:de:e9:fc:0a:ae:3f:5c:16:58:
b4:99:93:63:cc:95:f2:b8:4f:d5:59:a9:f0:b4:b4:d2:f4:96:
4f:9d:30:23:a3:7e:4d:a4:db:f1:81:38:dd:31:cf:46:21:51:
ba:18:db:b7:ef:81:4f:6b:c0:65:b2:b4:a7:e6:28:ac:8a:30:
ec:c8:cd:64:f4:28:ad:0e:8b:43:e9:0e:ea:74:d4:fd:af:20:
82:75:2e:d8:02:44:c6:d8:4e:75:b4:f4:ca:b4:26:a4:ef:4d:
a7:9a:9d:2c:5f:21:46:2f:0b:b9:6c:2d:cd:8a:3e:0f:48:18:
9f:30:b0:df:14:eb:ef:1c:a9:5c:f0:1c:6d:b7:7a:1d:2f:9f:
ae:20:74:25:95:68:8e:63:56:94:ec:d1:34:a8:91:77:d2:25:
1b:4e:ba:d7:7c:26:28:85:09:8c:72:61:83:6a:59:31:c0:cf:
f8:11:7c:cd:c8:32:94:54:11:2c:23:3e:6a:93:17:9c:ce:ea:
af:d6:be:8b:8c:70:de:15:60:3e:fb:b4:e0:53:2e:28:e3:05:
c9:0e:4a:af:c6:23:eb:2e:60:6a:1c:36:d6:a7:57:90:71:4f:
73:22:8c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org