Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS398465.roa
File: AS398465.roa (raw, json)
Hash identifier: Osu3S0js7PrbiIlKaAdwEj5pkO8Y4kerFz7rhutwOF0=
Subject key identifier: 3F:00:E6:77:B9:CE:66:BE:C1:16:58:5A:CC:51:C3:B5:DF:5F:28:8D
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 11AD0E71C5550894F292955206EEA58DECAE2D4C
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS398465.roa
Signing time: Sat 12 Nov 2022 14:21:34 +0000
ROA not before: Sat 12 Nov 2022 14:16:34 +0000
ROA not after: Sat 11 Nov 2023 14:21:34 +0000
asID: 398465
IP address blocks: 206.206.66.0/24 maxlen: 24
206.206.67.0/24 maxlen: 24
206.206.69.0/24 maxlen: 24
206.206.71.0/24 maxlen: 24
206.206.73.0/24 maxlen: 24
206.206.75.0/24 maxlen: 24
206.206.76.0/24 maxlen: 24
206.206.77.0/24 maxlen: 24
206.206.87.0/24 maxlen: 24
206.206.88.0/24 maxlen: 24
206.206.89.0/24 maxlen: 24
206.206.90.0/24 maxlen: 24
206.206.108.0/24 maxlen: 24
206.206.120.0/24 maxlen: 24
206.206.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ad:0e:71:c5:55:08:94:f2:92:95:52:06:ee:a5:8d:ec:ae:2d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Nov 12 14:16:34 2022 GMT
Not After : Nov 11 14:21:34 2023 GMT
Subject: CN=3F00E677B9CE66BEC116585ACC51C3B5DF5F288D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:47:0e:58:6d:18:f2:43:e7:78:c9:bd:ce:
ef:82:97:63:38:64:3a:43:82:cf:f9:73:9b:03:71:
9b:60:8f:58:04:36:22:99:74:7e:d4:bb:25:f4:a3:
13:a2:a9:6f:c8:ad:c7:42:eb:3d:45:a2:70:3f:60:
1b:bb:76:8d:11:5b:87:87:d0:3d:a5:78:32:fd:3f:
05:ab:89:b2:3b:18:e6:cf:4c:41:72:79:2e:62:be:
42:52:ff:96:58:d5:33:1e:ca:23:65:2c:ad:08:cc:
65:70:df:d8:99:bb:df:e4:b8:8c:92:eb:4a:47:9a:
70:3f:c9:75:6a:d4:f4:b8:f8:59:26:9c:8a:31:75:
b6:87:46:5e:fa:a4:67:24:d0:66:a0:ac:04:67:c0:
5f:08:54:db:f3:71:26:ca:2e:07:46:59:46:2c:78:
42:eb:fb:92:e3:f0:45:5b:d1:a3:be:be:fe:83:62:
70:17:18:9d:1e:7c:b9:51:7a:2e:88:bb:71:80:ed:
fe:db:91:48:3f:f5:de:a8:fe:ec:ed:96:6e:ce:1e:
25:c0:7c:9a:31:e6:8e:0b:79:a5:20:7a:13:f6:75:
c8:24:d4:91:c1:06:07:b8:e5:49:b7:81:3b:5f:a6:
8c:75:27:ff:81:db:e5:70:c5:0c:4a:64:01:0d:f4:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:00:E6:77:B9:CE:66:BE:C1:16:58:5A:CC:51:C3:B5:DF:5F:28:8D
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS398465.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.66.0/23
206.206.69.0/24
206.206.71.0/24
206.206.73.0/24
206.206.75.0-206.206.77.255
206.206.87.0-206.206.90.255
206.206.108.0/24
206.206.120.0/24
206.206.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ca:43:3c:3d:ad:a7:01:7f:0a:bd:1b:11:ab:b9:c6:cc:71:
a7:a5:1d:c4:30:53:35:b9:1b:42:21:7e:58:d8:b0:c6:cd:a2:
5e:f6:24:39:b7:9c:4e:a5:3b:44:5f:c3:9e:d2:dc:8f:b4:f8:
fd:01:4a:ee:19:6f:68:98:6c:91:96:9c:bb:9a:85:62:a7:3b:
a9:51:81:ca:63:f1:94:9c:0a:fa:25:76:af:1f:6e:8a:77:24:
fa:2d:e8:2b:a3:ec:de:86:2f:bf:2c:ec:c5:23:04:03:33:2a:
b9:d4:e6:02:f3:1a:2b:67:c0:8c:3b:6f:da:06:63:2a:67:63:
26:94:27:3c:d5:eb:a6:ec:af:d2:a6:b2:8a:20:01:5c:86:81:
bf:1b:a2:d2:80:9c:7b:b7:2c:06:f2:d5:1f:a2:dc:bc:3e:9a:
bb:8b:cb:60:9e:57:f0:66:f3:a4:10:47:87:f8:90:99:98:09:
75:d2:7d:4d:25:a7:f9:e7:07:ce:eb:80:86:7a:cc:6c:71:c5:
3b:f9:08:7c:dd:38:cd:f3:cf:e4:96:03:f4:a0:c7:67:db:3f:
d7:36:50:e6:17:c1:46:16:ff:3f:c6:7a:ad:9d:7f:75:17:75:
62:ff:1f:eb:a7:9f:0d:03:c9:dc:54:97:34:97:4b:ba:7c:aa:
7c:b2:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:19 2023 by rpki-client on console-fra.rpki-client.org