Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS398779.roa
File: AS398779.roa (raw, json)
Hash identifier: R241gnOh+10xIvtu2qVXeIU3GSkScIoCS0J8jefbKe8=
Subject key identifier: 38:B2:56:84:E0:78:9C:6B:B8:C7:1C:D6:45:6C:18:C3:96:5B:92:B4
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 70E4770F7C44E70DCDAC6B9D905CE5AA29AD9246
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS398779.roa
Signing time: Thu 08 Sep 2022 06:49:07 +0000
ROA not before: Thu 08 Sep 2022 06:44:07 +0000
ROA not after: Thu 07 Sep 2023 06:49:07 +0000
asID: 398779
IP address blocks: 216.122.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e4:77:0f:7c:44:e7:0d:cd:ac:6b:9d:90:5c:e5:aa:29:ad:92:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Sep 8 06:44:07 2022 GMT
Not After : Sep 7 06:49:07 2023 GMT
Subject: CN=38B25684E0789C6BB8C71CD6456C18C3965B92B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:86:d3:ea:f1:80:de:97:23:07:17:d9:66:90:
47:c3:b5:9d:6b:9e:c3:f3:2c:bd:70:3c:5f:68:29:
7e:40:b6:be:c2:28:ed:32:20:f8:a8:ea:6f:cb:82:
0b:df:35:ac:f7:8f:39:cf:32:21:04:66:46:9c:81:
6a:0b:28:a4:57:d6:1d:28:f9:c3:df:d8:7a:e2:a5:
b2:2c:07:c9:77:e6:85:79:83:5e:0e:0b:f0:74:c1:
68:d3:92:88:00:93:ee:ae:03:38:85:ff:60:70:ab:
55:7d:9b:2f:cc:a1:4d:72:9d:55:d2:e1:d9:90:df:
06:64:b9:a9:82:a3:ae:cc:ff:88:8f:f7:4b:11:68:
3d:fc:b1:d7:f1:e4:b2:9b:ac:77:e8:27:9a:dc:8e:
c5:43:e0:c9:df:17:80:43:61:44:7c:2c:ff:71:8d:
98:49:ad:a8:ce:09:65:d5:41:20:f8:cb:60:66:14:
40:f1:3a:02:43:63:47:14:1f:52:cf:09:48:3d:8f:
50:72:c7:ed:ec:37:57:eb:fe:37:b9:d8:e8:44:ee:
96:55:0f:74:87:26:89:78:a1:5c:da:54:34:01:ad:
85:fb:f4:ef:25:99:ec:05:4d:03:4d:06:c8:38:9b:
3b:e8:a2:62:39:46:2b:a1:11:cf:d1:ae:18:8e:ce:
4d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B2:56:84:E0:78:9C:6B:B8:C7:1C:D6:45:6C:18:C3:96:5B:92:B4
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS398779.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.165.0/24
Signature Algorithm: sha256WithRSAEncryption
66:4e:cd:8e:a5:cf:3e:59:34:3d:4a:f0:d8:ac:2f:cf:44:57:
80:58:aa:d2:db:3f:50:dd:61:d4:3a:59:25:98:73:ae:41:5b:
70:93:12:e9:76:6c:8f:15:ad:b2:05:c8:a0:3e:62:ca:43:0e:
71:1d:87:5d:56:8f:bd:17:62:e1:28:82:5b:16:b8:c0:54:82:
fa:68:a8:d6:21:27:df:57:59:21:9a:cb:2b:78:96:b1:63:ac:
76:2c:d3:b5:ea:ee:57:b2:fa:f2:03:cb:75:6d:d5:86:c2:5a:
24:43:8e:93:b3:5b:ea:d2:6f:18:c8:3c:52:dd:cf:d3:d4:6e:
b9:b9:ba:56:4e:fc:54:7a:37:26:6d:fb:12:a2:79:02:eb:4f:
79:37:c2:a3:6d:92:b2:cb:56:90:09:f3:95:ff:ec:09:b5:81:
63:6b:ec:d0:62:62:c1:cf:4f:6b:5c:f0:8d:01:98:dd:f6:d2:
6e:7d:a7:32:f1:00:7b:ea:25:f9:3a:c9:3d:a1:65:f4:9b:83:
2e:a0:7f:41:82:dc:17:14:df:08:97:9f:9d:24:8d:79:d4:8e:
55:42:7e:c7:73:3c:6e:bb:75:c3:71:8d:ca:1f:8f:49:50:c1:
c5:e6:70:f7:b2:34:9f:9c:e1:74:90:82:70:3f:de:9d:bc:17:
f3:20:e8:9d
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUcOR3D3xE5w3NrGudkFzlqimtkkYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwOTA4MDY0NDA3WhcNMjMwOTA3MDY0OTA3
WjAzMTEwLwYDVQQDEygzOEIyNTY4NEUwNzg5QzZCQjhDNzFDRDY0NTZDMThDMzk2
NUI5MkI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YbT6vGA3pcj
BxfZZpBHw7Wda57D8yy9cDxfaCl+QLa+wijtMiD4qOpvy4IL3zWs9485zzIhBGZG
nIFqCyikV9YdKPnD39h64qWyLAfJd+aFeYNeDgvwdMFo05KIAJPurgM4hf9gcKtV
fZsvzKFNcp1V0uHZkN8GZLmpgqOuzP+Ij/dLEWg9/LHX8eSym6x36Cea3I7FQ+DJ
3xeAQ2FEfCz/cY2YSa2ozgll1UEg+MtgZhRA8ToCQ2NHFB9SzwlIPY9Qcsft7DdX
6/43udjoRO6WVQ90hyaJeKFc2lQ0Aa2F+/TvJZnsBU0DTQbIOJs76KJiOUYroRHP
0a4Yjs5NPQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFDiyVoTgeJxruMcc1kVsGMOW
W5K0MB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMC9BUzM5ODc3OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANh6pTANBgkqhkiG9w0BAQsFAAOC
AQEAZk7NjqXPPlk0PUrw2Kwvz0RXgFiq0ts/UN1h1DpZJZhzrkFbcJMS6XZsjxWt
sgXIoD5iykMOcR2HXVaPvRdi4SiCWxa4wFSC+mio1iEn31dZIZrLK3iWsWOsdizT
teruV7L68gPLdW3VhsJaJEOOk7Nb6tJvGMg8Ut3P09Ruubm6Vk78VHo3Jm37EqJ5
AutPeTfCo22SsstWkAnzlf/sCbWBY2vs0GJiwc9Pa1zwjQGY3fbSbn2nMvEAe+ol
+TrJPaFl9JuDLqB/QYLcFxTfCJefnSSNedSOVUJ+x3M8brt1w3GNyh+PSVDBxeZw
97I0n5zhdJCCcD/enbwX8yDonQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org