Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS400384.roa
File: AS400384.roa (raw, json)
Hash identifier: 9ng1GcjTNN8iOt1hGTmAnZT5il888Z+F6x90SRWv6v0=
Subject key identifier: 19:88:AF:73:70:50:9F:76:82:FA:32:8C:3C:BA:6E:65:93:70:AD:15
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 38DF8030D8C49E682985CC16328A5C06CAACE1B0
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS400384.roa
Signing time: Thu 08 Sep 2022 06:49:07 +0000
ROA not before: Thu 08 Sep 2022 06:44:07 +0000
ROA not after: Thu 07 Sep 2023 06:49:07 +0000
asID: 400384
IP address blocks: 216.122.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:df:80:30:d8:c4:9e:68:29:85:cc:16:32:8a:5c:06:ca:ac:e1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Sep 8 06:44:07 2022 GMT
Not After : Sep 7 06:49:07 2023 GMT
Subject: CN=1988AF7370509F7682FA328C3CBA6E659370AD15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:e3:db:48:87:8c:71:9e:29:96:7a:cb:81:
e8:97:22:8e:77:0e:9b:e9:a0:c9:3f:db:af:f1:02:
73:65:dd:ea:38:31:15:4a:19:82:3f:d1:60:f9:70:
7a:33:e8:1b:93:1b:bd:51:52:38:d6:c2:93:37:67:
a5:e0:fc:89:e6:c4:a4:ee:83:c0:7d:aa:b6:67:0f:
a7:d2:a6:ff:f8:17:31:42:43:a8:9d:53:a5:38:c8:
b8:5c:20:fb:c9:1d:18:d1:51:c8:6b:5b:e8:f8:8e:
48:58:46:0d:8b:53:ce:7a:b3:b8:30:37:c2:66:bb:
5c:50:e8:9f:a6:a9:91:4c:06:93:bb:f6:23:2b:cf:
8a:d5:52:f7:5f:41:8b:b5:d0:e1:61:22:4f:0f:33:
b0:49:6b:8b:49:fb:3a:ab:c5:b0:b6:a9:b9:a4:55:
31:09:6b:3c:16:2d:34:11:20:0c:44:be:a7:7a:da:
0e:d2:a5:ce:f7:40:da:b3:fe:91:16:a1:b0:d1:c0:
0b:41:a0:14:85:da:5f:22:3c:cc:a3:8b:ee:ad:5e:
4e:ec:68:65:4d:0b:91:a0:2f:65:da:ee:b5:f4:5f:
b5:db:c6:ee:b6:e9:d3:90:ea:7c:54:44:f2:08:b1:
68:65:dd:97:dc:4c:ab:0d:3f:4c:b2:d6:28:f9:88:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:88:AF:73:70:50:9F:76:82:FA:32:8C:3C:BA:6E:65:93:70:AD:15
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS400384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.184.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c4:c8:87:2b:f5:ec:a4:69:47:c4:0f:5c:a8:91:c0:40:9d:
28:c4:1a:d9:8c:f7:14:d9:2c:f1:74:82:1b:4d:5c:8c:08:d6:
e8:37:1d:24:cb:3e:8f:bd:9a:6f:72:0b:97:1f:d5:7f:06:19:
9a:1f:5b:e9:09:00:2b:eb:c9:f9:73:19:2c:a4:56:f0:00:a7:
98:65:55:b5:59:1a:9d:22:d3:ed:1a:67:cc:0a:42:c6:3d:9b:
4e:e4:a8:8b:64:11:2f:4d:a2:0c:0b:fa:7a:4f:4f:63:6d:4c:
43:e7:2e:eb:d5:10:e3:6a:fb:7c:12:ab:2b:19:3c:e4:c2:7f:
d4:42:71:d0:99:7b:77:99:f5:4d:0d:c5:73:5c:46:28:ac:2f:
fc:cd:f9:66:77:1a:0a:c2:ec:f4:59:b6:8b:b9:8c:8a:be:c4:
0b:11:74:0d:f7:3e:f3:c2:18:a0:ba:3f:42:c9:f5:a1:d0:a5:
3e:65:45:ad:c8:c8:d3:9d:8c:2a:cb:6e:29:23:3e:24:7a:c9:
03:34:25:3b:21:3d:c8:c7:72:5a:8c:89:83:5f:39:e7:59:30:
b7:51:7b:8d:ca:1a:ee:55:02:bb:47:62:92:55:3e:02:ca:b7:
87:81:9b:e2:e2:0c:a3:74:eb:e1:ef:a8:b3:92:80:10:3b:38:
ee:71:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org