Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: Mbx9a1dJD93SGwe2Gs3k2HFZdSUjrp9qaP5536qVTvI=
Subject key identifier: 6B:EA:53:42:A1:7F:D5:31:EE:30:05:68:81:BD:CB:47:E6:7E:7C:96
Certificate issuer: /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial: 26846B369930FABB31F11C86C349370B33D1C2CC
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS40676.roa
Signing time: Thu 08 Sep 2022 06:49:08 +0000
ROA not before: Thu 08 Sep 2022 06:44:08 +0000
ROA not after: Thu 07 Sep 2023 06:49:08 +0000
asID: 40676
IP address blocks: 216.122.172.0/24 maxlen: 24
216.122.173.0/24 maxlen: 24
216.122.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:84:6b:36:99:30:fa:bb:31:f1:1c:86:c3:49:37:0b:33:d1:c2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Validity
Not Before: Sep 8 06:44:08 2022 GMT
Not After : Sep 7 06:49:08 2023 GMT
Subject: CN=6BEA5342A17FD531EE30056881BDCB47E67E7C96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d7:da:2e:62:6d:86:70:0f:89:db:5d:f4:85:
0c:61:a5:97:1e:29:ba:d1:d6:84:ca:a5:c0:50:cc:
11:52:7d:60:9f:a4:e2:71:98:0b:a5:d0:14:d1:4e:
26:7f:69:6c:0b:2c:d6:4b:2c:3c:79:e9:d6:1e:20:
02:39:ac:3a:d8:69:08:67:99:f2:c8:63:dc:fe:3f:
fb:35:97:57:42:47:46:58:74:ad:fe:11:9f:ba:79:
96:57:e0:81:7d:b8:21:84:fc:4f:a2:6d:7b:87:75:
c6:73:7f:23:f5:9f:1a:08:34:e0:53:40:17:7f:a6:
1a:a6:95:8f:16:5a:c6:e5:e4:36:9f:1e:d1:a4:7c:
75:b3:0c:06:f3:9b:d2:30:ab:37:ec:cb:58:c5:66:
cd:e1:ad:96:35:78:6d:ef:34:9d:b6:3f:fb:9e:24:
1a:3b:95:7a:e6:be:87:94:2f:88:43:67:10:67:cb:
f3:cf:87:76:f7:bc:f2:2a:5c:59:23:55:07:50:6a:
21:ce:f2:1f:ef:9f:b1:17:e7:12:2e:3b:80:fc:b3:
4c:0f:bf:2d:4b:53:b8:ba:41:ae:b1:ec:47:45:47:
12:e4:17:dc:aa:10:b8:93:c5:40:6d:4b:10:cb:b9:
d3:ce:e5:56:cc:06:14:d4:aa:09:f1:55:07:c5:97:
60:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EA:53:42:A1:7F:D5:31:EE:30:05:68:81:BD:CB:47:E6:7E:7C:96
X509v3 Authority Key Identifier:
keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.172.0/23
216.122.175.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b1:85:24:03:b1:b2:c6:04:e5:e6:1e:61:05:1e:ec:da:12:
3d:21:d5:a6:4c:65:66:30:72:0b:89:03:f8:8c:c8:55:e3:c1:
ad:3b:61:74:d0:96:91:4e:92:1f:8f:f0:94:9e:d6:a2:23:b6:
e2:c8:18:80:7e:9f:ea:2e:29:6d:d6:c7:ea:0d:50:72:58:48:
d7:87:7f:23:37:37:85:7f:97:54:a3:4a:4c:4b:cb:56:ae:2c:
35:a9:69:c1:30:90:94:c9:b8:f6:6e:63:b2:97:8d:19:88:f4:
8f:02:28:37:ea:77:37:ff:f3:e4:5c:07:3a:5f:5a:43:4a:2d:
26:51:ea:24:42:15:64:4b:19:b4:a1:19:a7:2c:22:db:96:e7:
da:14:c4:35:46:c4:f8:73:8d:65:1f:17:9a:cc:82:1e:b6:9f:
13:4f:99:6d:a5:5c:a9:4d:00:4d:c0:3d:6c:4d:69:7d:f0:89:
b4:0c:81:7f:eb:20:c8:09:fb:0d:4b:d5:b8:f2:f8:82:dc:81:
6e:8f:fd:59:f4:ed:95:47:be:f6:98:4b:59:9d:5f:09:f3:73:
42:82:e8:ef:23:8b:46:33:ae:81:05:5a:d1:f7:d9:13:b4:8e:
42:8a:a1:62:42:4d:af:3b:00:ab:4a:3d:a3:b7:92:fd:06:3a:
db:d3:ac:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUJoRrNpkw+rsx8RyGw0k3CzPRwswwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwOTA4MDY0NDA4WhcNMjMwOTA3MDY0OTA4
WjAzMTEwLwYDVQQDEyg2QkVBNTM0MkExN0ZENTMxRUUzMDA1Njg4MUJEQ0I0N0U2
N0U3Qzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NfaLmJthnAP
idtd9IUMYaWXHim60daEyqXAUMwRUn1gn6TicZgLpdAU0U4mf2lsCyzWSyw8eenW
HiACOaw62GkIZ5nyyGPc/j/7NZdXQkdGWHSt/hGfunmWV+CBfbghhPxPom17h3XG
c38j9Z8aCDTgU0AXf6YappWPFlrG5eQ2nx7RpHx1swwG85vSMKs37MtYxWbN4a2W
NXht7zSdtj/7niQaO5V65r6HlC+IQ2cQZ8vzz4d297zyKlxZI1UHUGohzvIf75+x
F+cSLjuA/LNMD78tS1O4ukGusexHRUcS5BfcqhC4k8VAbUsQy7nTzuVWzAYU1KoJ
8VUHxZdgkQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFGvqU0Khf9Ux7jAFaIG9y0fm
fnyWMB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMC9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB2HqsAwQA2HqvMA0GCSqGSIb3DQEB
CwUAA4IBAQCGsYUkA7GyxgTl5h5hBR7s2hI9IdWmTGVmMHILiQP4jMhV48GtO2F0
0JaRTpIfj/CUntaiI7biyBiAfp/qLilt1sfqDVByWEjXh38jNzeFf5dUo0pMS8tW
riw1qWnBMJCUybj2bmOyl40ZiPSPAig36nc3//PkXAc6X1pDSi0mUeokQhVkSxm0
oRmnLCLblufaFMQ1RsT4c41lHxeazIIetp8TT5ltpVypTQBNwD1sTWl98Im0DIF/
6yDICfsNS9W48viC3IFuj/1Z9O2VR772mEtZnV8J83NCgujvI4tGM66BBVrR99kT
tI5CiqFiQk2vOwCrSj2jt5L9Bjrb06zA
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:22 2023 by rpki-client on console-ams.rpki-client.org