Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS1299.roa
File: AS1299.roa (raw, json)
Hash identifier: SrY1I+wip7QrCahLYSRuPJfNTQqOQS1byZ6JW0YrwSY=
Subject key identifier: 1B:55:62:31:6C:90:80:91:4F:5D:E2:96:C8:7C:DF:F3:A4:6A:C1:C2
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 5B5C50073F0C4FEE0EF9CDDD127E5B0A3E610723
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS1299.roa
Signing time: Mon 28 Nov 2022 09:41:21 +0000
ROA not before: Mon 28 Nov 2022 09:36:21 +0000
ROA not after: Mon 27 Nov 2023 09:41:21 +0000
asID: 1299
IP address blocks: 206.206.66.0/24 maxlen: 24
206.206.67.0/24 maxlen: 24
206.206.69.0/24 maxlen: 24
206.206.71.0/24 maxlen: 24
206.206.73.0/24 maxlen: 24
206.206.75.0/24 maxlen: 24
206.206.76.0/24 maxlen: 24
206.206.77.0/24 maxlen: 24
206.206.87.0/24 maxlen: 24
206.206.88.0/24 maxlen: 24
206.206.89.0/24 maxlen: 24
206.206.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5c:50:07:3f:0c:4f:ee:0e:f9:cd:dd:12:7e:5b:0a:3e:61:07:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Nov 28 09:36:21 2022 GMT
Not After : Nov 27 09:41:21 2023 GMT
Subject: CN=1B5562316C9080914F5DE296C87CDFF3A46AC1C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:9e:e0:8f:be:64:46:06:a0:d8:c1:88:36:
04:1d:62:03:fa:50:03:28:c8:6b:42:3f:de:fe:cb:
5e:49:6a:eb:e8:9b:67:c1:58:ef:c1:33:f7:5a:e3:
1b:da:5a:32:40:62:cf:e5:d6:66:7f:36:4c:ab:45:
74:27:1b:c6:45:e4:0c:86:6f:8e:c9:b1:4b:0a:59:
80:ab:a3:e3:df:94:0e:1d:c5:0c:32:cf:8a:00:0a:
80:7f:23:d9:96:9c:e7:40:13:fa:ad:30:7c:09:40:
c8:cd:29:6b:88:9a:c8:2c:8e:52:8d:1c:c2:ed:a7:
ed:e5:36:ed:20:f3:f5:7f:17:79:59:ac:95:0e:d4:
6a:16:b9:6e:d5:b3:d9:c8:1d:92:fd:d5:30:7b:0f:
4f:d0:b1:ef:6f:23:d5:df:49:69:61:b9:ad:db:e7:
17:b4:45:35:78:ed:85:ca:5c:36:bb:fd:91:9c:87:
90:1f:a1:12:9c:af:ba:a6:bb:11:a6:dc:e1:a1:b0:
e0:92:53:4c:0e:27:6c:ae:22:2e:ed:f0:4c:e3:b6:
b7:02:4c:4c:f8:8e:27:a6:db:c4:db:82:8e:a8:fa:
78:e9:75:71:bc:c4:4d:8f:46:15:90:d1:17:2b:f0:
be:c7:2b:61:97:96:7e:ba:f6:e2:9e:48:1b:54:8c:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:55:62:31:6C:90:80:91:4F:5D:E2:96:C8:7C:DF:F3:A4:6A:C1:C2
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS1299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.66.0/23
206.206.69.0/24
206.206.71.0/24
206.206.73.0/24
206.206.75.0-206.206.77.255
206.206.87.0-206.206.90.255
Signature Algorithm: sha256WithRSAEncryption
39:56:5a:f0:e7:83:58:19:8f:b1:49:23:d0:c4:fb:d0:6d:6e:
8c:1e:1b:4c:49:f4:de:a5:c8:63:52:c3:eb:32:bb:be:d4:b6:
a8:5c:ce:49:e6:30:23:fd:2d:fb:2a:25:4a:f9:3c:0e:d5:e2:
90:73:89:ad:85:38:85:a1:4e:12:ca:bc:8a:31:bb:71:c8:e6:
ac:ab:89:e0:16:38:43:27:27:51:14:ed:48:d5:76:c9:b7:a8:
71:2b:1f:25:1f:cb:02:3b:c4:85:3c:f7:ba:e3:7c:56:9e:d6:
da:f6:91:55:3b:69:16:82:c3:3c:ee:4a:e6:38:4b:cc:fd:c4:
17:d7:4e:09:31:1c:3e:b2:16:4b:bb:d3:11:cc:7f:68:ab:07:
ac:74:02:d0:9d:c2:50:60:c4:32:cb:2e:fc:37:57:c3:11:f7:
c7:d6:b3:9f:5e:2b:96:01:31:76:37:52:7d:69:39:2b:e7:ce:
5c:0e:3a:41:f7:83:65:e8:bd:f0:3b:0b:ff:a5:cb:9f:ed:16:
3a:9e:c9:f9:59:d7:cf:1e:40:dc:63:a7:53:8e:cb:54:b0:10:
7e:48:68:ee:b8:36:3c:a6:ca:61:28:99:13:cd:08:0e:74:c3:
45:b5:30:38:21:58:da:4b:2b:38:8a:25:41:d3:a0:0c:a8:6b:
10:63:2c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org