Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS138687.roa
File: AS138687.roa (raw, json)
Hash identifier: kpZj+LnFd6/Ltw4M8Cs5MmnvqmVhxPFNBZVDv8etOmU=
Subject key identifier: C2:CB:BC:5C:54:3A:D7:58:DF:E9:57:A3:AF:31:B1:CE:6C:92:CA:EB
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 2CFEA776B4D3B53A69828EDC7802715AF16456A7
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS138687.roa
Signing time: Mon 05 Dec 2022 18:30:04 +0000
ROA not before: Mon 05 Dec 2022 18:25:04 +0000
ROA not after: Mon 04 Dec 2023 18:30:04 +0000
asID: 138687
IP address blocks: 206.206.98.0/24 maxlen: 24
206.206.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:fe:a7:76:b4:d3:b5:3a:69:82:8e:dc:78:02:71:5a:f1:64:56:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Dec 5 18:25:04 2022 GMT
Not After : Dec 4 18:30:04 2023 GMT
Subject: CN=C2CBBC5C543AD758DFE957A3AF31B1CE6C92CAEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:79:7b:49:d3:df:9e:57:e2:7e:ad:c8:ae:
64:4d:5b:73:bf:27:44:9f:d9:12:f2:a7:02:ec:cc:
e4:d3:e4:cb:c0:0e:5d:05:4c:7b:6b:28:6c:85:7f:
10:7a:2c:39:7b:f7:10:f3:00:6e:8f:f2:dc:fd:37:
b4:d8:48:36:ec:f8:75:c7:ee:18:8b:0f:63:37:6e:
06:08:c2:2c:ec:dd:eb:ed:53:05:30:eb:fd:a4:c1:
d2:fa:fb:ae:9c:8b:43:41:04:3c:74:e9:c1:2d:ca:
0a:b6:7f:f5:6e:e3:36:61:bd:e5:41:e8:9c:4b:52:
87:b9:e4:d9:be:4f:d0:e4:36:dd:a2:f8:41:70:1c:
92:52:76:24:ad:55:0a:bf:6f:db:7c:82:02:e5:35:
fd:3e:b3:4b:0d:c4:2b:71:c1:31:53:0c:e7:e5:d7:
bf:e9:81:06:a6:d1:ea:cd:22:be:bd:5c:a5:0e:98:
e4:62:96:dd:ab:aa:ad:92:0a:03:7a:ea:3c:e8:df:
e1:e6:c9:62:3b:74:10:7a:b0:5c:7e:cc:03:fa:94:
fa:47:2a:da:51:6b:0d:93:22:ee:fa:01:eb:92:15:
bc:5b:98:b4:84:d0:ab:df:50:36:8c:ed:8e:df:42:
a2:71:35:17:bc:51:f6:1d:03:73:57:18:0e:ac:5a:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CB:BC:5C:54:3A:D7:58:DF:E9:57:A3:AF:31:B1:CE:6C:92:CA:EB
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS138687.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.98.0/24
206.206.124.0/24
Signature Algorithm: sha256WithRSAEncryption
66:35:f1:08:d0:d3:37:c2:25:57:da:a3:90:b1:e4:3a:32:68:
d5:e9:d9:ad:c7:c5:9e:12:fa:37:9e:b8:13:c5:97:50:2e:82:
c2:97:d7:60:f5:a8:76:eb:fe:8a:02:02:aa:76:9c:b9:4e:95:
7d:ac:8e:03:d8:6e:10:7b:d6:2a:e4:de:47:0c:0c:f9:82:e6:
95:9a:3d:c6:2b:b8:4d:0e:a7:e9:93:75:b1:b5:fd:91:65:9f:
b1:0a:bc:a2:e2:77:48:ef:92:8c:8a:ee:d1:58:b6:db:98:d8:
0c:ae:c5:34:9f:04:d9:98:5f:2d:91:34:cb:34:05:c7:a1:a9:
ab:ba:01:7f:4a:ef:3c:c4:21:ed:38:f2:73:7b:fc:d4:4b:f7:
fc:fe:c9:93:6a:96:fa:f4:d3:97:fc:da:29:9d:ef:c4:c2:2d:
a2:ab:4f:d0:04:da:9a:85:8e:f3:7b:0c:3f:c3:90:09:b3:58:
1e:d1:96:d4:bb:1a:e3:75:18:48:2e:9f:8a:89:95:e5:b7:7c:
af:3a:f9:9d:bf:e7:c5:b6:5e:2a:8c:ea:b9:b9:18:7d:a1:f2:
73:00:1a:8d:55:3c:01:c0:2d:5b:4c:d8:2e:82:e4:71:66:ec:
1f:fa:9f:91:7d:a4:88:8b:b4:29:ff:a0:69:fa:b4:45:39:a3:
7e:05:ba:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org