Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS209737.roa
File: AS209737.roa (raw, json)
Hash identifier: sKyHFoPzp02NhEkZtONlPVlze8fS6bf+8Bh7Y8IPkAk=
Subject key identifier: 03:FA:2E:8F:C7:DE:66:2E:1F:72:B4:C0:05:BC:22:B0:29:36:6F:35
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 781A5C2D8DBA6AD1023FA4A28A4725E441419969
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS209737.roa
Signing time: Mon 28 Nov 2022 09:41:21 +0000
ROA not before: Mon 28 Nov 2022 09:36:21 +0000
ROA not after: Mon 27 Nov 2023 09:41:21 +0000
asID: 209737
IP address blocks: 206.206.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:1a:5c:2d:8d:ba:6a:d1:02:3f:a4:a2:8a:47:25:e4:41:41:99:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Nov 28 09:36:21 2022 GMT
Not After : Nov 27 09:41:21 2023 GMT
Subject: CN=03FA2E8FC7DE662E1F72B4C005BC22B029366F35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:85:96:b9:e1:d1:c4:24:0d:6f:78:f2:40:
43:f0:ae:9f:bd:84:b4:f0:3d:f5:a7:2e:cd:ab:5c:
cb:c5:0d:cf:87:06:b7:66:94:54:af:2d:b0:06:c1:
e1:16:4c:90:bc:e3:22:55:79:46:92:7c:db:3d:76:
f4:b1:f1:f4:c6:3c:88:44:5d:49:f6:cb:75:d4:9d:
7e:69:8c:20:6e:3d:9b:51:24:98:b8:99:06:e1:a2:
0d:5f:43:5c:d9:d4:f7:09:d7:f6:98:b6:0b:a4:d8:
1a:ed:d3:35:a2:22:79:28:81:e9:49:e1:c0:29:94:
66:7d:f2:4f:f3:02:b4:f0:0b:6e:61:75:df:4d:97:
1a:b9:72:ac:48:87:f7:43:91:97:ba:2c:29:da:c0:
c8:96:40:67:e3:da:d2:53:c9:9a:93:22:20:26:34:
77:0d:44:df:27:96:db:d8:a7:37:bd:8c:1a:88:9d:
c8:77:a1:5d:9e:c7:38:01:9c:e9:de:7d:94:2d:7f:
12:09:1a:fa:ed:2a:a9:c0:10:e2:49:da:6a:f1:12:
90:93:e9:c2:9d:cc:d3:c9:ac:a8:dc:ff:5d:03:6e:
70:cc:96:ac:40:63:53:d6:57:65:8d:e5:04:49:64:
39:11:38:08:80:b6:d7:24:bf:4e:02:42:3b:5c:c5:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FA:2E:8F:C7:DE:66:2E:1F:72:B4:C0:05:BC:22:B0:29:36:6F:35
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS209737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.112.0/22
Signature Algorithm: sha256WithRSAEncryption
96:35:e1:78:93:1f:19:98:53:98:b0:b1:62:f8:05:d9:53:b9:
6b:1d:ad:79:67:16:90:c7:b4:c5:e2:4c:e2:7c:0e:1b:c1:00:
d6:5a:42:bc:fc:ad:da:25:20:33:44:f0:6b:32:ec:60:9e:ea:
78:0e:23:06:1d:bc:f3:93:30:10:8d:23:fa:1f:39:af:ce:9a:
72:9f:2c:55:8d:ec:ee:d1:b0:21:48:de:82:c5:86:40:2f:32:
d6:03:15:28:be:05:38:13:82:ba:f4:f5:93:e3:89:ec:c6:4c:
86:1d:1f:4c:38:81:8d:96:ff:25:2f:aa:27:82:cb:d3:96:1b:
a2:dd:2c:73:62:58:09:20:64:53:c5:c1:0b:08:64:14:f6:af:
06:93:f6:fb:1b:e9:f5:13:b4:94:17:be:f0:44:a6:c4:1e:82:
24:9d:d2:16:59:45:c5:49:41:ed:b5:d0:87:e4:a1:5e:c9:19:
5e:e6:cf:e9:9d:c6:4f:86:00:ff:4d:c6:d9:e5:3b:e3:9c:bc:
af:e2:91:9e:51:de:84:19:6a:71:65:60:5f:71:27:7a:c6:b8:
f9:9f:69:df:f1:68:c2:55:18:4a:36:d2:d0:d2:58:e8:7f:67:
60:bf:5a:1a:a0:eb:e5:6d:a9:3b:17:cf:91:d9:8a:43:f6:b3:
cd:fe:f5:67
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUeBpcLY26atECP6Siikcl5EFBmWkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzU5NjU0M2E0YzkwYzM5OGFkN2VmNjk5
YmRlOGM3OWVkZDJlMGI4YWMwHhcNMjIxMTI4MDkzNjIxWhcNMjMxMTI3MDk0MTIx
WjAzMTEwLwYDVQQDEygwM0ZBMkU4RkM3REU2NjJFMUY3MkI0QzAwNUJDMjJCMDI5
MzY2RjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4mFlrnh0cQk
DW948kBD8K6fvYS08D31py7Nq1zLxQ3Phwa3ZpRUry2wBsHhFkyQvOMiVXlGknzb
PXb0sfH0xjyIRF1J9st11J1+aYwgbj2bUSSYuJkG4aINX0Nc2dT3Cdf2mLYLpNga
7dM1oiJ5KIHpSeHAKZRmffJP8wK08AtuYXXfTZcauXKsSIf3Q5GXuiwp2sDIlkBn
49rSU8makyIgJjR3DUTfJ5bb2Kc3vYwaiJ3Id6Fdnsc4AZzp3n2ULX8SCRr67Sqp
wBDiSdpq8RKQk+nCnczTyayo3P9dA25wzJasQGNT1ldljeUESWQ5ETgIgLbXJL9O
AkI7XMX7fQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFAP6Lo/H3mYuH3K0wAW8IrAp
Nm81MB8GA1UdIwQYMBaAFEzEOYug/lCqoIv6I/5wGtDCBgR/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzEv
NENDNDM5OEJBMEZFNTBBQUEwOEJGQTIzRkU3MDFBRDBDMjA2MDQ3Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNTk2NTQzYTRjOTBjMzk4YWQ3ZWY2OTliZGU4Yzc5ZWRkMmUwYjhhYy5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMS9BUzIwOTczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAs7OcDANBgkqhkiG9w0BAQsFAAOC
AQEAljXheJMfGZhTmLCxYvgF2VO5ax2teWcWkMe0xeJM4nwOG8EA1lpCvPyt2iUg
M0TwazLsYJ7qeA4jBh2885MwEI0j+h85r86acp8sVY3s7tGwIUjegsWGQC8y1gMV
KL4FOBOCuvT1k+OJ7MZMhh0fTDiBjZb/JS+qJ4LL05Ybot0sc2JYCSBkU8XBCwhk
FPavBpP2+xvp9RO0lBe+8ESmxB6CJJ3SFllFxUlB7bXQh+ShXskZXubP6Z3GT4YA
/03G2eU745y8r+KRnlHehBlqcWVgX3Enesa4+Z9p3/FowlUYSjbS0NJY6H9nYL9a
GqDr5W2pOxfPkdmKQ/azzf71Zw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org