Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS211439.roa
File: AS211439.roa (raw, json)
Hash identifier: eHSoBx+g2iluOHfXIEMMssLGlHvxy23EKgzX3l2MAis=
Subject key identifier: 23:7E:97:11:5E:E2:81:FA:BE:A3:E5:DD:08:40:F9:14:A4:F7:FF:71
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 254C1142926A09A58148739DCF8016809BF91E48
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS211439.roa
Signing time: Fri 09 Dec 2022 09:54:44 +0000
ROA not before: Fri 09 Dec 2022 09:49:44 +0000
ROA not after: Fri 08 Dec 2023 09:54:44 +0000
asID: 211439
IP address blocks: 206.206.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4c:11:42:92:6a:09:a5:81:48:73:9d:cf:80:16:80:9b:f9:1e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Dec 9 09:49:44 2022 GMT
Not After : Dec 8 09:54:44 2023 GMT
Subject: CN=237E97115EE281FABEA3E5DD0840F914A4F7FF71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ed:e1:9f:29:e2:77:28:af:7b:6d:47:00:86:
57:6c:71:19:11:64:72:89:aa:34:e4:0b:6e:87:fd:
1e:b4:2c:38:7c:39:0f:58:ce:00:7d:88:5c:81:12:
10:61:9f:fe:9f:91:d1:29:27:9a:6a:37:18:67:d2:
45:1b:f3:f7:d2:f0:15:e9:0b:d7:22:e1:36:03:7f:
11:33:fb:c1:32:49:04:b2:1c:df:7f:e1:38:25:df:
2f:c7:d4:0b:93:9b:3a:b3:b1:d5:b2:9d:fa:ff:44:
26:68:c3:fb:44:65:be:2e:0f:5c:c3:78:5a:84:52:
e8:4b:0d:70:cb:9c:12:c3:fc:79:87:45:80:34:02:
aa:ec:ed:e8:1f:7a:5a:67:5a:93:9f:a0:23:c3:3c:
c2:f7:d3:e1:ba:df:b2:99:4c:e5:55:e9:4b:9f:c9:
e4:3c:99:ed:50:ae:06:4f:8c:b5:72:a9:91:fc:16:
3a:7d:01:38:1b:34:d7:13:91:44:39:f6:cf:ad:a7:
22:3b:60:77:2b:9b:12:bd:65:7a:8f:f4:67:2c:d8:
c1:41:5a:a9:f2:72:6d:52:3a:62:28:e7:53:44:28:
27:a8:fb:78:27:6e:c1:75:3e:7f:a7:c8:bb:d2:f4:
ed:98:8a:d6:88:96:9f:90:dc:69:c3:e5:59:be:98:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7E:97:11:5E:E2:81:FA:BE:A3:E5:DD:08:40:F9:14:A4:F7:FF:71
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS211439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.81.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:7f:e5:65:c0:14:18:ae:22:fd:34:ef:24:3e:d4:51:0e:79:
b8:8b:00:63:e9:e0:7c:57:c5:a0:5c:b9:34:9e:99:eb:96:a4:
9c:8e:23:2c:cc:dc:64:b5:fd:9f:93:cd:21:34:ba:72:44:ef:
d5:0b:dc:2f:6f:76:03:79:03:bb:b9:bd:84:f8:ec:50:69:53:
b6:86:8d:4e:dc:03:8e:cf:6e:73:5a:a4:f0:23:b8:ab:1a:5e:
42:c2:50:fb:e8:c2:13:6c:1b:5c:0e:a3:83:6f:86:27:73:8f:
bc:0b:b7:ff:36:9c:25:50:da:d7:bc:7e:1f:a4:f0:2e:92:1f:
7d:bf:7e:87:d9:a5:cc:7b:3d:4a:55:e1:02:c2:8a:7c:66:d4:
af:02:ea:56:5c:56:1e:b9:01:ef:2a:8a:7f:c7:83:0b:29:a7:
61:50:4c:c3:38:52:ba:4c:b5:96:af:ec:c4:0f:61:e7:12:ed:
fc:dc:f2:5c:d2:76:08:83:97:2f:d4:db:5c:14:73:ab:7a:25:
7c:15:12:11:d2:b3:a5:bf:86:b3:f8:4a:23:ea:47:f8:dd:f5:
8d:c1:3b:20:7c:87:cb:5e:9b:f5:cd:13:5b:c4:68:bb:b8:e7:
af:6c:58:bf:cf:62:ca:c5:85:4a:cc:73:35:a5:4c:10:5e:55:
ee:20:78:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org