Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS211585.roa
File: AS211585.roa (raw, json)
Hash identifier: ooUczZJUyrVGwLVTDr+E7fvUv+iBzhvKuXrpLM8IfP4=
Subject key identifier: 49:0C:6A:3F:0E:33:10:7D:BC:53:18:4A:DD:BE:7C:99:77:80:4E:03
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 4CCF4DA93E14E5F3377F813D674608AB852709F6
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS211585.roa
Signing time: Mon 28 Nov 2022 09:41:22 +0000
ROA not before: Mon 28 Nov 2022 09:36:22 +0000
ROA not after: Mon 27 Nov 2023 09:41:22 +0000
asID: 211585
IP address blocks: 206.206.96.0/22 maxlen: 24
206.206.116.0/22 maxlen: 24
216.122.185.0/24 maxlen: 24
216.122.186.0/24 maxlen: 24
216.122.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:cf:4d:a9:3e:14:e5:f3:37:7f:81:3d:67:46:08:ab:85:27:09:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Nov 28 09:36:22 2022 GMT
Not After : Nov 27 09:41:22 2023 GMT
Subject: CN=490C6A3F0E33107DBC53184ADDBE7C9977804E03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:4c:0b:20:b6:16:9e:88:ff:4c:a7:aa:c4:
52:dc:aa:3d:b1:a4:b7:bc:db:c3:75:2c:74:98:13:
b5:0c:af:0d:e1:1b:9c:d5:76:c8:0a:f9:9c:a5:3e:
44:96:bc:4e:f1:ca:8a:25:0d:e5:4c:21:68:24:7a:
14:ae:c8:31:9a:10:d9:95:3b:9e:4c:5b:3d:ae:1e:
b2:98:0d:53:61:3c:c4:64:b6:4f:68:32:61:62:ca:
68:45:7e:db:d9:47:5f:4e:42:2f:f2:27:db:21:ce:
fe:b7:53:8c:84:fe:c8:a4:c7:c0:ef:5d:5c:29:e4:
44:d3:36:c6:5c:89:b0:51:86:8e:79:63:8b:67:83:
31:9a:ac:a9:d7:fd:7e:81:ec:f5:6e:2b:9f:75:eb:
85:86:51:86:12:2a:8d:98:f7:cf:c1:39:d8:5b:1a:
b4:99:5f:5d:7d:a4:ef:19:fe:c7:98:3d:fd:da:b1:
f6:56:a5:db:e6:75:88:59:85:c6:cc:74:5d:f9:28:
13:00:54:6f:d8:a5:07:4d:5f:dc:51:36:72:f5:30:
63:ab:75:ca:33:0a:89:d5:c6:3e:08:f9:e8:42:52:
5a:7b:bf:14:eb:d6:a6:4b:2e:8b:3c:fb:5e:73:8a:
81:ef:51:3c:49:cd:f3:96:31:f7:73:ac:14:b0:18:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0C:6A:3F:0E:33:10:7D:BC:53:18:4A:DD:BE:7C:99:77:80:4E:03
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS211585.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.96.0/22
206.206.116.0/22
216.122.185.0-216.122.186.255
216.122.190.0/24
Signature Algorithm: sha256WithRSAEncryption
21:7c:a8:37:da:7a:db:72:a4:ff:e2:d8:6c:a4:01:f6:ca:a8:
be:63:7f:76:4f:ec:b8:88:aa:5b:04:78:28:70:04:6f:8e:2d:
fa:7e:8b:65:94:2d:ca:c4:30:ec:ed:a5:98:54:da:74:5c:74:
bb:ce:00:9d:2a:8d:2a:46:f6:f0:41:b7:5a:f8:a3:1e:51:b9:
61:c2:d6:2b:01:bf:d1:bb:21:86:72:5f:07:48:0c:bc:e2:5d:
6c:e6:f4:46:69:5d:c8:64:0d:25:25:2e:3c:f2:6b:bc:23:56:
da:4a:fc:71:b6:a6:20:54:e9:e7:75:14:71:28:63:50:20:b2:
2d:ab:f2:23:d7:72:62:64:f0:93:5e:90:ef:36:38:fb:d2:2e:
3c:23:e1:d7:0c:d5:c3:84:72:5a:3a:d9:68:a3:c0:a9:1a:14:
e4:8f:8b:87:4f:81:18:5a:f2:3e:1f:4d:29:e3:cd:d5:60:66:
75:16:73:6b:e4:7c:90:c2:9e:e3:4e:44:50:c0:36:57:64:8a:
03:65:76:9b:ca:c1:56:18:36:ce:bf:1e:c7:ee:03:a2:2e:7c:
5a:99:49:33:d5:68:d2:18:08:d2:c2:20:8c:ed:df:ea:d1:ba:
99:df:87:6e:12:98:b3:4a:1c:73:08:18:49:da:62:94:eb:7a:
58:2a:20:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org