Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: 0hy1Em5O44YCxhzuBROQxQvwhgZwo50gPPIGxFe7tWo=
Subject key identifier: 41:B1:13:21:76:27:95:7C:71:0B:93:4C:5E:56:E1:75:1A:5D:99:00
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 3DE55EB0D00E5FFB0BFEF2BF81A57187FA8DAAF1
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS212238.roa
Signing time: Mon 05 Dec 2022 00:00:12 +0000
ROA not before: Sun 04 Dec 2022 23:55:12 +0000
ROA not after: Mon 04 Dec 2023 00:00:12 +0000
asID: 212238
IP address blocks: 216.122.163.0/24 maxlen: 24
216.122.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e5:5e:b0:d0:0e:5f:fb:0b:fe:f2:bf:81:a5:71:87:fa:8d:aa:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Dec 4 23:55:12 2022 GMT
Not After : Dec 4 00:00:12 2023 GMT
Subject: CN=41B113217627957C710B934C5E56E1751A5D9900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:c6:8f:f3:c8:55:be:41:46:cd:02:3f:43:
33:40:de:c8:e8:0d:bd:e6:f8:21:0c:7c:c9:00:b6:
bc:ad:09:88:b6:92:5a:5f:6a:2a:98:f8:27:67:fb:
25:b4:1a:b4:89:4a:99:cd:ed:af:c7:88:c1:e4:25:
f4:b5:41:fb:13:80:df:8d:22:5a:71:0e:3c:11:e1:
da:47:67:85:07:04:55:7a:57:52:fc:c7:d0:f6:bb:
56:a8:57:d1:01:d7:fa:fe:35:62:89:85:1c:ce:a7:
3d:a4:c4:e3:f9:a0:48:8a:a8:a6:15:70:47:06:d6:
8d:c8:97:e7:af:80:3e:8b:fc:ad:59:17:08:93:52:
f4:f3:d3:d1:cc:1a:97:e2:db:f2:68:75:a3:50:0c:
e4:84:12:9a:84:16:34:06:49:5e:13:fe:e3:dc:68:
e7:a6:a7:16:c2:75:9a:ab:84:bd:2e:a2:47:1f:a5:
15:09:74:28:f3:c5:e3:05:05:a5:3b:38:57:e4:37:
b8:50:24:d8:f5:81:14:66:7b:24:67:23:04:a6:90:
ee:40:66:ec:ca:fe:55:99:d6:a5:ac:35:b0:7e:0c:
ac:d0:1b:f0:71:84:71:5a:d5:d8:6a:00:d2:c2:5f:
d7:32:7f:23:1c:99:43:73:ff:e1:87:18:17:97:ad:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B1:13:21:76:27:95:7C:71:0B:93:4C:5E:56:E1:75:1A:5D:99:00
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.163.0/24
216.122.189.0/24
Signature Algorithm: sha256WithRSAEncryption
08:22:58:ef:b9:14:ca:b6:31:19:67:30:67:71:3f:2b:8d:c4:
4a:a9:b7:bc:e7:b7:d7:8b:6c:38:60:46:f8:24:31:75:57:ab:
41:39:6d:a7:15:75:85:89:83:e0:fe:3d:9e:f8:08:33:5f:d3:
40:f9:6c:69:d6:ab:48:13:73:48:22:e8:af:77:31:1d:8a:ae:
20:8c:b5:32:61:7f:2d:e6:ab:2c:32:fa:ed:ea:56:29:db:4f:
46:d8:a4:9d:fe:04:41:72:2e:87:d0:ad:6e:e2:fe:ca:09:f8:
e9:8b:97:26:6e:d8:12:74:db:0f:1b:b0:fc:63:85:e4:16:58:
33:ac:22:05:48:5b:ee:56:f6:a5:c6:ff:3f:77:bf:52:3b:ef:
5f:20:58:50:b5:71:62:d3:5b:90:92:34:35:2d:95:fa:5a:77:
79:d2:3a:51:6c:9d:81:f4:ea:c4:8e:b9:8f:ba:d8:fe:24:86:
b8:84:5f:03:9a:7d:48:ab:6d:c7:6e:fd:3c:60:9c:5b:25:39:
33:73:2e:d6:0f:f2:7b:a4:c3:cc:9d:e1:30:f5:38:48:a2:bb:
33:e3:b4:03:74:f2:b5:6d:ab:3d:ad:14:d2:cd:9f:52:2f:39:
60:24:6f:22:5b:2d:f4:47:c1:08:b0:02:fa:f9:a9:be:fe:3a:
82:ab:c9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org