Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS395111.roa
File: AS395111.roa (raw, json)
Hash identifier: EmXWQxzx64FxcN0qfTD08sQ3idbOWdPj1H50mmGVSfg=
Subject key identifier: 46:9C:D5:79:7C:03:E2:CE:4F:7D:D7:B5:AF:4B:65:96:AF:AC:25:0D
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 0F1CB59396351C7AD8DC6B16FE05C07A122286AA
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS395111.roa
Signing time: Mon 28 Nov 2022 09:41:22 +0000
ROA not before: Mon 28 Nov 2022 09:36:22 +0000
ROA not after: Mon 27 Nov 2023 09:41:22 +0000
asID: 395111
IP address blocks: 216.122.161.0/24 maxlen: 24
216.122.168.0/24 maxlen: 24
216.122.170.0/24 maxlen: 24
216.122.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1c:b5:93:96:35:1c:7a:d8:dc:6b:16:fe:05:c0:7a:12:22:86:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Nov 28 09:36:22 2022 GMT
Not After : Nov 27 09:41:22 2023 GMT
Subject: CN=469CD5797C03E2CE4F7DD7B5AF4B6596AFAC250D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:4a:2e:73:a9:e8:06:e9:49:34:f6:48:83:
99:e9:ca:53:e0:77:15:79:7b:3c:35:b8:a4:8a:04:
f8:7b:da:73:7a:b6:84:d3:d7:1e:72:a3:d9:9d:0f:
16:ea:8a:fc:ee:4b:97:30:f4:23:48:45:21:b1:3a:
43:96:0e:2c:91:b9:8f:57:6e:fb:70:3e:cd:d0:b2:
27:06:43:3f:21:ad:5c:59:f9:a7:a1:c2:49:86:c3:
ff:70:34:00:ec:90:9c:b6:0f:f2:c6:03:03:77:eb:
05:92:22:3c:f0:f4:73:3d:45:70:aa:26:28:21:b2:
8f:dc:97:00:61:ff:20:fa:c8:9b:cd:74:d2:60:db:
e4:f0:72:1f:5b:1b:80:9a:e3:51:00:25:b1:ed:fe:
41:97:bd:86:68:c5:fd:f1:ea:5b:a1:8d:f2:11:8d:
5f:b0:b4:f5:bb:ef:a2:8e:e1:bb:e1:14:6d:fe:21:
c0:72:b4:ea:6d:75:53:e6:a6:05:aa:7b:3b:04:2c:
10:8b:37:90:b1:30:06:aa:47:ab:f8:dd:04:1b:c7:
05:21:46:69:fb:55:ec:1d:c8:1f:95:ee:e8:86:fb:
e7:73:71:ab:5a:8b:9e:3b:89:05:75:5f:78:ec:19:
bd:b5:a9:e9:55:46:11:95:fa:cc:2a:0e:d3:d8:c7:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9C:D5:79:7C:03:E2:CE:4F:7D:D7:B5:AF:4B:65:96:AF:AC:25:0D
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS395111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.161.0/24
216.122.168.0/24
216.122.170.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:ea:50:a4:41:ed:f7:05:0c:b9:a7:d5:83:32:4e:17:95:3f:
bf:8d:d1:64:83:d6:fd:e4:d0:e8:ac:af:0b:af:74:15:43:2d:
72:25:aa:d6:a2:3e:07:ed:39:c1:fc:d7:57:86:59:bb:b7:5e:
43:18:2b:22:7d:c6:90:11:e4:4b:8c:a0:47:cf:da:25:1d:2e:
c3:4d:1b:9a:de:75:d4:b4:e2:e3:7c:07:d9:78:8d:d2:a9:5a:
ae:6d:a6:f7:68:8d:17:ce:58:9f:e1:5a:17:b0:a8:0f:09:fc:
59:18:78:99:92:b7:4e:41:b2:f7:4b:eb:37:29:a1:42:58:4c:
68:d4:28:01:39:f2:4d:34:22:3f:2b:4e:85:69:34:57:75:ce:
12:53:f6:44:17:12:2c:83:8e:a2:cb:12:f6:62:48:59:3b:05:
40:9e:2f:49:13:95:db:0f:67:c0:eb:28:4b:29:43:96:c7:bc:
7f:c5:3f:c0:5b:28:10:28:9e:9a:c4:00:c9:be:76:86:6a:97:
e5:16:27:15:9b:a8:37:1e:02:89:1a:60:45:58:d5:8c:46:07:
11:96:6b:25:5f:ad:0e:9b:8f:0a:e3:40:30:c2:1d:21:72:83:
45:46:37:be:e8:74:6f:ad:f5:14:f5:7d:81:98:91:fb:f8:1d:
a0:55:a1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org