Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS398465.roa
File: AS398465.roa (raw, json)
Hash identifier: D8sffPF34itAEFn2oclU/2uAmyrAtwoL87IYbfOUsXI=
Subject key identifier: D9:71:A1:5D:AD:7D:10:F3:AA:86:51:0E:80:93:82:52:FE:B5:D3:10
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 53BCFE038C506E6650B7794FCC51C4B8F98A9E03
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS398465.roa
Signing time: Mon 28 Nov 2022 09:41:20 +0000
ROA not before: Mon 28 Nov 2022 09:36:20 +0000
ROA not after: Mon 27 Nov 2023 09:41:20 +0000
asID: 398465
IP address blocks: 206.206.66.0/24 maxlen: 24
206.206.67.0/24 maxlen: 24
206.206.69.0/24 maxlen: 24
206.206.71.0/24 maxlen: 24
206.206.73.0/24 maxlen: 24
206.206.75.0/24 maxlen: 24
206.206.76.0/24 maxlen: 24
206.206.77.0/24 maxlen: 24
206.206.87.0/24 maxlen: 24
206.206.88.0/24 maxlen: 24
206.206.89.0/24 maxlen: 24
206.206.90.0/24 maxlen: 24
206.206.108.0/24 maxlen: 24
206.206.120.0/24 maxlen: 24
206.206.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:bc:fe:03:8c:50:6e:66:50:b7:79:4f:cc:51:c4:b8:f9:8a:9e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Nov 28 09:36:20 2022 GMT
Not After : Nov 27 09:41:20 2023 GMT
Subject: CN=D971A15DAD7D10F3AA86510E80938252FEB5D310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:31:1c:a1:68:62:37:13:5b:11:69:4a:8d:
75:8c:3b:c7:18:03:ac:50:e4:2d:41:84:b2:f7:75:
12:07:9f:07:93:da:87:ea:6c:6c:4d:c6:a5:63:b8:
4c:e1:9b:5d:93:ca:f7:04:6f:b4:80:76:e9:e4:02:
67:18:59:6a:12:ef:5c:bb:2a:0f:b9:e5:b3:8a:64:
26:c1:81:b0:4e:f0:54:1f:ea:a8:aa:8e:3f:59:ec:
72:f7:b4:81:f1:d8:4f:bb:01:bb:f3:77:92:1c:68:
c9:11:0f:97:db:d7:a5:e9:7b:32:8b:c6:81:a9:41:
39:6b:f9:ec:1c:38:84:ec:ef:f5:b9:bd:db:06:56:
5a:08:f2:70:20:4f:07:77:ae:8e:d7:b6:de:41:27:
ce:bc:d0:25:81:4f:6e:f2:a8:af:a7:89:d4:8a:f7:
9d:bf:fa:53:b8:86:40:52:22:47:ba:c3:a1:2b:f0:
e7:89:46:0a:3a:cb:74:42:ad:14:1b:b3:49:5c:04:
ba:3b:4a:01:5c:39:32:77:01:02:9a:9d:9e:bf:84:
1a:bc:26:2c:e7:c9:06:ab:f2:aa:13:a0:a7:9c:4c:
3a:bf:6c:72:a2:6b:c8:82:54:26:aa:8f:30:fe:63:
e1:a0:df:96:cf:0e:8b:ee:05:74:f8:79:33:76:93:
af:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:71:A1:5D:AD:7D:10:F3:AA:86:51:0E:80:93:82:52:FE:B5:D3:10
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS398465.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.66.0/23
206.206.69.0/24
206.206.71.0/24
206.206.73.0/24
206.206.75.0-206.206.77.255
206.206.87.0-206.206.90.255
206.206.108.0/24
206.206.120.0/24
206.206.127.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9f:56:e4:1f:ae:3d:94:02:7d:03:29:1c:87:be:77:81:5b:
c8:3c:24:5e:4d:3d:14:24:12:36:43:5c:10:75:8e:d4:d9:44:
9c:79:be:75:25:79:a3:d1:c9:d9:dd:97:61:7f:4c:72:13:7d:
50:36:6f:65:88:78:8b:fc:f1:89:0b:48:a9:aa:cc:16:87:7b:
b1:de:df:19:90:ec:76:a8:78:23:70:8c:27:97:47:bc:0d:6d:
f0:4b:09:f6:cc:87:fa:de:d4:b0:7b:cb:63:9f:05:03:e4:43:
0f:85:03:72:71:70:0d:72:b5:3f:db:58:1f:c0:03:2f:ef:37:
61:7f:30:08:8a:8f:e1:ef:af:01:67:74:70:ff:10:a0:4f:a4:
be:f3:3d:e9:09:9c:9a:13:86:4a:2b:4a:ca:e7:39:2f:70:c6:
be:16:15:d6:68:be:38:83:1d:73:ba:bb:71:9b:f5:03:76:e5:
72:bf:66:c3:e3:91:d4:50:7d:62:96:82:f5:ae:3f:26:c5:30:
34:7e:9b:a9:a3:0b:91:99:b0:65:00:e5:56:41:31:7c:44:4c:
cb:7f:e1:c3:d5:84:a8:eb:a5:79:32:50:f2:34:12:80:66:90:
92:6b:97:56:49:de:a5:b9:0a:61:f2:c2:95:93:0f:ab:ca:6b:
1d:dc:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org