Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS40676.roa
File: AS40676.roa (raw, json)
Hash identifier: pZ9F3NOxjbVX4u+dtdxPG8f+bpyZKC7FF7G+c5tRiCk=
Subject key identifier: D5:FB:F9:3C:5C:A0:92:DA:35:96:BC:0E:E1:05:94:BA:07:49:2C:90
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 7E8BD8C4DCD018D192E9800BE2ED3418904DACF9
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS40676.roa
Signing time: Mon 28 Nov 2022 09:41:20 +0000
ROA not before: Mon 28 Nov 2022 09:36:20 +0000
ROA not after: Mon 27 Nov 2023 09:41:20 +0000
asID: 40676
IP address blocks: 216.122.172.0/24 maxlen: 24
216.122.173.0/24 maxlen: 24
216.122.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:8b:d8:c4:dc:d0:18:d1:92:e9:80:0b:e2:ed:34:18:90:4d:ac:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Nov 28 09:36:20 2022 GMT
Not After : Nov 27 09:41:20 2023 GMT
Subject: CN=D5FBF93C5CA092DA3596BC0EE10594BA07492C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:58:11:9c:d1:35:9b:fe:01:6e:9d:1d:22:
b3:67:e0:7b:ad:fe:41:a4:6e:75:de:8a:01:27:ee:
94:ce:e1:2c:2f:d1:bc:47:70:75:39:73:37:39:8f:
70:1d:a4:30:8b:e3:e7:7b:81:c3:b1:11:13:5c:1d:
56:cd:9e:8f:ee:98:21:fb:0e:e2:db:10:6c:9f:e2:
3f:8e:da:14:c9:ec:b8:4a:18:07:8d:3f:2a:e7:ca:
64:74:ae:b6:5b:40:d3:f9:6e:f3:f6:6e:e4:6d:e9:
d9:18:06:09:84:bd:b1:f2:6f:2e:4c:08:43:f2:df:
38:fe:3b:d0:5b:3c:b4:b8:1e:3d:96:84:f5:c5:fc:
e2:e5:b4:db:19:b3:b0:45:34:ac:46:6d:41:8e:88:
eb:f6:e4:3c:1c:41:22:cc:d0:42:26:f9:f8:4b:52:
84:6d:6e:93:c9:29:44:cf:1b:f7:62:60:e8:36:32:
38:c4:fe:de:6f:89:a2:e0:02:dc:fd:8c:ef:ae:7f:
b7:ac:fb:de:44:c1:ff:fc:9d:98:28:fd:5d:db:c7:
aa:e5:40:6d:b7:83:99:a7:e5:cb:81:3d:fa:70:3b:
31:5b:21:48:e7:5b:bc:17:cf:8b:86:8c:1a:60:d5:
c0:b9:00:3a:29:38:ab:06:0a:03:38:04:55:19:83:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FB:F9:3C:5C:A0:92:DA:35:96:BC:0E:E1:05:94:BA:07:49:2C:90
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS40676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.172.0/23
216.122.175.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d6:9f:ac:00:ff:dd:13:49:52:3f:14:61:51:0a:7f:42:d4:
cd:5b:c9:e6:ac:ff:10:a2:53:24:d5:d6:b9:41:60:2f:4e:cc:
3e:55:8b:69:8e:0f:a7:d3:f6:70:25:e7:f0:b0:9a:03:8c:eb:
9d:bc:25:30:a7:bf:4e:bf:4a:e3:43:a4:48:31:17:ff:5b:b3:
94:4d:4d:81:50:c6:a9:1b:33:a1:a0:0e:76:d7:0a:41:af:7a:
6d:56:e8:df:38:72:14:d0:f9:77:d8:80:0d:4c:cc:0e:0e:6a:
8c:28:48:cd:6c:e8:b2:7a:d5:1d:28:6d:90:98:16:df:ed:c8:
d2:04:24:b8:f7:f8:90:18:a5:4b:62:49:9d:2d:90:4f:5f:d6:
88:57:cf:da:44:86:b8:26:86:2f:82:b1:5e:9b:dc:7f:49:91:
87:30:1b:bc:d3:f6:4e:83:af:ef:bf:49:44:6d:df:e2:91:3e:
2c:f6:44:43:55:36:57:94:fd:45:3b:41:3a:ad:7f:60:87:19:
7b:55:9d:7b:f0:2f:94:07:12:a5:39:b1:32:49:c8:bf:3d:97:
52:d1:e9:58:d5:99:99:c4:83:34:b9:8c:c7:21:15:d2:ee:e5:
c3:9d:b8:12:2f:a0:2f:f8:43:a9:5e:d1:22:af:88:59:2d:6d:
aa:f6:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org