Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS49999.roa
File: AS49999.roa (raw, json)
Hash identifier: U13wUAhfDz9lQ0QcRNSd1bsKBNLJyKhiz4NFPWMWLDE=
Subject key identifier: C7:1A:DA:84:1E:E2:29:A8:95:50:F6:54:67:1A:2B:49:B1:E5:E3:DD
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 10D0510BCBAC6B13D800EEBFB09741657E2C1D00
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS49999.roa
Signing time: Thu 08 Dec 2022 00:00:09 +0000
ROA not before: Wed 07 Dec 2022 23:55:09 +0000
ROA not after: Thu 07 Dec 2023 00:00:09 +0000
asID: 49999
IP address blocks: 206.206.80.0/22 maxlen: 22
206.206.80.0/24 maxlen: 24
206.206.83.0/24 maxlen: 24
206.206.121.0/24 maxlen: 24
216.122.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d0:51:0b:cb:ac:6b:13:d8:00:ee:bf:b0:97:41:65:7e:2c:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Dec 7 23:55:09 2022 GMT
Not After : Dec 7 00:00:09 2023 GMT
Subject: CN=C71ADA841EE229A89550F654671A2B49B1E5E3DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:1c:4d:11:c9:10:8f:f2:d4:de:71:f0:09:
88:cc:8b:ab:ff:cc:fa:ce:ad:27:f6:22:f2:67:71:
dc:e2:ed:9d:a5:ef:12:0b:8a:a1:87:5b:31:8e:f8:
ce:65:0e:bc:cf:cd:e0:46:f6:a1:ef:0a:b5:73:4f:
7b:77:2b:ce:44:4f:73:5e:cf:a4:af:e5:29:c8:41:
d2:51:5e:5c:fd:eb:f5:af:e3:58:93:b6:79:81:85:
ca:b8:d5:b4:a7:2f:d2:09:88:35:67:e5:d7:79:ae:
66:85:c0:29:d4:26:ed:74:0f:97:08:21:a8:ba:c8:
e6:6d:b1:b5:b5:d9:85:e6:4e:42:02:da:89:af:54:
55:d6:c6:07:a3:c9:3a:a3:56:0e:f0:82:51:d4:00:
fc:21:18:5a:bb:9b:19:1d:dc:1f:f8:6d:41:85:4e:
f5:67:40:46:c2:73:03:41:9b:63:d3:e2:45:a0:d2:
37:f6:85:43:e8:c1:7b:4f:97:37:80:46:7c:58:c4:
3f:d2:d7:90:a3:43:75:94:f0:a0:2a:8d:e1:e4:cd:
36:12:e8:eb:df:f7:8f:d8:2d:6a:56:cf:ee:b2:05:
de:86:02:93:0a:1a:84:a9:df:8b:2c:c1:6f:b3:9f:
9c:8b:0f:fd:56:10:bc:49:9f:9c:38:70:01:4f:16:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1A:DA:84:1E:E2:29:A8:95:50:F6:54:67:1A:2B:49:B1:E5:E3:DD
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS49999.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.80.0/22
206.206.121.0/24
216.122.172.0/22
Signature Algorithm: sha256WithRSAEncryption
47:4e:7c:00:53:85:55:07:91:46:a8:b9:85:e1:64:44:f4:75:
6f:02:4f:80:ea:c7:34:e0:5d:f2:cc:32:a0:87:00:57:70:b7:
b8:9e:c6:42:b1:c7:01:1d:bb:a3:d7:1d:3e:8b:da:60:46:ac:
71:88:c5:01:f1:b2:42:d6:0d:83:ba:fd:3b:2f:1f:e0:92:22:
02:e2:af:80:97:46:69:fe:8e:cb:66:4a:d5:d1:d7:db:d0:40:
88:e5:36:c3:95:f2:ba:82:8f:f5:68:37:0c:d6:2d:09:ce:2a:
12:b3:f6:88:f7:ab:8d:78:a9:e7:35:26:df:55:66:71:88:20:
7f:6d:2b:a7:2d:23:19:8f:5d:bf:d4:ad:e7:e3:00:9c:ae:c6:
db:d1:8a:fd:96:82:32:2d:01:f4:b4:37:e5:b6:e5:c9:b3:3d:
67:81:4c:20:a3:66:b3:93:71:d5:69:a8:9d:f2:d1:a4:ef:9e:
b5:24:75:bd:cb:a0:a4:bd:20:ba:6a:95:af:ca:79:33:86:f0:
24:e7:08:b8:99:e7:2a:3d:fd:22:f3:78:46:99:45:eb:fa:55:
32:5d:6e:91:d6:44:ad:32:a7:28:0f:4d:da:bc:f1:68:24:75:
9b:50:1c:09:8b:8a:1e:dd:f9:aa:d7:84:57:0e:7e:27:82:2e:
12:07:6f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org