Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS51765.roa
File: AS51765.roa (raw, json)
Hash identifier: 76pxja0MttzCkvHg0IHf6NYxhNPsTNwAeYCyNOCZo6Y=
Subject key identifier: 65:F1:A5:35:48:49:AA:E4:7F:C6:DB:F8:15:78:C7:64:15:18:48:A3
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 6BF6EE1C8E550258ACB1EC9B148D296A35F9C12E
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS51765.roa
Signing time: Mon 28 Nov 2022 09:41:20 +0000
ROA not before: Mon 28 Nov 2022 09:36:20 +0000
ROA not after: Mon 27 Nov 2023 09:41:20 +0000
asID: 51765
IP address blocks: 206.206.81.0/24 maxlen: 24
206.206.116.0/24 maxlen: 24
206.206.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f6:ee:1c:8e:55:02:58:ac:b1:ec:9b:14:8d:29:6a:35:f9:c1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Nov 28 09:36:20 2022 GMT
Not After : Nov 27 09:41:20 2023 GMT
Subject: CN=65F1A5354849AAE47FC6DBF81578C764151848A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:f2:61:f4:bc:19:c1:6a:75:5d:c8:2e:a2:
6b:ef:02:23:54:86:45:ef:6d:67:a3:1a:a2:85:a5:
cc:5c:2f:e2:4e:87:c2:e8:26:70:8c:16:72:86:32:
09:a7:8b:5a:06:11:15:26:91:0f:4d:e4:ef:37:ac:
23:f7:3d:01:37:63:3c:78:94:22:95:45:70:6c:b3:
34:21:51:c5:73:93:0e:c1:51:00:15:76:67:19:6f:
aa:77:1d:b8:d4:77:1b:9c:06:f8:79:77:ec:bd:0d:
a4:42:9d:cf:ad:a6:4f:31:6a:69:3c:9c:5c:74:7d:
ab:ee:fc:f0:ed:eb:c2:b3:cd:1d:7d:b9:57:13:7e:
66:cf:aa:6f:54:df:eb:32:85:d6:7a:85:9b:5a:a4:
11:af:3d:04:cc:64:e0:cc:fd:80:39:96:89:4a:98:
48:60:a4:70:cc:f8:58:c0:21:bd:5e:4a:77:f7:1f:
56:ec:d7:9f:df:20:11:b4:17:e1:df:86:16:b6:fa:
ce:c9:8a:bf:91:b4:6f:6e:71:e0:5a:21:11:89:81:
9c:31:87:c2:77:6e:de:bd:f7:3a:fa:b8:64:c0:ba:
c5:0e:eb:b5:de:d0:a9:4e:ab:6f:a8:1d:5a:59:5e:
9b:0b:c7:4e:42:69:c1:fa:9a:fe:e9:5b:27:8c:76:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F1:A5:35:48:49:AA:E4:7F:C6:DB:F8:15:78:C7:64:15:18:48:A3
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS51765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.81.0/24
206.206.116.0/24
206.206.123.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e8:61:f5:fb:02:0e:14:6b:5a:df:f5:71:91:87:4b:41:d2:
7c:bd:12:4c:43:bf:e5:5c:13:da:18:b4:cb:bf:1c:61:50:9e:
a1:d8:29:6d:38:44:7e:a5:a9:30:0f:83:5f:87:8b:fa:ae:71:
63:18:3e:ef:b0:90:e0:73:d0:f3:39:b1:f6:cb:40:dd:e6:58:
cd:7a:6d:af:6e:8d:ac:c6:c4:70:d6:bd:77:87:f8:94:01:57:
15:31:43:0d:90:d1:39:43:b1:02:3c:0f:7e:67:b2:4c:14:e7:
d5:cb:d2:07:ff:75:51:43:29:ea:1d:02:ab:82:e6:76:c4:ef:
0e:61:64:2a:39:ba:70:86:f0:ba:e4:35:08:2f:5d:8c:29:ed:
82:21:6c:f0:a9:a5:51:61:d8:db:e4:dc:f9:cf:5d:cb:b1:ca:
98:85:de:66:79:57:8b:88:25:8d:30:5f:35:78:fe:3f:83:ee:
48:46:50:27:63:7e:db:ff:09:c4:e6:2c:40:4c:f5:bd:39:90:
2d:66:37:eb:58:d9:02:b0:36:b7:29:b7:69:11:3a:4d:ed:b2:
fa:e8:07:f1:d4:98:78:fa:06:01:7c:c6:8f:3c:82:95:1c:7c:
d7:fa:e7:eb:8a:c6:62:c7:3e:ba:fd:43:3a:24:11:60:69:ee:
5f:1e:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org