Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: YBN5TplsKnmpKMIffLRB25EjWfmKTd3lgY3md5S0n8A=
Subject key identifier: 65:B1:11:B8:52:F7:78:88:8A:86:5B:33:ED:B3:C4:D3:0E:9D:5A:4A
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 71F9AAB46AAFA7D62612AC69051130F17A1D8119
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS61138.roa
Signing time: Mon 05 Dec 2022 14:56:05 +0000
ROA not before: Mon 05 Dec 2022 14:51:05 +0000
ROA not after: Mon 04 Dec 2023 14:56:05 +0000
asID: 61138
IP address blocks: 206.206.79.0/24 maxlen: 24
206.206.85.0/24 maxlen: 24
206.206.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f9:aa:b4:6a:af:a7:d6:26:12:ac:69:05:11:30:f1:7a:1d:81:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Dec 5 14:51:05 2022 GMT
Not After : Dec 4 14:56:05 2023 GMT
Subject: CN=65B111B852F778888A865B33EDB3C4D30E9D5A4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:84:d3:cd:2f:f6:fb:42:d5:c8:c8:ea:78:
d6:d5:2a:ae:26:02:42:a8:89:52:3f:59:ac:3c:0c:
91:16:c4:39:d0:96:1a:c2:5c:58:aa:a1:91:9f:91:
60:e4:c9:73:fc:4c:ee:d9:25:f1:ae:28:b3:39:ae:
b8:2d:7a:e1:b7:63:6f:2c:62:f6:fd:e5:b6:c9:18:
04:27:ba:4c:67:76:79:a9:5f:49:3b:c7:06:75:4d:
7c:9d:9f:86:0f:ac:a3:b8:0c:cb:d4:ba:6f:0b:01:
80:6d:eb:8d:43:c5:4d:3d:be:88:48:d5:b0:14:fa:
be:cf:9e:44:e4:3d:69:77:d4:12:34:30:ac:7b:93:
e0:bd:10:8a:6b:70:0a:1a:47:d5:53:89:87:c4:4e:
ab:20:bb:56:2b:e3:e7:27:bc:97:aa:07:a2:cf:56:
85:d9:b2:ff:9a:67:c4:82:8e:26:e2:18:3f:ac:4f:
39:55:4f:eb:b3:ec:6f:ca:eb:01:9c:02:e2:af:d2:
45:7d:82:fc:70:44:3f:fb:24:df:f3:ec:c4:c1:48:
71:c7:94:ff:9a:b1:1d:a2:5e:1a:94:f8:66:e9:52:
89:af:23:17:e5:54:35:82:fe:f1:05:96:cc:56:30:
90:fb:a0:f8:32:31:56:cc:08:ac:75:65:d6:64:f3:
85:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B1:11:B8:52:F7:78:88:8A:86:5B:33:ED:B3:C4:D3:0E:9D:5A:4A
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.79.0/24
206.206.85.0/24
206.206.99.0/24
Signature Algorithm: sha256WithRSAEncryption
be:ee:2f:92:00:95:17:92:f0:30:95:a3:e7:be:37:c9:80:45:
4d:78:21:e3:1f:ba:d7:cc:2d:93:83:82:45:fe:c9:de:ef:fb:
4b:b9:c7:3b:97:82:d8:b6:60:2d:fb:19:e8:56:29:da:86:f4:
ed:c8:4c:03:49:5e:c1:70:1d:e9:5b:a9:b6:35:e7:de:d4:7f:
47:27:6a:88:1b:8f:95:85:6f:7d:52:9e:a7:a3:73:cd:c6:ea:
01:cf:90:da:0e:d1:4d:48:3a:68:06:c7:5b:27:53:dd:2a:f6:
75:5b:5d:39:d9:d8:d9:0f:7d:dc:30:20:33:38:e0:6b:62:eb:
41:a6:a4:bd:ad:32:3b:0d:4b:e9:c2:df:2f:6d:fc:41:76:d9:
7b:9e:7b:64:9d:d8:9f:9c:5b:36:6e:ee:3f:bf:0f:73:c9:ca:
fd:5d:26:75:c5:45:c2:8c:42:1d:ec:b0:8d:6f:29:4e:cd:97:
48:5e:95:ec:dd:fa:83:61:c5:e5:ad:ed:60:b8:0a:49:f8:70:
d7:61:a0:29:bb:ae:81:49:0b:d0:80:f5:51:37:25:51:78:5b:
ef:63:8f:63:30:5a:b4:ba:c1:8e:68:c0:2a:4c:7f:d2:37:4b:
7d:00:2b:0c:48:7f:92:8d:0c:52:80:ae:a5:78:e2:6e:bb:1a:
0d:84:de:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org