Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS7922.roa
File: AS7922.roa (raw, json)
Hash identifier: 8agiLji9JAbxPIy29fL0p3uxptogzjPPNVr9d2/0rKg=
Subject key identifier: E6:76:F3:34:68:31:45:DB:00:33:73:7F:28:CA:6B:85:E4:83:E4:9B
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: D80C5C642B441CE495A7FF86A722F5BAC40FE7
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS7922.roa
Signing time: Mon 28 Nov 2022 09:41:21 +0000
ROA not before: Mon 28 Nov 2022 09:36:21 +0000
ROA not after: Mon 27 Nov 2023 09:41:21 +0000
asID: 7922
IP address blocks: 216.122.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d8:0c:5c:64:2b:44:1c:e4:95:a7:ff:86:a7:22:f5:ba:c4:0f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Nov 28 09:36:21 2022 GMT
Not After : Nov 27 09:41:21 2023 GMT
Subject: CN=E676F334683145DB0033737F28CA6B85E483E49B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:87:19:75:31:7e:36:b2:56:d5:6a:b1:b8:
6c:86:f8:66:bf:7f:44:ba:72:1b:54:ca:43:28:57:
03:7d:16:c7:c2:c3:a0:a7:a2:90:19:9b:3c:90:0d:
aa:a0:8b:2c:40:cc:3d:20:e1:44:92:47:ae:06:91:
4c:e7:5f:fe:a5:26:e6:10:d3:41:f4:e9:ae:2e:d0:
c9:b8:f0:29:e5:fe:db:b2:05:c9:05:4c:c8:0c:03:
6d:87:bc:e2:00:82:b3:a4:9f:1c:a0:6c:17:2f:aa:
da:24:78:3f:26:38:4c:bf:8e:b2:26:49:4d:41:5c:
e9:1f:92:b2:53:d9:ac:07:19:e0:1d:73:81:3b:95:
d5:8e:47:f5:fc:3c:e0:bd:fc:0a:38:11:d8:d0:28:
b4:fe:3f:39:bc:32:57:e7:97:32:f0:06:41:c8:7a:
cb:e3:52:1b:04:b5:1a:f9:f8:ce:e9:e5:ef:a0:55:
80:a6:d7:a7:b2:85:ee:c3:1a:3a:be:b3:51:47:a2:
03:b5:a7:3b:39:7f:88:bf:20:01:f6:6e:13:58:39:
35:d7:85:d9:be:9d:ea:6a:18:45:b5:52:36:08:e4:
4c:9f:12:17:f8:df:60:29:8a:40:37:f5:93:ce:ad:
a2:5a:52:4e:72:43:b5:45:f6:d1:e0:ff:1d:7d:60:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:76:F3:34:68:31:45:DB:00:33:73:7F:28:CA:6B:85:E4:83:E4:9B
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS7922.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.183.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:2b:25:59:79:dc:e3:81:fd:c5:19:b9:28:15:f5:9f:56:60:
b9:40:b3:23:0b:73:04:a1:48:55:74:9f:70:36:77:a1:dd:54:
e8:98:43:c5:a9:bd:9d:1e:0e:d9:3a:05:24:c2:c1:09:de:65:
a0:2f:24:18:ff:be:b2:17:5a:f6:4a:1b:86:b3:ce:af:9f:c9:
8e:9d:89:c6:d2:14:2c:2e:9e:fb:dc:17:61:bf:b1:cb:61:ad:
d8:c7:1d:9a:a1:11:90:3f:f0:28:3c:77:46:4b:a3:bf:6d:b8:
fe:99:15:52:35:58:9b:e2:69:1e:ec:55:9e:d6:7a:fe:10:ac:
92:8d:d2:bf:d9:d9:7d:bc:56:5d:21:5a:3b:9d:51:59:27:56:
cc:34:72:2c:66:bf:75:8a:63:ee:55:5f:98:31:6b:4b:61:af:
14:0c:95:7c:07:6e:02:47:41:7b:1c:05:fc:0f:99:a4:a9:22:
3d:a8:75:d3:09:e8:fc:82:4f:2b:6a:38:01:f0:0b:88:70:37:
58:a5:50:99:38:b1:a1:34:5d:9d:5d:7d:79:df:8a:06:52:cf:
f5:8f:f9:52:2a:44:d8:33:97:87:3e:6a:b7:79:f7:3f:3f:98:
f6:90:34:cb:af:5f:fb:b8:70:9b:41:91:62:92:4d:1a:8c:ef:
de:b1:f3:34
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUANgMXGQrRBzklaf/hqci9brED+cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzU5NjU0M2E0YzkwYzM5OGFkN2VmNjk5
YmRlOGM3OWVkZDJlMGI4YWMwHhcNMjIxMTI4MDkzNjIxWhcNMjMxMTI3MDk0MTIx
WjAzMTEwLwYDVQQDEyhFNjc2RjMzNDY4MzE0NURCMDAzMzczN0YyOENBNkI4NUU0
ODNFNDlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmaHGXUxfjay
VtVqsbhshvhmv39EunIbVMpDKFcDfRbHwsOgp6KQGZs8kA2qoIssQMw9IOFEkkeu
BpFM51/+pSbmENNB9OmuLtDJuPAp5f7bsgXJBUzIDANth7ziAIKzpJ8coGwXL6ra
JHg/JjhMv46yJklNQVzpH5KyU9msBxngHXOBO5XVjkf1/DzgvfwKOBHY0Ci0/j85
vDJX55cy8AZByHrL41IbBLUa+fjO6eXvoFWAptensoXuwxo6vrNRR6IDtac7OX+I
vyAB9m4TWDk114XZvp3qahhFtVI2CORMnxIX+N9gKYpAN/WTzq2iWlJOckO1RfbR
4P8dfWAXqwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFOZ28zRoMUXbADNzfyjKa4Xk
g+SbMB8GA1UdIwQYMBaAFEzEOYug/lCqoIv6I/5wGtDCBgR/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzEv
NENDNDM5OEJBMEZFNTBBQUEwOEJGQTIzRkU3MDFBRDBDMjA2MDQ3Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNTk2NTQzYTRjOTBjMzk4YWQ3ZWY2OTliZGU4Yzc5ZWRkMmUwYjhhYy5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMS9BUzc5MjIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADYercwDQYJKoZIhvcNAQELBQADggEB
ALArJVl53OOB/cUZuSgV9Z9WYLlAsyMLcwShSFV0n3A2d6HdVOiYQ8WpvZ0eDtk6
BSTCwQneZaAvJBj/vrIXWvZKG4azzq+fyY6dicbSFCwunvvcF2G/scthrdjHHZqh
EZA/8Cg8d0ZLo79tuP6ZFVI1WJviaR7sVZ7Wev4QrJKN0r/Z2X28Vl0hWjudUVkn
Vsw0cixmv3WKY+5VX5gxa0thrxQMlXwHbgJHQXscBfwPmaSpIj2oddMJ6PyCTytq
OAHwC4hwN1ilUJk4saE0XZ1dfXnfigZSz/WP+VIqRNgzl4c+ard59z8/mPaQNMuv
X/u4cJtBkWKSTRqM796x8zQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org