Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS8100.roa
File: AS8100.roa (raw, json)
Hash identifier: e6S9vIzUwnEi2tsESUEDmjPJr57qyobHOTKPX54R2ew=
Subject key identifier: 8A:D1:F8:97:2A:5A:42:E9:8C:13:C1:F3:A2:2F:6F:70:4C:9E:87:B5
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 2981853C34C80F3A72CDB929B1DA1C1DF5B4B09D
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS8100.roa
Signing time: Mon 28 Nov 2022 09:41:20 +0000
ROA not before: Mon 28 Nov 2022 09:36:20 +0000
ROA not after: Mon 27 Nov 2023 09:41:20 +0000
asID: 8100
IP address blocks: 206.206.68.0/24 maxlen: 24
206.206.122.0/24 maxlen: 24
216.122.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:81:85:3c:34:c8:0f:3a:72:cd:b9:29:b1:da:1c:1d:f5:b4:b0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Nov 28 09:36:20 2022 GMT
Not After : Nov 27 09:41:20 2023 GMT
Subject: CN=8AD1F8972A5A42E98C13C1F3A22F6F704C9E87B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:3b:af:88:4b:d4:b8:f6:1c:4e:83:3b:1c:
46:7c:dc:3a:bd:64:7e:86:28:63:b3:3f:97:d2:32:
21:d1:c6:e5:21:09:52:97:88:76:7a:e1:81:82:28:
79:65:19:58:92:df:e6:1a:9a:78:76:ce:54:76:72:
db:3e:77:3c:bb:1e:e4:b7:d3:d4:67:a5:fb:48:f3:
c9:8b:73:c7:c1:2d:5e:9b:d5:0e:00:79:3d:2e:41:
b5:a9:47:a5:d5:46:94:87:45:41:29:e2:07:fc:be:
09:d0:5a:c1:76:5e:81:02:c6:1d:f5:94:31:b8:bf:
54:12:67:6a:0a:8e:e0:b7:34:2c:d7:1b:4a:ad:53:
66:c6:dd:56:bb:eb:99:23:cb:02:aa:d0:31:4c:f3:
06:a2:b1:71:9d:fc:d6:83:1b:9d:68:09:7d:93:f2:
be:d8:04:e1:86:a5:22:2d:39:30:48:44:12:a3:82:
b9:51:c6:97:64:95:c4:1e:3c:95:9c:17:6f:22:5d:
82:39:0f:16:5a:ea:6b:d7:54:22:2f:01:82:99:1b:
09:29:c0:de:f6:f7:57:d8:99:28:2c:c7:25:bc:f6:
eb:c7:58:05:00:32:a5:05:ae:03:ba:46:d7:c0:b2:
3e:a1:66:29:77:3a:12:59:aa:7c:99:6f:5a:26:ad:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D1:F8:97:2A:5A:42:E9:8C:13:C1:F3:A2:2F:6F:70:4C:9E:87:B5
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS8100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.68.0/24
206.206.122.0/24
216.122.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:4b:89:fe:3c:e4:3e:2a:78:d7:77:c0:a9:10:cf:0c:d3:9d:
53:f7:10:2f:37:f6:fb:2d:8f:0a:7e:48:03:ff:a2:84:04:52:
e4:fd:d8:fc:84:a2:95:ae:8f:ea:3a:2d:e1:1d:b8:45:07:8d:
12:1b:96:25:c6:84:3f:0b:db:3d:8f:44:40:e3:58:4f:01:cc:
ae:df:26:97:45:ff:04:f5:79:c6:78:97:c9:87:09:f5:64:74:
6c:9e:59:b2:97:c0:45:bb:7e:38:1d:69:ba:d7:68:b2:a9:83:
10:ee:a1:74:ab:5a:50:f3:cc:e8:0d:d1:c8:a3:73:5f:cb:99:
c5:57:38:d3:6e:96:e2:84:bd:e5:cc:8d:e4:00:7e:9c:17:b6:
3e:af:e2:81:ba:75:9c:de:2d:75:54:d0:3c:bf:b7:25:0e:94:
8e:6f:04:d6:0e:e8:4a:07:dd:40:58:9e:a5:2d:7a:32:3b:0c:
48:5f:0d:7c:76:85:72:35:9f:bc:20:f6:f8:f3:94:ea:ef:9d:
95:b5:74:1e:2c:82:0a:8a:78:03:95:0c:5f:5e:3d:d5:95:54:
d2:4a:26:92:90:0a:6c:d0:36:08:e4:d1:92:80:cf:8b:34:39:
9c:8e:e5:25:23:63:13:c3:f9:25:ef:42:f6:c3:16:39:9f:48:
37:9b:e5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org