Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3132322e3131322e302f32302d3234203d3e203232373733.roa
File: 3231362e3132322e3131322e302f32302d3234203d3e203232373733.roa (raw, json)
Hash identifier: LYdpjD9INysFtkMS0cmUKrnLZqnCyvWYcWhFGmX27WY=
Subject key identifier: 42:C3:54:BF:B8:8C:54:32:05:95:02:D7:B5:BD:B1:7A:2C:AD:62:45
Certificate issuer: /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial: 29D154D3FAF4C6ED4F9E9C9EFABACC1C7FF880A1
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3132322e3131322e302f32302d3234203d3e203232373733.roa
Signing time: Tue 12 Jul 2022 05:47:35 +0000
ROA not before: Tue 12 Jul 2022 05:42:35 +0000
ROA not after: Tue 11 Jul 2023 05:47:35 +0000
asID: 22773
IP address blocks: 216.122.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d1:54:d3:fa:f4:c6:ed:4f:9e:9c:9e:fa:ba:cc:1c:7f:f8:80:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Validity
Not Before: Jul 12 05:42:35 2022 GMT
Not After : Jul 11 05:47:35 2023 GMT
Subject: CN=42C354BFB88C5432059502D7B5BDB17A2CAD6245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:3a:84:26:81:5f:25:fd:44:fb:64:8a:c6:
83:e3:e6:4d:b5:f5:ed:a8:54:cd:5e:25:94:8f:f5:
9a:07:ec:df:92:78:da:21:94:4d:1e:f6:78:3c:07:
53:dd:48:64:70:ad:f5:85:64:23:cb:33:a1:7e:34:
90:f3:5b:ce:ec:23:a8:d0:7d:f4:85:49:98:e3:1b:
40:84:99:d2:78:28:9c:b2:c1:98:b4:31:ec:84:40:
56:fb:4f:6c:de:9a:6a:c1:86:5e:9a:d1:1e:63:d4:
93:78:ef:38:e9:04:0e:bd:21:f0:d8:47:60:1a:2f:
f7:19:6c:40:a1:59:cb:fd:f8:6a:cc:ed:0b:e3:01:
29:94:f7:5f:a7:20:f8:e3:71:7b:fb:d5:d5:ae:bb:
0d:12:c9:61:6a:b1:b4:2b:82:0a:68:b1:96:75:36:
72:c7:0f:b5:a2:ad:d1:86:ab:92:77:a2:59:cb:57:
a4:df:b6:3d:6e:43:34:80:24:02:14:9f:66:91:7a:
0d:e0:c9:f1:89:a2:d4:fe:b4:07:2f:2b:57:4b:ba:
eb:6b:af:cf:3c:65:6b:6d:0d:40:ab:d2:43:7f:34:
4c:dc:be:fe:bc:68:de:f4:c3:e8:ad:4f:17:cf:7f:
5b:8c:f1:b3:5e:7c:de:b7:b5:73:6d:1e:e4:0b:e5:
b4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C3:54:BF:B8:8C:54:32:05:95:02:D7:B5:BD:B1:7A:2C:AD:62:45
X509v3 Authority Key Identifier:
keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3132322e3131322e302f32302d3234203d3e203232373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.122.112.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:85:eb:b6:de:81:d7:cf:b0:74:62:73:cc:66:f8:48:78:49:
a7:48:1e:a3:bf:16:97:4e:c9:02:02:9e:ad:00:90:98:0c:09:
71:12:62:30:8a:36:08:0c:82:48:d7:75:f5:5a:c2:81:b8:55:
d6:85:64:09:b2:6c:08:6c:fb:c7:dc:4d:b6:b0:16:e0:9b:8d:
71:c5:ea:4b:f3:cd:32:e6:63:5f:91:b1:1f:0b:59:7c:5d:a0:
4a:d0:bd:63:97:4e:0e:7b:cc:97:94:70:5d:55:b7:3a:76:ad:
8c:3a:b0:11:db:85:84:4b:92:ec:71:00:63:6c:e9:90:03:90:
d9:ed:ba:37:53:d0:f1:bd:6c:ee:b4:e8:52:dd:be:04:e1:08:
ff:d1:c0:e4:3a:6b:86:a3:a7:d9:22:80:af:f3:a2:ea:68:d1:
a5:62:16:9c:da:7c:27:67:9e:67:fa:62:b8:6f:c1:35:19:c9:
9b:78:a7:0d:06:99:ff:71:23:d9:2a:cb:c2:9c:ef:f7:79:82:
85:5d:fc:4d:90:36:d4:55:27:29:e8:61:ea:fa:a8:17:71:70:
09:17:4a:74:4f:03:02:83:7f:ac:47:2e:5b:7a:7d:a4:0f:ec:
1b:39:d2:12:31:00:0d:fd:c6:e5:19:dd:f1:c0:10:f6:cd:25:
ab:f2:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org