Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS207459.roa
File: AS207459.roa (raw, json)
Hash identifier: xLJa7PyGaXVZ9BnLrM8j7LG5PJsHZCTlwG9huANr8ds=
Subject key identifier: B0:28:D3:69:02:6D:9E:2D:9E:61:90:9F:7D:5D:30:BB:60:51:9F:9D
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 0351BEBAB0BD01F5B09CBF18DB129A00AFCD41D7
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS207459.roa
Signing time: Wed 29 Mar 2023 07:38:47 +0000
ROA not before: Wed 29 Mar 2023 07:33:47 +0000
ROA not after: Wed 27 Mar 2024 07:38:47 +0000
asID: 207459
IP address blocks: 140.99.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:51:be:ba:b0:bd:01:f5:b0:9c:bf:18:db:12:9a:00:af:cd:41:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Mar 29 07:33:47 2023 GMT
Not After : Mar 27 07:38:47 2024 GMT
Subject: CN=B028D369026D9E2D9E61909F7D5D30BB60519F9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:81:bd:5f:d6:d0:ac:27:0f:5c:8c:f7:d2:
a3:c8:6f:09:31:49:08:b5:40:1f:6f:db:31:86:76:
90:3d:1a:c9:d7:a1:06:7d:f7:d6:3c:aa:82:1d:e9:
d0:38:34:b9:40:85:d6:80:7e:a1:c3:ff:ba:af:ee:
a0:14:54:16:2a:16:c2:96:3c:02:16:64:19:c2:ca:
ea:e6:28:27:76:92:f4:f2:a2:66:fb:85:f1:cc:e5:
94:ff:72:b6:31:f1:13:9e:b0:37:60:d5:bd:99:fd:
cb:0e:22:d8:7e:5b:22:6e:15:9e:44:ce:f3:20:b2:
e8:ee:06:92:67:9b:78:85:d3:a6:6f:d2:2b:17:86:
08:27:be:e7:ff:6c:91:c4:16:49:d3:9d:45:5e:b9:
2a:d3:81:45:ce:ee:01:98:fa:fe:d0:ad:24:28:04:
c9:6d:bc:a7:34:c3:96:9c:ec:d5:8f:b1:5a:2d:7f:
0f:f8:5d:08:c7:f2:55:e8:d5:bc:37:2f:2d:38:7d:
fc:1a:d2:5f:ba:13:f0:ab:75:e4:d9:d3:c3:8d:8a:
9d:8b:b6:8a:56:58:fd:15:e2:f4:7c:72:fe:a9:68:
f7:60:86:bf:f1:d3:ea:8d:2b:ca:61:78:81:e4:89:
ed:1a:45:e5:6f:41:a3:d0:63:ed:62:c5:95:b0:ab:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:28:D3:69:02:6D:9E:2D:9E:61:90:9F:7D:5D:30:BB:60:51:9F:9D
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS207459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.167.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a6:3b:66:eb:7f:01:e6:c1:9b:c8:96:85:6d:2f:f6:3b:7d:
07:79:cf:47:15:9b:9c:6c:9b:3e:89:4a:d8:10:ce:5a:29:94:
38:91:b9:d5:b2:6d:9e:97:1f:96:6a:d6:72:40:7a:cd:1d:9e:
8e:a2:d8:65:dc:09:28:88:05:25:30:4b:3b:57:5f:7e:c2:76:
41:e6:2b:83:24:7e:d6:95:17:a9:9d:6e:96:3d:de:9b:bf:38:
50:c8:44:69:8f:7f:5c:b4:6e:07:cb:1e:60:02:c0:0c:16:c5:
c9:a4:dc:91:2e:fe:de:3d:f9:27:24:0a:af:21:bb:5a:22:08:
db:54:08:65:56:ca:6b:c7:b5:4b:b5:0a:4b:1c:e4:cb:fb:de:
f7:aa:8c:0e:1d:dd:51:11:28:d3:ba:c7:5d:df:01:fd:3d:8e:
51:e4:d7:2e:99:cf:97:88:c7:35:1e:26:19:79:c2:4b:02:32:
ae:bb:a7:62:09:3b:b7:36:c5:50:8d:3a:a2:59:36:ac:db:7f:
db:84:a2:af:39:95:9b:0c:45:9c:70:3d:31:35:1b:32:61:73:
b1:3a:d1:db:59:a0:c4:ee:9f:90:23:c1:67:ca:c7:39:72:78:
ac:4e:26:bf:9d:e0:2a:15:6a:d8:cf:28:8c:ab:37:51:0a:10:
27:47:2d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:17 2025 by rpki-client