Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139362e302f32342d3234203d3e203630373231.roa
File: 3231362e3138352e3139362e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: UNtBxkwnRlVWIXYi21VaJmrcxkhNCHc4Q2xSbEFzU9M=
Subject key identifier: 02:FE:E6:65:49:6B:66:C9:A8:C6:1A:53:3D:A7:A4:17:ED:DF:7A:40
Certificate issuer: /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial: 712A98BD9C3AF32C838D1F12F2703B254AE65A53
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139362e302f32342d3234203d3e203630373231.roa
Signing time: Thu 26 Jan 2023 06:30:00 +0000
ROA not before: Thu 26 Jan 2023 06:25:00 +0000
ROA not after: Thu 25 Jan 2024 06:30:00 +0000
asID: 60721
IP address blocks: 216.185.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:2a:98:bd:9c:3a:f3:2c:83:8d:1f:12:f2:70:3b:25:4a:e6:5a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Validity
Not Before: Jan 26 06:25:00 2023 GMT
Not After : Jan 25 06:30:00 2024 GMT
Subject: CN=02FEE665496B66C9A8C61A533DA7A417EDDF7A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:48:7d:c8:97:c8:7e:0d:61:c5:ec:8d:c9:
ec:b0:a3:4d:2a:4b:72:ba:52:65:fc:93:0b:da:0a:
3a:1a:82:f7:2d:5f:39:0f:09:a8:89:15:6b:2a:b4:
0d:01:f7:14:6f:30:44:21:3c:a7:65:db:fe:56:a7:
ba:c1:9e:17:2d:47:68:25:c1:f6:f8:34:e7:d7:f8:
9a:42:dc:f7:05:93:11:7d:ea:86:ae:2e:7e:b6:48:
01:9a:78:22:19:d7:54:eb:a5:f6:25:c0:ac:ea:7a:
b2:12:6d:3b:fe:cd:b9:b2:36:af:01:62:5c:cc:5b:
d4:2e:36:dd:7f:fc:e7:84:2e:86:02:59:fc:05:04:
8b:f3:70:29:c0:0b:7b:c6:9b:b6:09:f1:8c:ca:e1:
a6:1a:51:f0:d4:9a:54:80:56:64:42:23:66:95:44:
35:6b:d0:08:1b:3e:d5:aa:c5:6c:b8:79:98:2f:ab:
69:b9:1b:14:44:dc:74:e5:83:da:59:28:32:e1:68:
68:c0:29:7b:ee:53:2a:57:c7:b5:1f:1c:d8:16:c6:
b8:14:ab:68:8f:da:25:c6:2d:0f:f7:6b:a9:79:97:
e8:e0:60:14:08:f0:64:f0:55:40:24:64:9a:fb:9d:
18:54:0c:10:8e:f0:9a:78:c3:08:41:be:5c:6d:ff:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FE:E6:65:49:6B:66:C9:A8:C6:1A:53:3D:A7:A4:17:ED:DF:7A:40
X509v3 Authority Key Identifier:
keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139362e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.185.196.0/24
Signature Algorithm: sha256WithRSAEncryption
75:7b:d8:e4:8f:d3:c1:c1:16:07:4f:b9:f4:35:c6:12:5b:a8:
00:7b:71:ad:4e:f1:27:bc:b3:09:02:1f:6f:49:57:0f:dd:11:
0e:5f:da:90:4e:23:f1:85:d4:30:e1:8d:2d:47:e9:c4:7c:8c:
7e:40:09:52:43:75:bf:76:a4:03:42:a1:18:14:82:d1:bb:1f:
55:64:07:6a:2f:df:f4:01:f4:a5:55:f9:1a:95:34:81:3d:b4:
45:8f:fa:67:5b:60:5f:9b:4a:08:4d:8a:b1:ab:58:eb:25:eb:
c8:e4:e9:b2:5a:fc:89:54:e1:dc:72:55:79:1c:3d:0c:03:b0:
20:0b:d1:31:9e:a3:04:b0:1d:d2:60:90:7e:8c:15:a7:68:5a:
1a:11:87:6b:18:6e:cc:be:91:d7:9a:fd:bd:48:c3:c1:c8:eb:
d0:b4:cd:a7:1b:5d:41:54:9e:64:7f:1d:f4:56:d1:47:da:ed:
d9:9f:ff:7b:fa:9b:13:04:6b:cf:78:7f:6c:9d:c5:89:10:12:
b2:69:ed:bf:e2:a0:f4:77:49:6e:83:94:4c:12:38:51:e6:19:
aa:01:e0:e8:2c:80:1b:6b:1b:11:88:4e:24:c3:70:86:38:15:
fa:08:9a:3a:6a:74:87:a6:21:cc:3c:8f:95:59:6a:ff:e8:02:
58:19:f4:ee
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUcSqYvZw68yyDjR8S8nA7JUrmWlMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTZhY2M3YWU3ZGFhMjFlNjBiMjMwNDRhNmIwZDU2ZTkw
MTE0MjAyM2ExNWI0ODgxZWQwHhcNMjMwMTI2MDYyNTAwWhcNMjQwMTI1MDYzMDAw
WjAzMTEwLwYDVQQDEygwMkZFRTY2NTQ5NkI2NkM5QThDNjFBNTMzREE3QTQxN0VE
REY3QTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxodIfciXyH4N
YcXsjcnssKNNKktyulJl/JML2go6GoL3LV85DwmoiRVrKrQNAfcUbzBEITynZdv+
Vqe6wZ4XLUdoJcH2+DTn1/iaQtz3BZMRfeqGri5+tkgBmngiGddU66X2JcCs6nqy
Em07/s25sjavAWJczFvULjbdf/znhC6GAln8BQSL83ApwAt7xpu2CfGMyuGmGlHw
1JpUgFZkQiNmlUQ1a9AIGz7VqsVsuHmYL6tpuRsURNx05YPaWSgy4WhowCl77lMq
V8e1HxzYFsa4FKtoj9olxi0P92upeZfo4GAUCPBk8FVAJGSa+50YVAwQjvCaeMMI
Qb5cbf9QsQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFAL+5mVJa2bJqMYaUz2npBft
33pAMB8GA1UdIwQYMBaAFHIdV4TcRiXmpdk5pvl3+8ihJCdWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1ZWNjMGJjYTU0Y2NmLzAv
NzIxRDU3ODREQzQ2MjVFNkE1RDkzOUE2Rjk3N0ZCQzhBMTI0Mjc1Ni5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2Y1ZjU1MzBjLWIwZTgtNGY4OS1hYjYyLWRiODcwY2I2NjgwZS8xNmFj
YzdhZTdkYWEyMWU2MGIyMzA0NGE2YjBkNTZlOTAxMTQyMDIzYTE1YjQ4ODFlZC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg1ODdmYTIwMDE4NWVj
YzBiY2E1NGNjZi8wLzMyMzEzNjJlMzEzODM1MmUzMTM5MzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMwMzczMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnEMA0GCSqGSIb3DQEB
CwUAA4IBAQB1e9jkj9PBwRYHT7n0NcYSW6gAe3GtTvEnvLMJAh9vSVcP3REOX9qQ
TiPxhdQw4Y0tR+nEfIx+QAlSQ3W/dqQDQqEYFILRux9VZAdqL9/0AfSlVfkalTSB
PbRFj/pnW2Bfm0oITYqxq1jrJevI5OmyWvyJVOHcclV5HD0MA7AgC9ExnqMEsB3S
YJB+jBWnaFoaEYdrGG7MvpHXmv29SMPByOvQtM2nG11BVJ5kfx30VtFH2u3Zn/97
+psTBGvPeH9sncWJEBKyae2/4qD0d0lug5RMEjhR5hmqAeDoLIAbaxsRiE4kw3CG
OBX6CJo6anSHpiHMPI+VWWr/6AJYGfTu
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org