Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139362e302f32342d3234203d3e20383334.roa
File: 3231362e3138352e3139362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: x/4x409M7xp00wAQ7EzXedZDi3X39/3f2HMne+Jvnps=
Subject key identifier: A0:EA:65:FD:F1:B6:AE:B8:B9:53:B6:13:6D:5F:9C:0B:77:55:ED:3F
Certificate issuer: /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial: 544ABA84B227212F5CB81850DAF14120958C2708
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139362e302f32342d3234203d3e20383334.roa
Signing time: Wed 22 Feb 2023 11:57:36 +0000
ROA not before: Wed 22 Feb 2023 11:52:36 +0000
ROA not after: Wed 21 Feb 2024 11:57:36 +0000
asID: 834
IP address blocks: 216.185.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:4a:ba:84:b2:27:21:2f:5c:b8:18:50:da:f1:41:20:95:8c:27:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Validity
Not Before: Feb 22 11:52:36 2023 GMT
Not After : Feb 21 11:57:36 2024 GMT
Subject: CN=A0EA65FDF1B6AEB8B953B6136D5F9C0B7755ED3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:93:63:49:02:e8:65:e8:3f:56:74:2a:08:6e:
95:65:57:c8:48:15:50:56:15:6b:0e:e1:f3:41:b6:
f0:f0:d2:11:b4:76:9b:fd:fb:bc:89:8a:c5:be:13:
31:ec:c0:39:a1:d1:6e:fa:da:45:4b:51:fb:41:89:
7e:a9:80:34:9f:2d:9c:37:8b:dc:5c:de:48:37:a9:
5e:77:b2:93:a7:60:94:c5:85:34:0c:ed:9e:8f:ea:
e7:3a:cd:5c:0d:c8:d6:69:cb:9d:8a:6d:5d:84:dd:
ab:46:7c:af:7a:2d:2a:01:6a:e6:b3:d8:c9:f8:46:
28:15:f2:13:30:75:5c:e9:89:5a:ce:f5:0e:31:c8:
96:04:57:c0:51:58:a5:e4:6e:7b:60:ab:cf:87:18:
f9:92:62:39:54:aa:a3:2c:80:72:14:61:e2:be:35:
3d:25:56:50:2e:f6:cf:dc:5e:85:ac:f9:ab:cb:88:
96:a8:84:b2:74:fe:43:07:e6:e9:ee:a4:12:d0:fe:
07:a4:a6:b4:a1:09:9f:3e:3d:ad:6e:de:a8:84:8d:
d4:3b:1f:55:7b:ce:7f:23:7b:8a:08:8a:de:77:33:
d1:b4:75:7e:2d:b1:bf:2e:a4:f4:9c:66:69:fa:a1:
1d:79:6b:ea:da:1b:6f:04:97:78:94:15:f4:a9:4e:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EA:65:FD:F1:B6:AE:B8:B9:53:B6:13:6D:5F:9C:0B:77:55:ED:3F
X509v3 Authority Key Identifier:
keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.185.196.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9a:9e:fc:37:b8:59:c5:b1:21:57:4e:a2:54:d7:50:6e:1f:
a1:8c:4a:9d:93:93:cc:c7:4a:2d:a6:97:53:ba:9e:30:f8:94:
fe:9f:b8:04:a2:ab:a2:a1:cd:a5:47:a5:2d:bd:a5:e5:24:16:
72:4d:c6:f6:14:cb:54:63:19:9c:36:b3:48:4e:37:db:42:e3:
cd:de:e7:08:44:10:6e:d4:5c:5f:a9:be:98:10:66:15:3e:2c:
f5:ad:33:0d:6a:7b:22:77:eb:29:0c:7b:28:95:f7:ef:1a:f3:
c8:0d:5d:a2:81:ea:7e:07:2a:62:8b:8c:a7:04:d4:96:94:4d:
5f:cd:55:b2:4d:7a:42:cf:22:f2:87:ee:f1:cc:f6:0a:69:11:
7a:6c:1e:e7:74:ca:f8:50:49:f7:f3:aa:e0:3a:7c:3f:2f:c3:
8c:d4:3b:ec:60:94:a6:4d:bb:e8:35:6e:28:39:9f:f4:2c:f4:
12:5b:10:29:50:a6:f9:a9:c6:dd:9e:2d:55:96:0a:db:01:2c:
3e:ae:17:c8:de:45:3d:86:11:47:6b:9d:fa:76:4f:0c:d3:85:
6e:df:66:b0:83:a2:1f:0e:82:54:7c:ae:c3:85:43:32:39:f1:
c1:80:de:58:ed:8b:d6:dc:31:3b:f3:90:4d:dc:a6:d2:74:0e:
20:96:fc:d5
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUVEq6hLInIS9cuBhQ2vFBIJWMJwgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTZhY2M3YWU3ZGFhMjFlNjBiMjMwNDRhNmIwZDU2ZTkw
MTE0MjAyM2ExNWI0ODgxZWQwHhcNMjMwMjIyMTE1MjM2WhcNMjQwMjIxMTE1NzM2
WjAzMTEwLwYDVQQDEyhBMEVBNjVGREYxQjZBRUI4Qjk1M0I2MTM2RDVGOUMwQjc3
NTVFRDNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JNjSQLoZeg/
VnQqCG6VZVfISBVQVhVrDuHzQbbw8NIRtHab/fu8iYrFvhMx7MA5odFu+tpFS1H7
QYl+qYA0ny2cN4vcXN5IN6led7KTp2CUxYU0DO2ej+rnOs1cDcjWacudim1dhN2r
Rnyvei0qAWrms9jJ+EYoFfITMHVc6YlazvUOMciWBFfAUVil5G57YKvPhxj5kmI5
VKqjLIByFGHivjU9JVZQLvbP3F6FrPmry4iWqISydP5DB+bp7qQS0P4HpKa0oQmf
Pj2tbt6ohI3UOx9Ve85/I3uKCIredzPRtHV+LbG/LqT0nGZp+qEdeWvq2htvBJd4
lBX0qU7fOQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFKDqZf3xtq64uVO2E21fnAt3
Ve0/MB8GA1UdIwQYMBaAFHIdV4TcRiXmpdk5pvl3+8ihJCdWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1ZWNjMGJjYTU0Y2NmLzAv
NzIxRDU3ODREQzQ2MjVFNkE1RDkzOUE2Rjk3N0ZCQzhBMTI0Mjc1Ni5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2Y1ZjU1MzBjLWIwZTgtNGY4OS1hYjYyLWRiODcwY2I2NjgwZS8xNmFj
YzdhZTdkYWEyMWU2MGIyMzA0NGE2YjBkNTZlOTAxMTQyMDIzYTE1YjQ4ODFlZC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg1ODdmYTIwMDE4NWVj
YzBiY2E1NGNjZi8wLzMyMzEzNjJlMzEzODM1MmUzMTM5MzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADYucQwDQYJKoZIhvcNAQELBQAD
ggEBAIWanvw3uFnFsSFXTqJU11BuH6GMSp2Tk8zHSi2ml1O6njD4lP6fuASiq6Kh
zaVHpS29peUkFnJNxvYUy1RjGZw2s0hON9tC483e5whEEG7UXF+pvpgQZhU+LPWt
Mw1qeyJ36ykMeyiV9+8a88gNXaKB6n4HKmKLjKcE1JaUTV/NVbJNekLPIvKH7vHM
9gppEXpsHud0yvhQSffzquA6fD8vw4zUO+xglKZNu+g1big5n/Qs9BJbEClQpvmp
xt2eLVWWCtsBLD6uF8jeRT2GEUdrnfp2TwzThW7fZrCDoh8OglR8rsOFQzI58cGA
3ljti9bcMTvzkE3cptJ0DiCW/NU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org