Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139392e302f32342d3234203d3e20383334.roa
File: 3231362e3138352e3139392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: K9tt+vHs6plsFyeaZRSnGGU6EiGAUxnLco0q7vGpiA0=
Subject key identifier: A9:88:30:8E:53:B1:CE:C6:59:A1:33:67:B5:66:A2:8D:69:B5:D6:F5
Certificate issuer: /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial: 19AD676DE7D130B813BA6DE1104065BB5ACD62AE
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139392e302f32342d3234203d3e20383334.roa
Signing time: Wed 12 Apr 2023 18:30:08 +0000
ROA not before: Wed 12 Apr 2023 18:25:08 +0000
ROA not after: Wed 10 Apr 2024 18:30:08 +0000
asID: 834
IP address blocks: 216.185.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ad:67:6d:e7:d1:30:b8:13:ba:6d:e1:10:40:65:bb:5a:cd:62:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Validity
Not Before: Apr 12 18:25:08 2023 GMT
Not After : Apr 10 18:30:08 2024 GMT
Subject: CN=A988308E53B1CEC659A13367B566A28D69B5D6F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:f7:08:50:a7:99:fd:d0:13:b3:fe:93:20:
59:19:72:b1:83:bb:39:e0:5e:3e:06:b5:0d:95:e2:
e9:7d:02:15:e5:c1:a6:01:a4:99:ce:83:06:3a:87:
30:f3:11:e8:d0:7c:1a:57:14:ab:37:f9:51:5a:c1:
ba:59:b2:f5:0d:1d:0e:2d:98:18:8b:c5:6c:c5:f7:
d4:56:62:ee:7f:e5:1a:24:8f:6c:1f:3c:a1:5e:ee:
61:05:93:43:e6:34:1d:11:b2:f2:26:45:77:2e:42:
2e:c4:cb:3b:b2:e3:2e:33:98:d4:f2:54:f4:91:3b:
c7:31:60:69:ff:30:75:9a:64:e1:ac:8b:65:2f:bc:
63:8d:bc:ed:db:77:c2:2c:54:47:a0:25:a8:c1:fa:
85:45:18:f4:53:af:31:18:0d:a9:93:af:29:75:e3:
31:0c:ce:90:32:2b:c2:4b:ca:67:c7:ce:68:92:53:
20:d5:1d:51:fc:ff:55:3d:3b:44:9f:22:79:64:bc:
84:31:9a:92:39:8a:f7:6e:0f:6e:65:c8:71:88:39:
6f:85:6b:ff:f5:3d:72:50:fd:55:cc:53:d6:15:c3:
59:8a:a1:d0:d2:f2:72:f8:06:32:37:bb:21:c2:bb:
00:b9:19:72:c9:15:cd:58:c1:d1:82:a8:f9:89:57:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:88:30:8E:53:B1:CE:C6:59:A1:33:67:B5:66:A2:8D:69:B5:D6:F5
X509v3 Authority Key Identifier:
keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.185.199.0/24
Signature Algorithm: sha256WithRSAEncryption
af:47:04:33:35:83:63:c4:69:22:84:38:64:f5:e4:2f:10:b7:
f9:45:a6:23:c2:ad:eb:71:be:c9:bf:ed:12:94:00:1f:71:3e:
e4:b5:af:5a:68:1c:01:ed:11:3d:73:b9:5d:ed:39:0f:fe:bc:
b8:cd:56:be:03:6f:bc:20:4a:3b:18:33:77:36:b3:07:39:a2:
92:d2:a7:fd:1e:d2:bb:b0:bb:17:c0:93:d6:a8:3c:02:f4:5e:
0c:57:68:60:27:cf:b3:b5:db:63:00:f0:f4:23:7f:8a:d2:04:
a1:2f:1a:f3:c0:d1:ea:ed:ee:92:45:b8:65:1d:2f:5f:56:cf:
0d:fa:81:c5:27:4b:3f:46:73:09:21:e1:2a:59:1a:1e:ad:6e:
75:92:a1:6c:d4:20:41:9a:be:13:29:fb:d4:b9:3b:13:23:60:
1d:fa:54:94:83:56:63:58:80:22:fb:7f:ee:e9:02:0f:2a:8d:
3f:f2:21:5e:33:13:78:ad:2d:94:be:0c:84:43:44:33:2e:6b:
e4:06:2a:81:ab:ae:22:04:d0:b2:ac:dd:12:81:ce:ed:54:7b:
4a:cc:01:0b:db:c1:d9:e4:ad:85:6a:52:7e:e4:25:7d:ac:b1:
98:36:af:a1:62:9a:5d:bc:2c:62:84:b9:7d:69:31:6a:36:52:
3d:ff:a7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org