Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230322e302f32342d3234203d3e203630373231.roa
File: 3231362e3138352e3230322e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: dJnGVLXvDONHUKXn0hfUk51qocSJNbdJzOg/QffHE18=
Subject key identifier: 79:11:E8:AE:EA:9E:73:87:97:11:4C:0E:B6:1C:22:3E:46:94:49:A7
Certificate issuer: /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial: 5D86697A358F07845DAD2A5E9F9074BDABA7B628
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230322e302f32342d3234203d3e203630373231.roa
Signing time: Thu 26 Jan 2023 06:30:58 +0000
ROA not before: Thu 26 Jan 2023 06:25:58 +0000
ROA not after: Thu 25 Jan 2024 06:30:58 +0000
asID: 60721
IP address blocks: 216.185.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:86:69:7a:35:8f:07:84:5d:ad:2a:5e:9f:90:74:bd:ab:a7:b6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Validity
Not Before: Jan 26 06:25:58 2023 GMT
Not After : Jan 25 06:30:58 2024 GMT
Subject: CN=7911E8AEEA9E738797114C0EB61C223E469449A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:a3:a9:01:fd:e2:b7:01:d5:89:af:18:40:
c8:0a:9b:c8:c6:34:7b:d9:e7:11:06:cb:4c:6f:56:
93:f5:e6:84:12:a6:a5:d7:da:1a:4a:0c:a5:5f:61:
c0:42:96:12:63:d5:2c:15:8e:a0:a2:43:05:4f:ed:
6e:e4:9d:f7:30:f9:fe:dc:fe:2e:01:65:29:df:48:
fa:06:ab:30:da:b3:df:bf:8d:56:74:98:e3:6a:65:
4d:3a:9e:7e:de:f1:49:a9:ae:3d:ab:71:95:55:71:
99:d3:53:89:9c:34:f8:a1:35:b0:5e:12:8a:75:29:
87:c2:32:68:e9:74:1c:7a:ad:e3:c7:c0:7d:0a:4b:
91:98:f9:8c:65:b2:70:0f:1f:00:2d:3d:b3:1e:1f:
fa:7b:27:10:7c:44:da:1e:bf:b2:ac:59:b7:8c:b0:
89:95:fb:97:6e:d5:b5:c3:a5:bf:e5:fc:6d:b3:b8:
5a:e7:dd:a9:c2:0f:74:a9:7c:c0:7a:85:15:d1:ff:
73:3c:55:a7:e2:8f:1f:06:02:38:06:54:b7:37:7f:
f0:66:86:eb:d6:59:b4:02:40:b6:ee:54:73:31:71:
9f:4f:99:e5:b6:0d:5f:c3:10:00:ac:c8:67:86:c7:
ed:06:13:5a:85:a5:79:ed:83:4d:1c:4d:65:c4:9a:
d9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:11:E8:AE:EA:9E:73:87:97:11:4C:0E:B6:1C:22:3E:46:94:49:A7
X509v3 Authority Key Identifier:
keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230322e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.185.202.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:61:04:01:80:c4:6a:d7:6a:2c:6a:a4:8e:d4:a5:81:1b:47:
b3:8d:04:61:b9:f4:54:00:6c:60:1b:8f:e7:ea:89:84:76:29:
bd:c7:62:7f:ac:56:78:2e:e6:99:cc:1f:85:f6:f1:9e:72:64:
3f:cf:83:4b:a2:2e:da:7f:91:d2:21:2c:24:9b:13:05:c2:51:
4f:89:24:12:ca:7e:5d:ba:bb:83:a4:74:e9:fc:9f:ca:fa:a4:
9f:54:f6:26:11:fd:45:52:3e:dd:e0:0f:be:e7:65:92:1f:e8:
fb:f2:43:a6:13:11:90:1e:fd:b7:f8:ab:8d:0c:0a:d7:f2:60:
d5:e5:ce:af:9b:7f:2a:8f:ad:c1:18:fd:10:28:ce:5b:b3:a1:
f7:af:06:57:67:07:7a:10:34:1f:36:43:27:1e:2f:2a:e6:79:
d9:ac:d4:4f:e6:c2:ed:b5:a5:46:ca:1a:29:a7:92:76:7f:44:
15:90:be:f8:b6:0f:52:dd:f1:9a:d1:02:77:81:5b:f9:a5:a8:
a6:e8:9b:fd:78:a3:16:39:2d:d6:62:ce:06:bc:82:65:f6:da:
25:14:a4:7a:39:00:2c:b8:a2:42:34:f7:77:15:21:b8:8f:44:
e7:4f:5a:72:0c:f9:87:16:56:19:aa:6a:c5:04:41:34:d6:24:
5a:7f:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org