Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e36372e302f32342d3234203d3e20313432303336.roa
File: 3231362e3234362e36372e302f32342d3234203d3e20313432303336.roa (raw, json)
Hash identifier: hlfXOyXZ4XrW1i8ky0hkb8Dz7zFxExsgUKt6F8MYfQY=
Subject key identifier: F0:AA:21:73:3B:77:24:C6:70:C6:75:82:13:34:97:17:25:8B:06:97
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 778393A051A1AF3619E9CCE6EDA73B3A01040560
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e36372e302f32342d3234203d3e20313432303336.roa
Signing time: Fri 15 Nov 2024 18:39:32 +0000
ROA not before: Fri 15 Nov 2024 18:34:32 +0000
ROA not after: Fri 14 Nov 2025 18:39:32 +0000
asID: 142036
IP address blocks: 216.246.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:83:93:a0:51:a1:af:36:19:e9:cc:e6:ed:a7:3b:3a:01:04:05:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Nov 15 18:34:32 2024 GMT
Not After : Nov 14 18:39:32 2025 GMT
Subject: CN=F0AA21733B7724C670C6758213349717258B0697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:89:9b:f6:a8:0d:ab:e5:8d:10:3d:d2:e0:c0:
8d:8e:a2:5a:fc:94:98:08:ad:7b:d0:93:a2:e5:1b:
e3:71:f5:0c:08:99:cf:d6:88:3d:47:e5:48:34:8d:
a1:49:b3:f9:11:66:e5:87:2b:c7:05:22:06:75:6c:
72:27:ad:ed:6f:53:bc:62:9c:ef:47:b5:f9:53:ec:
b4:81:52:59:56:5b:14:62:f3:42:93:e1:8d:1b:19:
41:d4:65:fd:9f:e8:40:09:33:ef:49:8f:04:1d:0c:
f7:1a:7b:3c:58:93:36:ab:87:f1:f9:8d:cc:58:03:
33:7a:93:70:62:fe:41:ea:ab:d9:0f:7b:f3:b2:e6:
1b:f5:f3:f8:cd:eb:23:4d:33:ec:79:d8:99:1d:18:
4d:2f:90:8a:23:53:eb:c6:74:1c:f2:30:64:d2:89:
0a:3a:8b:f4:6d:86:10:ba:34:1d:ca:c9:6f:7c:54:
e2:55:c2:d7:6e:1a:fd:42:80:ed:d8:18:77:03:bd:
7a:0a:fd:be:ca:cf:e0:ef:86:e8:ee:b4:5e:05:9c:
8d:86:25:32:a0:0d:59:1f:76:b1:80:d2:1a:93:0d:
40:70:c5:b9:de:de:85:e6:11:f6:aa:88:59:77:a8:
79:9d:d8:8b:79:ff:39:dd:2e:7c:8c:a5:1b:32:e7:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AA:21:73:3B:77:24:C6:70:C6:75:82:13:34:97:17:25:8B:06:97
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e36372e302f32342d3234203d3e20313432303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.246.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:51:9d:ef:3c:48:af:77:3e:71:bb:4a:e0:d2:3d:07:45:aa:
ec:79:94:76:0a:04:37:8c:f2:b4:a3:77:e7:d3:35:8a:81:99:
bc:c8:3d:04:c0:39:70:7a:05:40:8a:7b:23:a8:64:5b:fa:66:
83:01:1d:32:16:ef:3d:01:35:86:50:40:56:4d:30:77:e7:3b:
e1:ee:18:5e:68:46:75:d8:9e:10:8f:1b:71:ec:9d:19:7f:cb:
70:ae:c8:2c:8a:8a:b3:fe:54:ff:e4:e5:a6:83:7e:a0:ff:15:
bb:3c:05:2f:46:1a:53:b2:44:9d:41:3f:ea:66:7a:4f:4f:4f:
a1:8c:c0:0f:16:54:5f:97:3b:00:08:9b:79:4a:74:b2:0b:21:
cd:c1:f2:e0:78:1a:d6:d0:af:93:d3:30:67:00:14:57:79:76:
87:3c:e9:e9:eb:aa:c2:55:08:33:e9:c7:a2:bd:7f:15:b7:d8:
15:41:9b:6a:d7:04:11:28:23:6a:3e:d8:31:4c:31:b1:e6:54:
d6:f5:86:d9:89:57:e1:93:72:cc:93:7c:34:18:2e:fe:1a:14:
40:a1:08:19:eb:04:ee:3d:d7:52:8e:55:59:be:2b:a7:11:2f:
57:88:04:10:c0:12:af:0f:53:09:52:05:12:1a:fe:38:f4:9e:
93:83:65:5e
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUd4OToFGhrzYZ6czm7ac7OgEEBWAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjQxMTE1MTgzNDMyWhcNMjUxMTE0MTgzOTMy
WjAzMTEwLwYDVQQDEyhGMEFBMjE3MzNCNzcyNEM2NzBDNjc1ODIxMzM0OTcxNzI1
OEIwNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4mb9qgNq+WN
ED3S4MCNjqJa/JSYCK170JOi5RvjcfUMCJnP1og9R+VINI2hSbP5EWblhyvHBSIG
dWxyJ63tb1O8YpzvR7X5U+y0gVJZVlsUYvNCk+GNGxlB1GX9n+hACTPvSY8EHQz3
Gns8WJM2q4fx+Y3MWAMzepNwYv5B6qvZD3vzsuYb9fP4zesjTTPsediZHRhNL5CK
I1PrxnQc8jBk0okKOov0bYYQujQdyslvfFTiVcLXbhr9QoDt2Bh3A716Cv2+ys/g
74bo7rReBZyNhiUyoA1ZH3axgNIakw1AcMW53t6F5hH2qohZd6h5ndiLef853S58
jKUbMudXawIDAQABo4ICtDCCArAwHQYDVR0OBBYEFPCqIXM7dyTGcMZ1ghM0lxcl
iwaXMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzEzNjJlMzIzNDM2MmUzNjM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzNDMyMzAzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PZDMA0GCSqGSIb3DQEB
CwUAA4IBAQB8UZ3vPEivdz5xu0rg0j0HRarseZR2CgQ3jPK0o3fn0zWKgZm8yD0E
wDlwegVAinsjqGRb+maDAR0yFu89ATWGUEBWTTB35zvh7hheaEZ12J4Qjxtx7J0Z
f8twrsgsioqz/lT/5OWmg36g/xW7PAUvRhpTskSdQT/qZnpPT0+hjMAPFlRflzsA
CJt5SnSyCyHNwfLgeBrW0K+T0zBnABRXeXaHPOnp66rCVQgz6ceivX8Vt9gVQZtq
1wQRKCNqPtgxTDGx5lTW9YbZiVfhk3LMk3w0GC7+GhRAoQgZ6wTuPddSjlVZviun
ES9XiAQQwBKvD1MJUgUSGv449J6Tg2Ve
-----END CERTIFICATE-----
Generated at Fri Nov 15 21:08:47 2024 by rpki-client on console-fra.rpki-client.org