Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/1/3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa
File: 3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa (raw, json)
Hash identifier: ctGfmQjYXKo5sYWYAVgUHmay/rxh/dNlJrb2JQK4f3Y=
Subject key identifier: 87:D4:CE:21:5A:43:DC:21:D0:8B:07:F1:AF:AE:86:90:70:C1:F7:F4
Certificate issuer: /CN=15151ee44c5e914e3b998c2de039b5639bf4f8f1ee0aea8f54
Certificate serial: 3C22AEA096846613F71557C43F467F61AFBFCBEC
Authority key identifier: 6F:DC:71:8F:6B:86:5C:FC:57:06:DD:F9:87:36:EE:18:A6:F4:16:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e914e3b998c2de039b5639bf4f8f1ee0aea8f54.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/1/3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa
Signing time: Wed 06 Dec 2023 15:22:24 +0000
ROA not before: Wed 06 Dec 2023 15:17:24 +0000
ROA not after: Wed 20 Dec 2023 15:22:24 +0000
asID: 16787
IP address blocks: 192.219.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:22:ae:a0:96:84:66:13:f7:15:57:c4:3f:46:7f:61:af:bf:cb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15151ee44c5e914e3b998c2de039b5639bf4f8f1ee0aea8f54
Validity
Not Before: Dec 6 15:17:24 2023 GMT
Not After : Dec 20 15:22:24 2023 GMT
Subject: CN=87D4CE215A43DC21D08B07F1AFAE869070C1F7F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:93:26:aa:21:67:85:d2:8e:4c:c8:31:b3:
ae:61:06:5e:52:0f:38:13:84:be:aa:48:13:75:14:
c8:85:98:9f:00:4a:d3:b3:34:63:38:49:13:b3:fa:
ca:39:c0:2f:76:cb:e4:a4:b5:b2:cb:06:c8:e5:ef:
5f:d0:e8:88:d6:fc:d4:72:a5:58:23:fc:e4:f7:8e:
e7:0a:91:e7:6e:1c:ad:b4:da:a7:36:92:2f:6f:77:
c2:3e:21:ea:92:a6:3b:a3:84:5e:49:ef:fc:9e:d7:
1e:2a:72:78:a2:71:a6:ef:30:99:1c:4f:26:7f:cd:
28:3c:d7:67:7e:92:42:1a:69:f8:a1:bb:b5:14:9a:
5c:b2:86:85:2b:d2:d4:f9:b9:40:41:9c:b7:d5:6c:
0b:c9:24:64:e2:dd:63:d9:7c:95:f2:01:6d:80:6e:
7f:35:da:42:c5:b2:41:a2:a7:54:6c:15:c2:a9:91:
9c:9b:89:8e:02:fb:1c:55:69:df:19:76:86:30:78:
f3:cb:79:50:7e:ae:9d:a7:17:41:7b:10:7b:8d:6f:
10:bb:21:01:71:6a:88:c2:f1:c5:d9:69:7e:6d:c4:
5f:d7:6f:e6:14:08:08:13:18:26:50:f4:be:10:07:
ed:ff:79:a8:20:5a:05:ca:e6:62:27:fb:8f:13:90:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D4:CE:21:5A:43:DC:21:D0:8B:07:F1:AF:AE:86:90:70:C1:F7:F4
X509v3 Authority Key Identifier:
keyid:6F:DC:71:8F:6B:86:5C:FC:57:06:DD:F9:87:36:EE:18:A6:F4:16:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/1/6FDC718F6B865CFC5706DDF98736EE18A6F41608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e914e3b998c2de039b5639bf4f8f1ee0aea8f54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/1/3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.219.216.0/21
Signature Algorithm: sha256WithRSAEncryption
23:d4:d8:8c:bf:88:1b:ad:7b:32:97:4a:75:ef:7b:cc:44:bd:
e0:f3:a4:87:69:f5:f9:d8:a3:66:2d:ce:b3:05:94:2a:af:a8:
2a:d9:b5:8a:56:f7:61:f9:1c:e8:00:2a:6e:f6:a7:de:62:aa:
9b:b9:63:2f:a6:d7:1b:8b:e9:4f:a9:a8:1c:c9:49:c3:a9:4f:
d2:d8:35:59:92:b4:40:a5:df:03:4e:35:d1:f6:5e:36:8a:44:
86:75:64:df:02:fc:d4:7c:15:0b:2e:a5:8d:2b:5f:4c:38:b6:
4c:10:80:af:68:6b:3a:be:de:81:b7:d3:c2:a6:19:b2:99:bb:
22:34:76:bb:0c:1e:3b:8b:7d:f2:dd:75:59:a4:c4:4f:4b:d7:
b3:27:0f:76:94:9f:eb:c0:2e:53:45:48:b3:89:4b:51:08:5b:
f4:e5:21:17:84:eb:ce:34:3b:e1:7a:82:7f:ee:e1:a4:46:8f:
e4:ed:d4:9f:b6:c4:d6:8e:59:9b:4a:a7:5f:34:16:63:85:49:
dd:d8:a4:70:3b:2b:32:fb:25:22:49:5a:75:1b:11:72:65:97:
4e:61:29:2b:ce:73:25:fe:de:49:7a:35:2e:3c:17:9d:9e:85:
4f:ea:e0:fe:3f:d5:71:26:4e:4d:06:6d:fa:89:3e:c3:20:a4:
d2:d8:2a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org