Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa
File: 3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: fj7QrYCrNCLwYNsZfjKESo4rHiEOmo9J6rePkdEZnC8=
Subject key identifier: 8D:3D:75:C6:B9:F9:69:B5:36:7D:86:61:CE:82:90:C1:1C:D8:8D:51
Certificate issuer: /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial: 0656C866CD133819CA2FFB537DE4500262DB57EE
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 11 Jul 2022 10:35:28 +0000
ROA not before: Mon 11 Jul 2022 10:30:28 +0000
ROA not after: Mon 10 Jul 2023 10:35:28 +0000
asID: 212238
IP address blocks: 192.109.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:56:c8:66:cd:13:38:19:ca:2f:fb:53:7d:e4:50:02:62:db:57:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Validity
Not Before: Jul 11 10:30:28 2022 GMT
Not After : Jul 10 10:35:28 2023 GMT
Subject: CN=8D3D75C6B9F969B5367D8661CE8290C11CD88D51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:02:5d:40:e7:bc:8f:cb:b7:72:96:2a:2c:89:
41:19:df:3e:29:f0:5d:14:73:60:97:74:e6:d1:46:
5f:6b:20:22:ef:71:56:bd:63:21:2f:5f:e8:78:a4:
f8:41:aa:d8:55:4e:6e:44:e5:46:3c:3b:51:af:0d:
23:19:24:22:e0:3d:76:d2:d6:9a:9e:93:bd:b0:18:
34:2e:01:a2:b7:9d:15:16:26:74:a0:53:9e:38:50:
c1:ad:b3:f3:5e:a9:83:76:3a:d4:ca:15:9f:e4:aa:
d5:98:22:66:23:73:20:19:df:c3:ad:00:ea:61:48:
b7:85:be:66:bf:34:fe:5a:f1:1b:aa:be:ea:44:3d:
5c:d7:77:62:58:5f:72:3b:49:51:05:86:10:e2:7f:
fb:34:0f:fa:8e:84:ac:2b:58:f4:04:21:5b:33:e0:
a4:9d:5d:08:38:9e:63:47:9e:d2:96:eb:fa:f3:f8:
d7:66:46:67:0e:53:0f:ed:c6:c0:3f:46:29:c7:ed:
d3:66:43:07:d3:30:0a:0d:be:79:21:a3:7b:41:b7:
3e:34:1f:29:cc:ae:fd:c7:c1:8e:52:1a:1a:1f:78:
4f:f0:a0:7e:04:48:5f:7d:d9:e9:36:0c:56:6a:a4:
60:8e:a7:7b:1f:8d:3e:9d:69:f4:81:a6:b2:cd:3b:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3D:75:C6:B9:F9:69:B5:36:7D:86:61:CE:82:90:C1:1C:D8:8D:51
X509v3 Authority Key Identifier:
keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.136.0/24
Signature Algorithm: sha256WithRSAEncryption
18:6d:5d:dd:f3:6f:96:28:58:c0:a5:e9:4e:75:a1:2d:a1:d3:
82:ec:9f:e3:a2:5d:6e:4b:d8:18:55:00:a4:82:0a:17:e3:cd:
16:5b:18:eb:83:66:72:39:91:10:cf:9d:b2:f1:eb:f6:5b:58:
c1:7d:8d:9f:d3:89:5c:59:87:23:ef:cd:61:14:6a:e5:af:f1:
11:ef:14:6f:0a:fe:0c:b7:b8:11:de:3a:a6:27:9c:60:06:2b:
22:52:8d:43:9b:a4:68:e8:fb:77:31:9d:b0:37:9c:cf:2d:dd:
2a:f3:fe:00:9a:45:fe:c6:1d:cc:98:ed:bf:55:6b:f6:dd:5a:
62:a3:3b:b1:00:4c:56:23:f3:6b:f9:55:a5:4d:12:85:77:78:
fb:08:be:41:5b:f3:2a:06:de:31:01:91:e7:24:de:4e:5e:77:
a5:07:56:47:cc:d7:df:50:c2:bf:d9:a6:ff:e1:3e:bf:e6:9a:
84:69:e3:1e:7f:26:e2:af:de:e0:ef:5c:a4:0b:38:69:17:25:
fe:d3:26:72:9b:55:a5:d1:9c:70:9d:b9:17:e2:c7:fb:c8:04:
ed:0b:ba:51:e0:c7:01:d6:40:dc:45:d1:5d:ce:5c:12:44:5c:
63:d2:d5:f0:73:97:ed:3e:3c:dd:1a:0b:c4:2f:a3:c9:33:2b:
cf:3f:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org