Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS206150.roa
File: AS206150.roa (raw, json)
Hash identifier: RF8PhIhkgq5UmeXDTEzs8ctVeSuSsnVHyJ7JDbR/+Sw=
Subject key identifier: FA:C6:59:35:29:0E:13:68:C0:58:58:E4:5B:98:3D:BC:D9:3F:D1:8B
Certificate issuer: /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial: 46E075A4C4C07F74464CDE62C0627D21306BF32E
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS206150.roa
Signing time: Thu 10 Nov 2022 13:38:25 +0000
ROA not before: Thu 10 Nov 2022 13:33:25 +0000
ROA not after: Thu 09 Nov 2023 13:38:25 +0000
asID: 206150
IP address blocks: 209.200.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e0:75:a4:c4:c0:7f:74:46:4c:de:62:c0:62:7d:21:30:6b:f3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Validity
Not Before: Nov 10 13:33:25 2022 GMT
Not After : Nov 9 13:38:25 2023 GMT
Subject: CN=FAC65935290E1368C05858E45B983DBCD93FD18B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:d9:ea:93:0c:5b:09:21:9e:7b:bc:35:37:
05:67:68:73:93:f7:64:04:95:23:05:ad:ee:29:4f:
94:f5:ba:70:45:45:1b:a6:66:76:cd:1a:b2:93:5c:
15:d2:e7:61:f9:57:d0:4a:c2:25:dc:bd:23:d2:5a:
b9:f4:b8:76:8b:a7:66:42:60:b1:51:5d:21:56:32:
df:94:e5:cf:de:0b:08:6f:4c:21:9d:49:4a:41:bf:
aa:e5:41:45:e7:a6:04:23:20:90:20:5d:a2:f5:2b:
ee:3f:25:cf:7a:9f:78:ce:84:ca:2c:76:56:10:6c:
a5:fa:7a:48:88:cb:0f:d1:7f:9f:1b:40:da:3a:af:
ad:24:75:34:f4:b2:49:2d:7e:33:bc:c0:51:db:17:
36:e1:e2:66:34:8f:43:3b:16:3a:9d:f6:19:61:e7:
fd:00:ec:c4:c2:62:59:94:cf:a8:93:cd:48:57:13:
26:0a:88:e7:9c:78:f9:15:8d:8d:5f:30:21:c1:b4:
f9:44:f7:df:32:25:04:52:62:be:de:03:41:08:02:
d6:52:a5:bf:ff:69:29:fb:1e:9a:4c:87:91:b3:69:
6a:05:00:55:53:50:99:ba:79:eb:c8:91:87:7a:29:
d3:1d:28:e7:64:01:53:02:6d:d4:63:b6:9d:b2:6b:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C6:59:35:29:0E:13:68:C0:58:58:E4:5B:98:3D:BC:D9:3F:D1:8B
X509v3 Authority Key Identifier:
keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS206150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.200.239.0/24
Signature Algorithm: sha256WithRSAEncryption
28:5d:7a:51:f5:46:18:99:72:2d:b0:f0:3d:76:27:d3:d7:fe:
73:ea:ca:48:b6:d1:5a:cf:22:cd:c1:43:53:75:61:85:ba:5a:
dc:a4:e6:35:b2:ec:7a:1d:be:1d:9d:b1:41:0b:4c:69:86:f2:
0c:4b:42:2e:87:33:03:6c:13:2d:0c:47:e5:b2:9d:91:4b:e2:
87:d0:e0:10:92:69:59:5a:9b:8b:e2:57:e7:a1:00:28:37:8b:
90:1d:b2:57:59:68:d7:5f:36:a2:fa:77:b0:38:bf:2d:81:61:
df:45:2d:e8:81:e1:80:f5:81:ac:07:4f:d6:ba:c0:c8:5d:36:
0d:2a:fb:4f:fb:28:eb:3d:6c:8d:7b:65:91:6d:9c:21:86:b1:
b0:2e:50:74:56:46:51:f1:65:11:a2:33:54:75:4c:68:67:cf:
4c:31:18:90:ba:38:c3:c4:05:a4:5d:c9:51:cb:82:bd:ad:a1:
89:2e:23:34:0c:08:16:60:41:cb:b8:e7:9e:02:3d:a8:c1:02:
b0:47:8d:21:ec:f5:9d:c8:5e:ed:6a:8b:dc:4a:2f:7c:cc:58:
2a:2d:fe:09:57:fa:55:15:c9:e5:cb:b9:87:5b:a7:f0:76:56:
52:5e:06:5f:3c:84:cd:48:6e:78:5d:48:c7:d8:db:e3:ec:6a:
38:d0:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org