Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS207326.roa
File: AS207326.roa (raw, json)
Hash identifier: NJjjeQ0W+jLklLnKGW2uB+mcktUFPVL3jLSo9zOXRzI=
Subject key identifier: 87:C8:4A:8C:18:47:AE:DA:F5:E5:41:79:B0:67:AF:28:34:58:D1:DD
Certificate issuer: /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial: 32C7D30EEDB3B49BCAD642C5F1F49F83BBF070BE
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS207326.roa
Signing time: Thu 10 Nov 2022 13:38:25 +0000
ROA not before: Thu 10 Nov 2022 13:33:25 +0000
ROA not after: Thu 09 Nov 2023 13:38:25 +0000
asID: 207326
IP address blocks: 209.200.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c7:d3:0e:ed:b3:b4:9b:ca:d6:42:c5:f1:f4:9f:83:bb:f0:70:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Validity
Not Before: Nov 10 13:33:25 2022 GMT
Not After : Nov 9 13:38:25 2023 GMT
Subject: CN=87C84A8C1847AEDAF5E54179B067AF283458D1DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:50:45:8d:50:5b:65:ac:34:39:e2:1b:1a:
f2:75:90:7b:8e:ab:69:ee:ad:b1:57:4b:ec:07:13:
c1:27:3c:4f:6f:f5:ab:c9:10:94:a6:83:70:8e:ed:
35:87:06:04:f5:3b:9f:71:49:12:c9:fa:78:e8:e5:
10:30:da:0e:b6:7c:07:43:b8:9a:4d:8e:20:4e:4c:
d5:52:76:c8:3c:e5:1d:0f:40:0a:b0:1b:bc:35:6f:
12:a1:1d:4a:fd:b9:c7:a8:d7:d8:77:1d:3b:b4:32:
d0:98:ca:5b:7d:07:49:2f:2b:d4:90:7e:04:df:51:
ec:59:b6:73:51:67:91:a6:09:fd:bb:b7:96:83:17:
00:a6:76:8a:eb:30:51:bf:bf:46:75:79:4d:a9:81:
e0:98:f3:6d:c2:90:a3:da:1e:7d:e9:40:97:70:c9:
14:b9:55:d4:3d:d8:17:df:69:d8:d8:84:77:04:79:
f9:3e:4d:19:d2:a8:5f:6d:b7:f2:9d:08:ec:4f:ab:
01:57:b9:3a:87:a7:4d:71:fe:19:46:10:3e:b8:91:
42:ec:cd:cc:6b:ce:10:a1:0e:16:fe:70:15:91:0a:
a2:0f:90:69:dd:c5:86:ec:e0:e9:68:85:c7:87:51:
45:db:ab:f6:3f:96:69:b6:74:3f:31:7b:70:39:56:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C8:4A:8C:18:47:AE:DA:F5:E5:41:79:B0:67:AF:28:34:58:D1:DD
X509v3 Authority Key Identifier:
keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS207326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.200.246.0/24
Signature Algorithm: sha256WithRSAEncryption
02:24:83:0b:d7:e8:2c:ab:f4:dc:d8:5e:5a:c6:d4:09:a8:a3:
2b:94:96:c2:35:2a:09:50:a6:f1:6f:69:69:5e:49:ab:c0:04:
98:30:07:f0:f8:cc:e8:d1:07:2a:d3:e9:d4:8d:0d:fc:d8:17:
6a:35:35:2d:bc:94:56:7f:62:66:f1:9c:98:fb:24:08:77:84:
58:e2:49:2e:7f:21:09:41:11:09:70:fa:d5:41:7e:f4:1b:e3:
ff:f4:d7:fc:74:7b:37:9f:55:69:2d:82:d9:63:b9:62:5f:08:
be:6a:be:6c:67:b2:8e:f6:a0:1d:0d:b8:4c:52:b4:61:ca:c4:
09:b5:c9:67:ab:bf:ee:75:5a:e8:68:25:79:e9:6b:c6:64:3e:
fe:7a:0a:de:8f:02:97:1e:13:34:73:37:a9:e9:f7:8d:b1:9c:
0f:5c:1f:32:41:20:08:7e:e9:cd:29:9b:b9:ec:c0:2f:6b:e8:
6e:52:ef:14:16:5b:77:4b:16:58:8d:12:e8:34:82:1a:fb:77:
70:dc:fe:bc:1e:aa:e5:e9:63:9b:21:07:25:d5:d6:23:50:7d:
ef:9f:9f:b7:ad:e3:a4:44:81:d3:b6:a7:48:66:f8:68:f7:7b:
65:8a:02:0e:ac:f5:01:3f:82:34:38:23:6f:05:00:70:5d:d4:
cb:7a:0e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org