Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS209371.roa
File: AS209371.roa (raw, json)
Hash identifier: dfunutSDRI7pFvzKc63FaS0Z1kdNRznGL/L85nLXOL8=
Subject key identifier: 76:50:BC:B2:A4:42:CF:A5:DA:BA:A2:E3:19:21:20:31:1C:B2:25:C7
Certificate issuer: /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial: 55CA79DB622760BB1D6D794DB54CFBD97013C457
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS209371.roa
Signing time: Wed 16 Nov 2022 01:30:54 +0000
ROA not before: Wed 16 Nov 2022 01:25:54 +0000
ROA not after: Wed 15 Nov 2023 01:30:54 +0000
asID: 209371
IP address blocks: 74.50.3.0/24 maxlen: 24
74.50.4.0/24 maxlen: 24
74.50.11.0/24 maxlen: 24
74.50.17.0/24 maxlen: 24
74.50.21.0/24 maxlen: 24
74.50.24.0/24 maxlen: 24
209.200.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ca:79:db:62:27:60:bb:1d:6d:79:4d:b5:4c:fb:d9:70:13:c4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Validity
Not Before: Nov 16 01:25:54 2022 GMT
Not After : Nov 15 01:30:54 2023 GMT
Subject: CN=7650BCB2A442CFA5DABAA2E3192120311CB225C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:41:d4:03:32:f4:e6:31:6f:c0:f6:2c:b5:
4d:26:58:a4:26:43:93:fd:f0:8c:9b:cc:25:e8:cd:
62:e3:ce:02:e2:b7:92:78:20:ea:ec:e2:a1:6d:7e:
80:ed:79:e0:2d:fc:3c:a9:26:18:50:34:36:bc:3c:
d9:37:54:2f:a5:01:aa:c6:7d:ee:b9:11:24:a5:7f:
60:1d:33:c7:ab:c7:20:9c:3e:d3:ed:a3:60:38:0c:
32:d6:61:e6:41:16:f0:e5:10:6c:78:c8:45:39:db:
02:35:b9:e7:57:de:66:33:d8:a8:5d:c7:35:9a:7f:
d0:f9:41:bd:93:88:d3:1c:65:03:da:bf:c9:a6:ae:
35:81:4a:f7:13:3d:2f:ab:06:6c:33:78:0d:2a:b6:
66:64:a3:12:6f:5a:de:c0:92:08:5d:bb:23:9b:c7:
30:58:f2:32:6c:b9:2f:ef:c0:3b:7f:c1:d4:f0:d1:
3e:ec:a2:a9:da:e0:1a:ba:56:b2:41:5d:f5:f4:30:
37:71:10:84:25:58:87:c7:ea:e1:de:ae:bf:4b:e2:
6d:59:d2:34:82:31:a1:e8:2f:11:76:5e:92:11:48:
a1:d1:c7:3c:48:1e:fb:87:89:26:2d:10:5a:d3:32:
70:0f:f0:41:4f:ec:61:d0:7e:ad:c9:3b:ba:b3:8d:
ee:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:50:BC:B2:A4:42:CF:A5:DA:BA:A2:E3:19:21:20:31:1C:B2:25:C7
X509v3 Authority Key Identifier:
keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS209371.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.50.3.0-74.50.4.255
74.50.11.0/24
74.50.17.0/24
74.50.21.0/24
74.50.24.0/24
209.200.224.0/24
Signature Algorithm: sha256WithRSAEncryption
88:dc:cd:68:12:40:d2:2e:3c:b8:7a:f0:f5:e4:51:06:9b:26:
99:3a:56:10:3f:ee:13:f5:24:22:9c:50:eb:0b:ab:68:cb:b1:
d4:90:bf:8a:b3:d6:a9:86:dd:fb:96:6a:64:5f:79:0e:fa:b4:
e5:72:66:86:9d:cc:c0:5a:ef:35:ee:d0:4a:bc:9d:f1:00:3e:
df:cd:0f:6f:1b:d9:24:c6:0d:fc:85:87:3a:f1:8b:6f:a4:2d:
99:8e:21:8b:e9:8f:3c:60:c2:78:aa:97:b3:be:2b:f5:db:6f:
e5:12:eb:21:f4:6b:bd:ff:55:7b:b8:ab:0a:c1:e8:31:3c:4c:
98:be:62:52:0a:2e:61:56:d7:60:29:e2:13:91:b4:db:38:61:
d7:c0:a8:ad:e3:ed:0a:08:0a:8d:5f:54:c6:73:a6:c4:e4:6a:
bf:dd:5b:3d:34:10:92:c7:a2:86:ad:8e:01:31:f3:49:5c:e7:
4c:05:19:49:02:37:6d:ad:0e:59:02:0c:72:98:08:bb:00:16:
99:4a:7a:aa:b4:6f:ad:27:be:2e:8d:4f:30:54:f7:fb:cc:3c:
16:23:2b:79:f2:0a:2d:1d:af:d1:c9:98:07:0e:7b:b2:7b:c8:
8b:f4:ce:c3:94:3a:6d:67:45:a0:4e:27:d8:5d:87:7b:33:1c:
35:33:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org