Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS209737.roa
File: AS209737.roa (raw, json)
Hash identifier: PE0nPoNpWs2WhOG1vdJH4/fOoGmjVbK+0UPznX9m3bY=
Subject key identifier: 60:2A:99:72:58:93:C4:E2:3C:8F:6B:A2:2E:08:CD:4F:DB:AA:36:AE
Certificate issuer: /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial: 3FB12CD96D07F5EB9A7AB0DAB6EC61E9FBE4E4FD
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS209737.roa
Signing time: Thu 10 Nov 2022 13:38:25 +0000
ROA not before: Thu 10 Nov 2022 13:33:25 +0000
ROA not after: Thu 09 Nov 2023 13:38:25 +0000
asID: 209737
IP address blocks: 67.210.120.0/22 maxlen: 24
216.227.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b1:2c:d9:6d:07:f5:eb:9a:7a:b0:da:b6:ec:61:e9:fb:e4:e4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Validity
Not Before: Nov 10 13:33:25 2022 GMT
Not After : Nov 9 13:38:25 2023 GMT
Subject: CN=602A99725893C4E23C8F6BA22E08CD4FDBAA36AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:0c:5d:44:e6:9f:d4:29:24:4d:67:90:ad:
2f:be:f4:c6:b4:41:65:0e:a8:ba:b9:9a:c1:3f:5e:
76:b6:1c:52:5d:3f:3f:c9:90:d6:af:1b:9c:64:67:
60:ae:35:e0:59:bf:c0:ad:22:90:66:34:fc:b9:52:
1f:77:95:ff:b1:c9:76:3f:08:12:02:c2:60:09:d3:
c9:07:77:3a:df:cb:28:4d:e0:d6:8b:c9:49:5e:32:
dc:29:1b:e2:d6:84:69:b2:f5:09:80:ff:07:65:8d:
88:62:2f:73:62:ce:aa:92:00:60:ec:55:8b:96:f6:
29:cf:cf:8b:87:9b:6a:73:d5:6d:c8:d6:62:aa:5f:
59:10:de:13:02:eb:ed:04:cb:cf:54:86:de:8e:e9:
e3:96:85:a8:6e:06:17:af:8f:1b:d7:bc:31:e7:40:
1d:bd:69:e7:f4:53:96:b1:07:b5:66:2c:d4:08:2f:
ac:67:50:1e:31:6b:04:3f:78:6f:0f:fa:0b:c2:26:
94:3c:38:db:da:85:b2:36:40:7d:5f:af:7b:93:76:
d4:97:d1:da:57:c3:1c:0d:26:9a:23:3f:0d:ee:7f:
1e:16:6d:d3:d2:7b:c4:b5:2c:0b:bb:2e:00:19:0f:
07:8c:b2:8d:09:3d:0b:22:42:f9:55:e2:68:ba:27:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2A:99:72:58:93:C4:E2:3C:8F:6B:A2:2E:08:CD:4F:DB:AA:36:AE
X509v3 Authority Key Identifier:
keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS209737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.210.120.0/22
216.227.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:05:9a:f3:37:08:7d:bb:af:bb:12:08:3d:f0:32:b3:ba:b3:
eb:2d:3f:2b:92:fb:da:3e:65:37:fc:57:98:a5:2d:d3:8c:4f:
b1:91:8d:ec:a5:58:e7:d6:d7:8c:7f:de:4a:eb:76:70:5f:55:
ad:c8:3e:e0:8e:95:94:aa:51:32:2b:a3:53:4f:f3:0b:f4:18:
a4:a5:b4:54:54:dd:72:f9:cc:23:4e:20:c6:dd:1b:56:25:81:
23:6b:8b:e7:33:14:87:24:25:f4:ab:f8:33:69:51:94:9d:b4:
57:03:2c:dc:01:64:4a:96:95:ae:50:2c:98:fe:81:ae:32:d6:
56:79:79:50:e9:6e:b9:e3:9b:10:17:af:82:f0:ac:b0:91:94:
78:80:2d:37:7a:1a:8d:ec:42:c9:ff:05:a5:a7:f9:69:2a:01:
8e:f2:41:e2:09:8e:d6:96:18:bf:c0:ef:dd:be:1e:f1:b3:f0:
2c:d2:e0:e4:e3:03:8b:51:fe:7f:a9:64:bf:de:fd:d7:ec:c3:
da:5e:25:cd:61:0f:9b:39:60:d8:ee:53:3a:44:6b:33:a9:c2:
96:a1:80:5d:fb:4a:c3:3d:b3:cb:32:eb:94:b0:d6:69:fc:c9:
36:65:64:71:58:eb:ac:8f:13:e5:f7:0e:88:99:fd:05:c8:a5:
38:fa:d1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org