Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS210654.roa
File: AS210654.roa (raw, json)
Hash identifier: HfBGh18VNTrdS3SVVyvXbZG9T/LHb15foP0tPbM9hvw=
Subject key identifier: D8:2B:91:00:BE:A7:76:2E:D1:5E:16:AC:77:4A:27:43:8B:F8:50:5A
Certificate issuer: /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial: 0D0EAABE628F915D313E459EFC82400DF898FEAA
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS210654.roa
Signing time: Thu 10 Nov 2022 13:38:26 +0000
ROA not before: Thu 10 Nov 2022 13:33:26 +0000
ROA not after: Thu 09 Nov 2023 13:38:26 +0000
asID: 210654
IP address blocks: 216.97.227.0/24 maxlen: 24
216.97.228.0/24 maxlen: 24
216.97.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:0e:aa:be:62:8f:91:5d:31:3e:45:9e:fc:82:40:0d:f8:98:fe:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Validity
Not Before: Nov 10 13:33:26 2022 GMT
Not After : Nov 9 13:38:26 2023 GMT
Subject: CN=D82B9100BEA7762ED15E16AC774A27438BF8505A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:10:c6:fd:d2:92:b3:b4:ad:53:75:be:42:
8f:99:a2:7e:6f:4c:0c:f8:92:7d:12:09:70:5e:4e:
25:b4:d3:92:e9:2e:64:59:37:ba:8e:fc:9f:f8:56:
a3:e0:b3:6a:8c:c0:50:b1:c8:9c:cf:d3:04:cd:d2:
18:71:f4:c0:df:57:8d:94:0c:f5:83:24:89:8d:4f:
e0:12:18:f4:48:8d:14:6f:c3:ad:28:8e:50:7e:6f:
fb:23:2d:5b:f9:b5:04:07:70:7b:e7:9b:9e:2b:75:
35:96:d1:a2:89:e2:90:ba:47:a1:09:34:ca:cc:d1:
44:e4:3a:a4:19:ea:f8:e6:33:ae:65:3c:57:99:ce:
58:a5:cb:2b:d7:f3:56:4a:fc:ea:99:9c:77:be:42:
0f:bc:7b:01:cf:b1:ba:59:d6:a5:e7:ac:f4:1f:87:
cb:61:1b:59:33:fa:70:8c:e9:3a:2b:17:ce:e1:21:
64:f2:cc:8f:14:42:37:9c:7b:b8:af:d0:4c:8d:56:
a1:3b:37:86:24:6f:c7:b2:89:3d:0a:f8:23:0c:36:
d3:ba:85:0b:2a:0c:27:2a:f5:64:5e:87:4b:60:88:
a6:3e:af:44:c2:c4:b9:7f:5c:73:d9:c6:b9:f2:c1:
bf:6a:bd:d8:ad:9e:59:dd:ae:45:d5:89:41:2b:c7:
86:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2B:91:00:BE:A7:76:2E:D1:5E:16:AC:77:4A:27:43:8B:F8:50:5A
X509v3 Authority Key Identifier:
keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS210654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.97.227.0-216.97.229.255
Signature Algorithm: sha256WithRSAEncryption
40:01:1b:d5:2d:d1:7d:25:cb:fa:86:64:69:1f:b6:bc:76:cd:
8a:62:88:16:72:4a:cf:83:f4:46:29:de:23:fe:97:7c:22:6d:
80:2c:a2:dd:16:25:e7:0a:eb:91:7a:bd:40:fd:87:db:3c:54:
d5:cd:e0:df:79:d4:1d:05:7b:fd:d6:f6:9e:42:8b:7d:5f:c4:
17:59:2b:4d:8a:84:60:f7:17:56:c6:cf:f2:85:e0:61:3b:fa:
8f:3e:be:9d:3c:57:56:02:e8:72:a2:89:84:8a:51:cc:29:69:
e2:d2:9e:37:30:e3:f0:88:55:cf:52:43:9a:1c:cd:e4:04:d9:
7b:06:fc:34:80:cf:1f:bf:f7:00:85:ae:e3:d8:ae:12:99:68:
8e:67:67:75:12:40:e9:e9:25:3a:51:dc:07:47:96:8b:3c:57:
bf:15:0a:04:c4:8b:5e:b2:f0:33:fe:ea:fe:a2:5a:fd:50:8f:
f8:2d:09:f4:6d:24:9e:a0:eb:14:d1:18:48:ad:22:7a:19:9a:
cd:7d:2c:1a:2a:82:05:e4:c9:91:b2:df:db:a2:28:b9:19:a3:
55:d5:d9:6c:94:07:a4:60:1c:f2:39:69:4d:9a:d1:c5:9a:96:
50:e1:6f:94:a9:6b:6b:5d:34:d0:ea:d3:3d:03:21:cb:58:bd:
79:40:ce:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org