Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS7018.roa
File: AS7018.roa (raw, json)
Hash identifier: OUlCIapW/C9aWZ7SK6Vh7k0UHzi2vmJ6LWJV4mZJB6k=
Subject key identifier: A2:15:DB:F7:97:25:A4:75:04:D6:5D:5F:E5:4F:B1:C9:22:6B:EC:FD
Certificate issuer: /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial: 2A243B6D6043AF4119B0F55423C1BE71EB4DA489
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS7018.roa
Signing time: Thu 10 Nov 2022 13:39:17 +0000
ROA not before: Thu 10 Nov 2022 13:34:17 +0000
ROA not after: Thu 09 Nov 2023 13:39:17 +0000
asID: 7018
IP address blocks: 67.210.104.0/22 maxlen: 24
89.35.92.0/24 maxlen: 24
209.200.234.0/24 maxlen: 24
209.200.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:24:3b:6d:60:43:af:41:19:b0:f5:54:23:c1:be:71:eb:4d:a4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Validity
Not Before: Nov 10 13:34:17 2022 GMT
Not After : Nov 9 13:39:17 2023 GMT
Subject: CN=A215DBF79725A47504D65D5FE54FB1C9226BECFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:c1:cf:1e:84:03:cf:f0:0d:dd:54:4e:5b:
b4:69:45:c8:0c:a7:db:8e:45:18:61:cc:76:30:bd:
7e:89:c1:68:79:52:8b:e9:ce:6e:f6:57:b6:80:73:
d7:5d:d9:71:c5:5d:6d:13:e6:62:90:38:de:40:ed:
82:5e:87:c0:7c:07:d8:6e:e9:97:c6:6e:d0:c3:43:
3a:ec:29:a8:19:06:81:be:5d:97:ca:f1:e0:1b:54:
30:33:fd:e7:a1:20:32:a7:06:cd:b8:d5:5a:ff:c5:
23:8b:77:0a:f7:55:86:72:44:af:0f:21:14:7c:59:
b4:76:ba:7c:fe:b7:3a:ef:5e:6d:2c:ce:29:7f:7b:
23:7f:de:17:68:84:e8:30:8d:40:25:b2:41:b7:1d:
a2:66:f1:e8:95:7e:58:39:56:42:42:d4:0f:7c:57:
72:af:1f:df:0b:7e:ec:bb:5b:1f:83:f1:0c:be:f0:
e9:78:b0:af:8e:64:3e:66:d2:65:cb:d8:08:d2:df:
bf:d9:b1:f5:92:91:cb:08:05:90:85:1d:ff:52:8c:
2e:37:c5:38:a9:6e:46:38:e6:20:e3:45:2e:39:1b:
8b:4f:d5:63:6e:68:82:96:d6:83:6c:03:d1:04:98:
fc:06:5d:c7:5d:ad:f5:38:60:05:64:16:bc:0d:43:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:15:DB:F7:97:25:A4:75:04:D6:5D:5F:E5:4F:B1:C9:22:6B:EC:FD
X509v3 Authority Key Identifier:
keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS7018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.210.104.0/22
89.35.92.0/24
209.200.234.0/24
209.200.254.0/24
Signature Algorithm: sha256WithRSAEncryption
55:47:40:4a:35:bf:f5:e4:ab:ee:5d:f2:a3:57:16:76:65:ea:
2b:52:2c:f3:88:fd:0d:54:8d:fe:53:82:4b:58:ec:59:74:2e:
57:51:46:d8:8e:ca:98:4b:2d:07:c7:33:96:66:d8:d8:ea:55:
48:83:94:ee:c5:9d:a1:77:c7:af:3b:57:24:40:5f:3a:68:39:
38:0e:3f:0a:85:9d:f8:8a:fc:f9:79:83:a2:fa:e4:30:01:8b:
61:aa:f5:b6:00:5c:33:66:d4:6d:05:88:c5:99:bc:8f:8a:02:
bb:34:c1:61:82:0c:33:df:4a:6f:bc:d1:05:92:87:60:37:0b:
b9:13:b9:15:12:92:f8:14:d2:1b:b4:ca:c8:be:ee:8d:1c:44:
1b:e7:db:a4:05:7f:32:87:f5:69:5f:31:3f:e7:ac:a1:60:ac:
43:01:53:4a:23:41:cd:26:2d:03:00:30:fd:2c:d0:8e:58:75:
a0:f7:69:44:84:42:7f:b0:11:3c:d5:61:67:23:7c:16:53:a1:
a4:48:de:3f:6b:19:6e:3d:e6:e2:58:c7:81:fc:60:9c:6a:f4:
2e:e1:fa:0b:9f:74:57:98:04:2e:31:0d:fd:64:b1:f4:ed:11:
47:37:47:56:36:95:b9:34:7d:aa:65:0d:df:82:29:72:7d:06:
8a:bb:1a:d7
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUKiQ7bWBDr0EZsPVUI8G+cetNpIkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTEwMTMzNDE3WhcNMjMxMTA5MTMzOTE3
WjAzMTEwLwYDVQQDEyhBMjE1REJGNzk3MjVBNDc1MDRENjVENUZFNTRGQjFDOTIy
NkJFQ0ZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+DBzx6EA8/w
Dd1UTlu0aUXIDKfbjkUYYcx2ML1+icFoeVKL6c5u9le2gHPXXdlxxV1tE+ZikDje
QO2CXofAfAfYbumXxm7Qw0M67CmoGQaBvl2XyvHgG1QwM/3noSAypwbNuNVa/8Uj
i3cK91WGckSvDyEUfFm0drp8/rc6715tLM4pf3sjf94XaIToMI1AJbJBtx2iZvHo
lX5YOVZCQtQPfFdyrx/fC37su1sfg/EMvvDpeLCvjmQ+ZtJly9gI0t+/2bH1kpHL
CAWQhR3/UowuN8U4qW5GOOYg40UuORuLT9VjbmiCltaDbAPRBJj8Bl3HXa31OGAF
ZBa8DUOT4QIDAQABo4ICjzCCAoswHQYDVR0OBBYEFKIV2/eXJaR1BNZdX+VPscki
a+z9MB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMC9BUzcwMTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYI
KwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAJD0mgDBABZI1wDBADRyOoDBADRyP4w
DQYJKoZIhvcNAQELBQADggEBAFVHQEo1v/Xkq+5d8qNXFnZl6itSLPOI/Q1Ujf5T
gktY7Fl0LldRRtiOyphLLQfHM5Zm2NjqVUiDlO7FnaF3x687VyRAXzpoOTgOPwqF
nfiK/Pl5g6L65DABi2Gq9bYAXDNm1G0FiMWZvI+KArs0wWGCDDPfSm+80QWSh2A3
C7kTuRUSkvgU0hu0ysi+7o0cRBvn26QFfzKH9WlfMT/nrKFgrEMBU0ojQc0mLQMA
MP0s0I5YdaD3aUSEQn+wETzVYWcjfBZToaRI3j9rGW495uJYx4H8YJxq9C7h+guf
dFeYBC4xDf1ksfTtEUc3R1Y2lbk0faplDd+CKXJ9Boq7Gtc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org