Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS7843.roa
File: AS7843.roa (raw, json)
Hash identifier: wTLKD6KG8hlwR1yH9rJlId+RgSvskA4BSir+MuvqwU4=
Subject key identifier: 03:02:A6:8E:7A:F4:AC:94:6C:C8:E3:1D:9C:B2:3C:15:0A:3A:30:7C
Certificate issuer: /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial: 13BFA01A77EEBF62BE7779D32878179C5F80B82A
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS7843.roa
Signing time: Thu 10 Nov 2022 13:38:26 +0000
ROA not before: Thu 10 Nov 2022 13:33:26 +0000
ROA not after: Thu 09 Nov 2023 13:38:26 +0000
asID: 7843
IP address blocks: 67.210.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:bf:a0:1a:77:ee:bf:62:be:77:79:d3:28:78:17:9c:5f:80:b8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Validity
Not Before: Nov 10 13:33:26 2022 GMT
Not After : Nov 9 13:38:26 2023 GMT
Subject: CN=0302A68E7AF4AC946CC8E31D9CB23C150A3A307C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:d7:ba:cb:0d:0a:38:d5:08:ee:09:48:e4:
87:d6:7c:e1:a2:e7:37:40:a8:01:6a:29:30:2b:1e:
21:62:4a:9d:3a:65:8a:9b:e9:0d:86:ae:7f:87:ad:
84:fa:23:00:d0:a3:7d:f4:8d:b9:bd:c1:49:4d:9b:
36:0b:12:47:a9:29:1b:f5:21:97:0f:e9:0f:f4:11:
28:9f:a6:07:b1:88:46:22:5e:c3:7a:c1:c1:87:84:
7d:eb:7c:a8:14:f2:e0:dd:f4:0e:a4:e4:cf:3a:5e:
4e:0d:e8:22:18:95:ac:bb:c3:b5:6a:17:bc:9e:15:
0e:06:26:e4:56:80:24:62:50:18:13:ec:2f:91:d8:
9e:19:b3:07:ea:29:f6:aa:e3:bb:20:11:50:01:e9:
89:a4:88:57:c1:05:87:e3:de:87:c3:25:72:e3:ea:
41:7c:21:7a:a1:6b:e4:8c:db:12:ed:e8:a3:aa:b3:
52:bb:e5:7e:3e:0d:af:43:6b:4c:b8:e9:2d:68:3c:
a9:3b:69:d5:f3:5a:a0:e6:a8:0f:be:2c:e0:31:76:
0c:ee:54:37:91:18:e1:fa:68:5a:4f:97:02:18:58:
a0:8b:67:64:1a:43:d8:4e:e2:fe:c4:0a:a3:a7:0f:
b1:57:d8:e3:f7:63:94:83:dd:a4:9f:93:5c:c0:de:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:02:A6:8E:7A:F4:AC:94:6C:C8:E3:1D:9C:B2:3C:15:0A:3A:30:7C
X509v3 Authority Key Identifier:
keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS7843.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.210.100.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:1b:f5:ff:76:74:8c:a0:96:15:b6:32:d3:d5:92:30:f0:19:
b0:df:cd:3b:1a:53:e1:2d:ba:b6:a8:44:1c:da:8e:32:a7:21:
7d:79:ea:ad:39:f4:1d:10:39:30:87:11:eb:1f:bc:2f:e0:aa:
22:74:8e:5b:89:87:c6:ee:20:f6:6b:b9:00:9e:eb:15:20:15:
b2:92:58:71:3b:9a:12:b3:86:aa:2e:29:b5:53:8c:c6:5f:db:
4c:21:ca:16:77:4a:e9:3c:b6:c8:76:4a:00:b6:af:2f:8c:30:
a5:0d:5f:60:90:0c:09:26:47:f3:19:d6:8a:57:45:c6:32:15:
d0:da:0f:c6:98:b5:d7:e9:93:bf:32:e7:ab:83:e2:ba:e6:9e:
6b:69:0c:d6:af:e5:54:6c:ee:46:53:a8:eb:95:09:ec:06:e4:
cf:77:30:a4:ed:2e:33:e8:9c:36:cf:27:d4:66:02:06:00:e3:
1b:e5:3d:a6:80:cd:d3:45:e8:9e:f6:af:25:c1:c4:6e:be:58:
08:19:df:79:0e:8f:2a:95:7f:b0:3d:b0:8d:dd:91:6c:b9:6b:
ee:7e:7d:06:d8:fd:96:95:1e:2a:05:2d:6c:2f:d3:92:bc:9d:
cd:47:d4:32:4d:5b:14:fa:25:39:3f:86:0c:31:be:6d:ea:59:
d4:d3:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org