Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS8100.roa
File: AS8100.roa (raw, json)
Hash identifier: 1oFPZ2rdQle5Ud/u0QkdVUabsZ2cdWqIwMtDiUhRTF0=
Subject key identifier: AD:AA:57:1D:D3:E4:FD:78:1F:9B:DC:1B:C9:DF:99:58:40:27:45:69
Certificate issuer: /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial: 012818E85937F9D3BA89006449769DA4EF3803CE
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS8100.roa
Signing time: Thu 10 Nov 2022 13:38:26 +0000
ROA not before: Thu 10 Nov 2022 13:33:26 +0000
ROA not after: Thu 09 Nov 2023 13:38:26 +0000
asID: 8100
IP address blocks: 209.200.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:28:18:e8:59:37:f9:d3:ba:89:00:64:49:76:9d:a4:ef:38:03:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Validity
Not Before: Nov 10 13:33:26 2022 GMT
Not After : Nov 9 13:38:26 2023 GMT
Subject: CN=ADAA571DD3E4FD781F9BDC1BC9DF995840274569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:35:30:01:91:80:79:af:46:e1:e8:27:58:8e:
5d:d6:b5:98:92:13:1d:77:51:68:75:78:c1:b1:52:
6a:88:b6:11:fd:cc:eb:dc:a9:b0:94:88:23:df:e1:
d1:68:dd:de:5a:94:fa:bc:b5:11:40:5c:d5:8a:30:
68:f8:22:05:31:ec:42:6a:3e:e9:51:a3:00:b4:89:
b5:f2:ba:06:c1:b7:13:d6:e5:54:c0:11:e6:0c:a7:
d9:4b:55:17:a9:3b:de:d1:79:b4:a6:3a:11:68:3b:
89:7a:54:a5:18:dd:08:d8:27:b2:ef:3c:21:30:19:
a7:03:e1:69:83:86:09:d7:1b:31:0b:5f:d6:d2:3e:
45:98:83:e2:d0:7e:8a:15:09:08:2c:80:24:a5:01:
86:46:28:b7:d3:a3:cd:e2:a8:30:6e:8f:6c:44:34:
33:0f:29:c3:9a:d8:a2:f0:f5:a9:89:9b:36:03:88:
52:a4:98:7d:91:97:17:9f:7b:e8:85:16:98:1c:2c:
0b:d5:a5:04:16:e2:8c:72:1d:f1:36:c5:28:0a:1c:
e2:73:e7:b4:cf:64:bd:cc:68:94:71:ec:71:b3:62:
44:f5:9a:69:4d:d9:c8:f1:51:ec:54:a3:25:cc:c5:
4b:7d:b1:39:4f:6f:57:db:60:1e:d5:7d:f2:d2:0a:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AA:57:1D:D3:E4:FD:78:1F:9B:DC:1B:C9:DF:99:58:40:27:45:69
X509v3 Authority Key Identifier:
keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS8100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.200.252.0/24
Signature Algorithm: sha256WithRSAEncryption
36:70:58:73:75:aa:a0:f3:b3:a9:29:2e:53:e0:41:5a:8d:7e:
f7:17:ae:57:25:26:29:0a:f8:db:2a:c0:1f:e8:1b:ac:c7:a5:
54:9f:0e:45:0a:1d:50:21:01:7f:ae:5e:77:d5:86:26:08:b1:
db:1e:b9:e1:07:8b:8d:11:7a:2e:08:48:48:9b:bd:28:ca:35:
10:ec:80:34:9b:d9:91:53:c0:09:18:b0:39:e0:23:06:bb:3b:
95:ff:86:bd:f8:91:a0:ec:22:1a:be:1b:bc:80:b5:e9:53:e0:
34:ff:17:e9:dc:85:92:e0:1e:1a:fe:13:7c:f8:f7:e1:06:07:
52:16:06:c3:fd:0b:85:3b:81:87:22:c1:5d:4a:77:af:0a:c5:
2d:fe:38:c0:3d:96:60:36:07:e2:77:1f:c0:d1:fb:dc:a5:79:
96:aa:1c:f8:93:5c:ae:c9:46:7c:ff:0f:5c:2f:d0:f8:1c:16:
14:cc:66:2b:ff:df:69:b9:8d:c3:f4:f7:cf:c9:59:20:3f:47:
9c:22:2e:a2:72:19:36:39:38:09:ee:e8:b5:b1:c1:d1:60:5c:
7c:ae:0b:3d:30:dd:86:07:65:6f:c9:26:8d:90:31:5a:22:45:
41:2f:15:38:1d:b1:17:60:e4:b6:8f:83:27:ee:3e:d0:30:74:
d6:f4:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org