Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS140947.roa
File: AS140947.roa (raw, json)
Hash identifier: GIZz2b97MM7EaDTP9ArEEUC7koR/swriW/0sVGYfM+g=
Subject key identifier: 2F:76:32:11:6D:8E:5D:A8:01:6F:1E:24:71:5A:9B:F0:1E:8F:78:94
Certificate issuer: /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial: 7ECDE7FB4D4C0153501B3016EBC89A16925B8BC0
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS140947.roa
Signing time: Tue 13 Dec 2022 18:13:22 +0000
ROA not before: Tue 13 Dec 2022 18:08:22 +0000
ROA not after: Tue 12 Dec 2023 18:13:22 +0000
asID: 140947
IP address blocks: 206.206.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:cd:e7:fb:4d:4c:01:53:50:1b:30:16:eb:c8:9a:16:92:5b:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Validity
Not Before: Dec 13 18:08:22 2022 GMT
Not After : Dec 12 18:13:22 2023 GMT
Subject: CN=2F7632116D8E5DA8016F1E24715A9BF01E8F7894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:e9:24:82:41:2d:e5:b1:9e:db:b9:2e:92:
e0:4b:b3:dc:99:ef:20:55:27:a3:71:cb:c0:69:51:
44:b9:c8:0f:9d:b5:97:01:ea:ba:72:9a:47:36:2f:
36:a2:24:12:6a:01:7a:48:2d:29:f8:28:28:2e:0e:
49:08:17:20:fe:ac:09:f5:6a:d4:00:49:cc:62:b8:
d5:00:02:50:09:eb:15:ca:50:30:23:af:7f:6e:31:
60:6f:07:c1:97:a1:d0:71:24:99:0e:97:51:2f:29:
c9:fd:a1:33:ac:be:99:78:bd:2d:ef:5c:92:7b:a4:
0b:39:24:82:14:04:5a:d8:2c:48:ef:d2:6f:56:85:
cd:4b:0c:9d:17:d8:78:af:fd:dc:2c:08:c3:ce:c8:
b4:ef:60:b4:ff:42:6a:b1:05:83:a8:ca:8e:d2:67:
c0:6d:b6:08:5b:8f:b1:dd:82:25:88:29:53:18:f3:
79:e0:1e:d6:b7:53:0b:4f:02:a3:69:05:58:07:c6:
8c:1f:a6:ef:55:49:f4:f3:65:73:91:bb:0b:b7:b6:
08:ed:46:68:2f:f1:72:3d:ee:08:95:ae:44:2a:01:
7f:3f:f7:13:fb:a3:c5:fd:48:d6:47:02:e2:0c:84:
50:30:c7:eb:c2:97:0b:f4:3e:04:0a:90:10:5a:b7:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:76:32:11:6D:8E:5D:A8:01:6F:1E:24:71:5A:9B:F0:1E:8F:78:94
X509v3 Authority Key Identifier:
keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS140947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.206.107.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b4:1e:4b:12:41:6b:8d:95:ae:ce:e9:f1:79:8e:4a:23:ef:
b0:e5:52:f1:19:22:be:17:04:3e:8b:41:bc:db:7f:94:5d:57:
ee:40:56:ce:7a:e0:7f:22:1d:e0:ba:50:52:e3:66:dd:0d:d4:
31:0f:d8:80:77:ee:d7:a1:c9:8f:63:ad:a1:f4:81:b8:7e:22:
7a:ea:cc:43:98:b8:a0:72:5b:ae:1b:51:9a:6e:17:98:7d:29:
c8:a2:87:f5:05:89:23:ae:e3:24:0d:20:d4:8f:72:03:37:8a:
43:79:36:63:77:94:1f:46:43:a2:5f:e8:a4:4c:6d:a9:2b:d4:
af:96:55:96:14:d8:34:ee:58:1c:4b:02:ec:b0:6a:e5:65:56:
30:24:e9:e1:ea:2a:c0:3c:75:0b:ba:d1:0c:c7:1e:21:3d:2e:
fc:b5:1b:e7:56:37:22:b4:cb:11:87:2d:5f:85:b2:4a:18:1d:
ed:04:eb:c7:17:fd:e2:db:87:b6:0e:d0:f6:d6:ad:38:1d:d9:
32:e5:08:4f:cf:db:5c:89:4f:26:60:44:2b:ec:42:bc:ee:b2:
da:c4:e1:04:32:73:ca:6e:65:f1:c7:0e:2e:95:0d:e4:bc:90:
28:ad:03:f7:9b:c1:d9:e4:28:62:39:97:df:bc:6f:75:55:b1:
c7:74:e1:09
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUfs3n+01MAVNQGzAW68iaFpJbi8AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzU5NjU0M2E0YzkwYzM5OGFkN2VmNjk5
YmRlOGM3OWVkZDJlMGI4YWMwHhcNMjIxMjEzMTgwODIyWhcNMjMxMjEyMTgxMzIy
WjAzMTEwLwYDVQQDEygyRjc2MzIxMTZEOEU1REE4MDE2RjFFMjQ3MTVBOUJGMDFF
OEY3ODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwnpJIJBLeWx
ntu5LpLgS7Pcme8gVSejccvAaVFEucgPnbWXAeq6cppHNi82oiQSagF6SC0p+Cgo
Lg5JCBcg/qwJ9WrUAEnMYrjVAAJQCesVylAwI69/bjFgbwfBl6HQcSSZDpdRLynJ
/aEzrL6ZeL0t71ySe6QLOSSCFARa2CxI79JvVoXNSwydF9h4r/3cLAjDzsi072C0
/0JqsQWDqMqO0mfAbbYIW4+x3YIliClTGPN54B7Wt1MLTwKjaQVYB8aMH6bvVUn0
82VzkbsLt7YI7UZoL/FyPe4Ila5EKgF/P/cT+6PF/UjWRwLiDIRQMMfrwpcL9D4E
CpAQWreQhwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFC92MhFtjl2oAW8eJHFam/Ae
j3iUMB8GA1UdIwQYMBaAFEzEOYug/lCqoIv6I/5wGtDCBgR/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzEv
NENDNDM5OEJBMEZFNTBBQUEwOEJGQTIzRkU3MDFBRDBDMjA2MDQ3Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNTk2NTQzYTRjOTBjMzk4YWQ3ZWY2OTliZGU4Yzc5ZWRkMmUwYjhhYy5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMS9BUzE0MDk0Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM7OazANBgkqhkiG9w0BAQsFAAOC
AQEAsLQeSxJBa42Vrs7p8XmOSiPvsOVS8RkivhcEPotBvNt/lF1X7kBWznrgfyId
4LpQUuNm3Q3UMQ/YgHfu16HJj2OtofSBuH4ieurMQ5i4oHJbrhtRmm4XmH0pyKKH
9QWJI67jJA0g1I9yAzeKQ3k2Y3eUH0ZDol/opExtqSvUr5ZVlhTYNO5YHEsC7LBq
5WVWMCTp4eoqwDx1C7rRDMceIT0u/LUb51Y3IrTLEYctX4WyShgd7QTrxxf94tuH
tg7Q9tatOB3ZMuUIT8/bXIlPJmBEK+xCvO6y2sThBDJzym5l8ccOLpUN5LyQKK0D
95vB2eQoYjmX37xvdVWxx3ThCQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:48 2023 by rpki-client on console.sobornost.net