Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215287.roa
File: AS215287.roa (raw, json)
Hash identifier: e7zjIilEejOiOGKk7HKhc2AjBfwfWzWnx/tYNEfueTY=
Subject key identifier: CB:A1:6C:7E:85:03:C2:C6:A5:38:1F:FF:38:71:9C:CB:66:2D:1A:1E
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 0D7C958D7105092526CDE075C450AE5308A4A4E2
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215287.roa
Signing time: Wed 28 Aug 2024 22:08:36 +0000
ROA not before: Wed 28 Aug 2024 22:03:36 +0000
ROA not after: Wed 27 Aug 2025 22:08:36 +0000
asID: 215287
IP address blocks: 98.142.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:7c:95:8d:71:05:09:25:26:cd:e0:75:c4:50:ae:53:08:a4:a4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Aug 28 22:03:36 2024 GMT
Not After : Aug 27 22:08:36 2025 GMT
Subject: CN=CBA16C7E8503C2C6A5381FFF38719CCB662D1A1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:3c:ed:17:e8:29:f4:38:b7:e4:c1:01:46:
79:4f:17:d4:95:e2:cd:9e:e7:aa:eb:fb:3c:52:76:
fc:c4:63:e2:e1:95:c3:82:0a:21:d1:66:44:51:31:
b3:80:79:e2:b7:a4:46:e3:e4:31:23:d3:b7:e8:d4:
da:42:1a:d6:64:d3:6f:4a:27:60:41:45:32:66:78:
7a:ca:a9:51:11:9c:88:5b:e6:28:11:b3:dd:63:8b:
e9:0b:2c:bf:6b:77:46:a7:f5:5f:a9:5c:82:9f:26:
0d:43:91:40:36:ff:8e:9c:1c:ed:5a:2d:7e:78:9c:
b2:2a:34:ee:4c:c4:f6:66:d9:1d:7d:14:2c:21:3c:
9c:fe:e0:76:9f:14:75:bb:8f:37:a8:de:a6:85:50:
05:50:07:9d:b5:fb:d5:0a:a0:f8:71:63:e7:dd:c7:
b0:58:fa:b7:b2:ad:6e:b5:f5:e2:30:d2:b5:13:95:
60:b4:59:e3:b5:e6:b9:73:54:fb:26:c2:9b:b8:cc:
07:78:58:0f:39:c9:6c:be:26:f5:02:4d:91:93:e9:
ea:8f:58:ae:b1:70:4b:e4:0d:da:4b:bb:7c:74:97:
3d:a2:10:e6:dc:b0:5c:1c:99:1d:60:ad:9c:7f:f0:
a3:d9:7c:d9:3b:c0:a0:54:ad:63:29:24:a9:5f:71:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:6C:7E:85:03:C2:C6:A5:38:1F:FF:38:71:9C:CB:66:2D:1A:1E
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.250.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ae:86:71:ef:1f:e3:0f:05:c7:22:13:d4:07:da:d4:60:ee:
00:9f:5b:4d:4c:ee:44:44:02:3e:19:42:4b:bf:30:67:98:94:
42:0e:3f:49:af:4d:46:6f:70:f0:86:a7:a3:32:1c:a4:6f:5d:
1f:7f:e2:79:5f:dd:10:c9:25:2e:cc:b6:d2:1a:f7:be:4c:d4:
36:d6:f1:58:38:ca:19:65:9d:62:28:5f:2b:13:b3:b0:10:72:
a2:29:c9:ba:a2:de:7b:40:27:40:45:45:83:8c:e7:a5:26:f8:
c0:b7:b7:49:a0:36:be:df:e8:41:f7:ae:de:fa:51:8a:f5:d3:
92:71:9f:ca:be:65:0d:8e:4c:e8:c0:60:a7:73:36:65:2b:13:
7f:d0:00:2c:bb:89:cf:a2:a9:e2:b3:02:e5:df:b8:39:a7:1c:
de:36:13:46:0a:aa:0b:ea:0e:a6:0d:53:c8:e2:f3:29:c4:f7:
67:9d:b3:0b:c7:fa:71:15:cb:8b:09:e2:65:2d:3e:28:86:1f:
fd:5a:df:84:96:50:d6:4b:31:84:e4:8d:4d:d7:ab:d0:8f:58:
50:a5:36:d0:06:17:2b:da:0b:38:aa:97:33:bb:75:bb:d7:8a:
ac:2e:37:77:b5:07:7f:27:e4:a2:72:06:7f:7e:aa:30:53:93:
92:45:43:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 08:32:15 2024 by rpki-client on console.sobornost.net