Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/1/3134302e3233352e3139362e302f32322d3234203d3e20393435.roa
File: 3134302e3233352e3139362e302f32322d3234203d3e20393435.roa (raw, json)
Hash identifier: O1+e+YaHDNns9q/cpsnMl6HoMEU3MwHSa2oWG6kncBY=
Subject key identifier: 85:09:6E:F2:7A:3B:D6:22:1C:3C:8F:DD:00:34:51:A6:25:4A:CE:CA
Certificate issuer: /CN=a6201efd4c3d6ab6eabeac88e666d6448f4dece7f82ceafe38
Certificate serial: 76B6CA332A29DEFB34F78C0FCCFC994EEFC5D212
Authority key identifier: C6:88:B5:9E:42:2D:77:E9:32:AC:51:86:EC:BF:91:49:91:63:C0:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c3d6ab6eabeac88e666d6448f4dece7f82ceafe38.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/1/3134302e3233352e3139362e302f32322d3234203d3e20393435.roa
Signing time: Wed 26 Feb 2025 19:44:24 +0000
ROA not before: Wed 26 Feb 2025 19:39:24 +0000
ROA not after: Wed 25 Feb 2026 19:44:24 +0000
asID: 945
IP address blocks: 140.235.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b6:ca:33:2a:29:de:fb:34:f7:8c:0f:cc:fc:99:4e:ef:c5:d2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6201efd4c3d6ab6eabeac88e666d6448f4dece7f82ceafe38
Validity
Not Before: Feb 26 19:39:24 2025 GMT
Not After : Feb 25 19:44:24 2026 GMT
Subject: CN=85096EF27A3BD6221C3C8FDD003451A6254ACECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:d5:c2:c3:d9:25:b7:bb:5d:96:aa:9c:83:
7e:ff:01:31:fa:33:f4:ef:a9:48:d2:a1:97:36:0c:
5f:58:5d:b9:83:cc:f2:d6:6f:af:55:59:15:96:3c:
2a:cd:9e:89:e4:84:d3:c3:15:7a:8d:b7:96:64:b1:
0f:6d:b3:09:c8:a8:22:bd:1a:cc:9d:bb:a1:c1:95:
7a:70:8f:26:74:3b:8a:3b:1e:b0:74:44:73:4f:4e:
3e:50:eb:72:a0:65:6a:4b:f6:4b:c7:9a:94:ff:28:
de:a5:93:54:78:60:63:07:99:37:2c:e7:98:e8:a4:
ad:2c:2f:49:5b:85:e3:f6:79:2c:c1:9a:cc:51:9b:
c5:51:81:48:71:e2:97:de:1a:45:19:21:57:33:26:
54:08:0d:ca:74:eb:3d:06:8e:b9:ba:84:5f:23:22:
06:a8:f2:1e:b8:fa:9c:7d:56:84:16:ac:5d:78:fb:
f2:50:0e:9f:88:b2:e4:fe:72:46:25:3d:0e:6a:9f:
d6:1b:da:be:87:e3:83:b3:00:b3:30:59:99:39:2d:
d5:1e:5a:79:62:89:e2:99:1e:df:c0:0e:cf:7c:51:
0d:7d:b4:ee:6d:27:b6:08:a8:29:39:38:c0:8a:b8:
2f:98:bc:6e:91:b6:f6:4f:d6:65:ea:b7:15:10:e1:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:09:6E:F2:7A:3B:D6:22:1C:3C:8F:DD:00:34:51:A6:25:4A:CE:CA
X509v3 Authority Key Identifier:
keyid:C6:88:B5:9E:42:2D:77:E9:32:AC:51:86:EC:BF:91:49:91:63:C0:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/1/C688B59E422D77E932AC5186ECBF91499163C0CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c3d6ab6eabeac88e666d6448f4dece7f82ceafe38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/1/3134302e3233352e3139362e302f32322d3234203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.235.196.0/22
Signature Algorithm: sha256WithRSAEncryption
02:9d:40:8f:47:f5:84:cc:03:d5:41:61:f6:57:07:5a:ac:a6:
bc:8e:81:da:1a:b5:e6:29:86:6a:7f:89:fb:ea:aa:84:4a:38:
3c:ef:37:fc:54:f3:2b:64:9c:0e:fb:96:7e:86:b9:1b:1c:fe:
90:a4:b9:25:85:4b:3a:a4:e3:70:2c:aa:ab:73:3d:3c:2c:58:
7e:e2:6e:5b:85:d4:16:f7:fd:4d:5b:9a:a0:be:7a:5f:57:98:
22:76:78:47:6e:a2:54:87:43:48:df:ef:c2:25:6e:f3:3e:32:
98:56:dd:f8:64:85:ef:32:c0:a0:6f:99:a6:27:23:11:fe:13:
a6:52:5d:61:49:b3:0d:46:d6:d9:fa:ec:be:5d:5f:02:b9:68:
fd:20:02:1c:7f:57:d1:7c:05:d3:06:c1:99:a9:b9:59:82:0e:
28:96:36:a2:32:e4:ee:29:6e:ca:fa:6f:71:4a:f6:cc:e5:a4:
72:9d:d0:c8:27:38:88:b9:b6:66:ce:8d:7d:60:d2:bb:77:69:
e4:bb:6e:8a:f7:fc:a6:05:9f:02:36:9a:50:b3:eb:bb:77:08:
a4:63:c9:b6:1f:66:f9:46:c4:6f:34:a3:17:c7:48:39:a7:77:
d9:bd:df:90:97:39:52:39:f8:6f:44:d6:f1:cf:dd:04:bb:8b:
62:48:c9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net