Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197890.roa
File: AS197890.roa (raw, json)
Hash identifier: ynAurpg+IN6kJojeWL6Hhx0IHLqQi9cN0ADi7AxT6zg=
Subject key identifier: B9:B0:A7:D3:8A:B4:1B:C8:88:81:7C:C2:36:2B:23:4B:4F:0C:28:93
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 0AFD48A3EDFA4821CCBE1DA4797A086D485CD98F
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197890.roa
Signing time: Mon 03 Jun 2024 18:01:19 +0000
ROA not before: Mon 03 Jun 2024 17:56:19 +0000
ROA not after: Mon 02 Jun 2025 18:01:19 +0000
asID: 197890
IP address blocks: 140.99.196.0/23 maxlen: 24
140.99.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:fd:48:a3:ed:fa:48:21:cc:be:1d:a4:79:7a:08:6d:48:5c:d9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Jun 3 17:56:19 2024 GMT
Not After : Jun 2 18:01:19 2025 GMT
Subject: CN=B9B0A7D38AB41BC888817CC2362B234B4F0C2893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:54:2c:26:be:0c:56:51:68:ae:86:33:ab:
a7:9d:4c:45:0d:82:c6:86:86:e7:56:2e:b4:02:92:
99:c1:a2:32:5e:1b:79:a4:15:f5:1b:ef:90:cc:2f:
31:5e:67:70:dd:91:1a:38:1f:42:58:44:e6:09:ab:
d1:f6:47:f0:1d:a3:5d:5f:d9:63:0d:3d:a4:95:13:
ca:f6:7d:c9:67:c6:e0:b7:32:25:5c:c4:34:f1:26:
8d:71:68:2b:f9:1a:c7:bb:47:ad:73:a3:a2:fb:87:
10:fa:24:bf:e9:30:c7:9d:9f:a9:0b:6b:c7:ae:de:
92:ba:82:af:36:e1:6e:70:e2:8b:5c:09:90:5f:cd:
ff:f5:5c:6c:48:06:13:3c:fe:3c:98:e9:79:04:05:
05:47:2e:29:d4:6c:24:21:58:96:80:23:10:a5:cc:
7b:09:2a:20:bb:52:a8:a8:ee:86:3d:f2:8c:aa:4e:
dd:67:d4:40:74:aa:9f:83:53:bf:a8:98:f9:91:bb:
38:53:99:bb:8a:56:ba:38:22:24:0e:65:a6:dc:57:
94:6f:c2:18:80:7c:ea:50:93:ae:12:a3:84:e8:f7:
13:09:da:35:02:4c:86:bb:7b:f0:6e:c9:a0:31:73:
52:ea:aa:96:c3:c8:ec:67:6e:6a:8e:a3:55:ef:df:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B0:A7:D3:8A:B4:1B:C8:88:81:7C:C2:36:2B:23:4B:4F:0C:28:93
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197890.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.196.0/23
140.99.202.0/23
Signature Algorithm: sha256WithRSAEncryption
52:b8:58:36:f8:1c:2f:19:7d:bd:d1:f3:ba:87:3a:81:8e:5c:
e7:b9:01:11:e7:fd:92:d9:d0:86:18:a5:01:b1:9a:55:17:e1:
5f:17:a9:f0:81:08:74:ce:de:ee:f9:ff:fb:c5:a3:d6:0a:f2:
89:6e:75:20:3a:9a:ee:af:75:02:0a:63:80:85:68:60:8f:c5:
42:98:31:18:25:c5:08:10:41:eb:0e:81:7a:c8:2e:b0:ab:8d:
03:ec:54:ab:a6:e1:80:20:b4:8c:e7:d1:ce:5a:ed:0b:3d:6f:
eb:b7:c7:06:1c:26:46:c1:66:97:6d:03:01:7e:68:39:45:a6:
d9:bd:d3:26:f2:b4:85:4d:43:65:78:90:3f:49:d5:49:31:2c:
28:73:f8:ef:33:bc:20:e4:2f:e2:f4:50:a7:34:b1:f9:71:a4:
1e:ba:10:8e:24:0f:c2:73:2c:40:6f:17:e2:0a:43:72:f3:a1:
58:dd:08:04:c7:4d:05:c6:0d:92:33:73:5c:a2:90:d1:06:59:
8a:38:f5:44:19:e9:80:9a:e9:ba:04:bd:53:3a:b2:4b:83:6f:
5d:8a:6f:6d:36:1c:ad:44:10:34:a7:34:e5:4a:7b:0f:ae:31:
3d:05:6d:8a:1e:be:82:c5:da:ba:13:2d:18:d3:09:55:be:ff:
e9:4a:b5:f9
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUCv1Io+36SCHMvh2keXoIbUhc2Y8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwNjAzMTc1NjE5WhcNMjUwNjAyMTgwMTE5
WjAzMTEwLwYDVQQDEyhCOUIwQTdEMzhBQjQxQkM4ODg4MTdDQzIzNjJCMjM0QjRG
MEMyODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9tULCa+DFZR
aK6GM6unnUxFDYLGhobnVi60ApKZwaIyXht5pBX1G++QzC8xXmdw3ZEaOB9CWETm
CavR9kfwHaNdX9ljDT2klRPK9n3JZ8bgtzIlXMQ08SaNcWgr+RrHu0etc6Oi+4cQ
+iS/6TDHnZ+pC2vHrt6SuoKvNuFucOKLXAmQX83/9VxsSAYTPP48mOl5BAUFRy4p
1GwkIViWgCMQpcx7CSogu1KoqO6GPfKMqk7dZ9RAdKqfg1O/qJj5kbs4U5m7ila6
OCIkDmWm3FeUb8IYgHzqUJOuEqOE6PcTCdo1AkyGu3vwbsmgMXNS6qqWw8jsZ25q
jqNV799z8wIDAQABo4IChTCCAoEwHQYDVR0OBBYEFLmwp9OKtBvIiIF8wjYrI0tP
DCiTMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzE5Nzg5MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAYxjxAMEAYxjyjANBgkqhkiG9w0B
AQsFAAOCAQEAUrhYNvgcLxl9vdHzuoc6gY5c57kBEef9ktnQhhilAbGaVRfhXxep
8IEIdM7e7vn/+8Wj1gryiW51IDqa7q91AgpjgIVoYI/FQpgxGCXFCBBB6w6Besgu
sKuNA+xUq6bhgCC0jOfRzlrtCz1v67fHBhwmRsFml20DAX5oOUWm2b3TJvK0hU1D
ZXiQP0nVSTEsKHP47zO8IOQv4vRQpzSx+XGkHroQjiQPwnMsQG8X4gpDcvOhWN0I
BMdNBcYNkjNzXKKQ0QZZijj1RBnpgJrpugS9UzqyS4NvXYpvbTYcrUQQNKc05Up7
D64xPQVtih6+gsXauhMtGNMJVb7/6Uq1+Q==
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net