Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: CQlF/nxToJ6kpGzGqcX3nNG0eesmFdtBWEZ68pAQ+oE=
Subject key identifier: 8D:65:24:F2:B3:DA:0D:ED:DE:E6:29:92:5E:9A:19:7F:1F:E5:CE:2E
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 2F17893EDBACD71DC805A8C2A73ED88CCC8EDF60
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214025.roa
Signing time: Sat 12 Apr 2025 00:00:10 +0000
ROA not before: Fri 11 Apr 2025 23:55:10 +0000
ROA not after: Sat 11 Apr 2026 00:00:10 +0000
asID: 214025
IP address blocks: 140.99.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:17:89:3e:db:ac:d7:1d:c8:05:a8:c2:a7:3e:d8:8c:cc:8e:df:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Apr 11 23:55:10 2025 GMT
Not After : Apr 11 00:00:10 2026 GMT
Subject: CN=8D6524F2B3DA0DEDDEE629925E9A197F1FE5CE2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:26:d2:ea:25:45:e3:1d:db:45:f8:79:79:82:
87:a6:e1:eb:07:17:27:57:e9:6f:4d:83:70:cc:92:
80:d0:90:41:e6:8c:12:08:30:38:2a:b0:b8:1c:08:
89:2a:ab:7d:e4:d0:42:d4:92:43:49:55:47:04:2e:
ef:b9:e1:06:7f:99:e4:3b:08:73:88:7e:25:ef:cc:
15:c1:98:ca:4b:21:02:ff:43:0e:1f:67:81:be:e9:
1a:e9:87:cf:c9:4a:10:c9:08:b5:04:35:c0:26:b5:
99:2d:43:8b:72:28:6c:06:df:8d:d0:1a:6f:17:a5:
42:f4:00:db:ae:7c:8c:e8:14:ac:6b:f4:73:3b:6f:
ea:2c:13:f3:10:49:e2:4b:d5:fb:75:c0:9a:81:89:
19:3e:c9:88:ad:64:b2:86:38:d1:bd:89:5c:c0:45:
5a:fb:d6:a1:d2:d1:0a:c3:17:c8:de:39:4d:87:05:
d6:00:ab:a3:f5:08:1c:45:f4:23:d3:80:06:5f:15:
53:02:96:c4:94:f3:3e:21:07:8f:d3:0d:1a:a2:aa:
fb:34:71:34:cc:db:fd:66:b8:9c:a5:fa:44:0a:a6:
3f:3d:2e:b7:bb:f1:2d:68:53:88:d1:b5:ad:5a:b6:
a4:23:72:98:0d:1b:d8:a2:bb:66:eb:15:a9:6f:69:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:65:24:F2:B3:DA:0D:ED:DE:E6:29:92:5E:9A:19:7F:1F:E5:CE:2E
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:df:80:6a:de:b7:c8:e1:db:a7:b8:18:bf:8e:b7:3d:e0:82:
13:c0:05:fc:b1:4d:7d:a1:3b:9a:40:ac:87:a0:d0:82:51:5c:
54:aa:a4:4b:13:75:a7:8a:b9:d7:25:dd:6f:81:0d:b1:e2:4c:
24:0c:7a:b0:6f:15:5c:09:c2:02:ff:bb:63:c5:5f:e0:6a:82:
96:63:d9:8a:11:96:30:09:7c:a9:aa:eb:7c:42:a2:2d:2f:9f:
ba:38:51:3e:4b:ce:b8:e1:d8:64:10:41:23:63:e2:85:c2:74:
94:55:01:8d:2f:1b:a6:4a:c9:84:34:d1:cc:76:6e:7c:04:38:
53:eb:50:fe:b5:88:21:aa:c5:2a:74:5f:2a:08:b2:d4:4e:d3:
a7:4d:08:1c:a6:34:38:51:fd:62:da:55:cf:ff:0a:98:d9:e4:
05:14:89:59:d0:9a:da:12:d3:6e:2c:18:17:23:b8:05:5c:fd:
87:a7:01:9e:07:d5:59:00:3a:c5:b4:c1:77:b3:b1:04:36:6a:
d2:f5:6e:98:84:b8:b5:06:35:82:01:6e:9b:d7:ca:3a:13:88:
6a:97:e9:57:b7:c3:f9:24:98:43:bb:f5:41:23:34:bb:33:b4:
33:95:a3:7d:da:86:7c:76:fb:14:77:af:51:9b:0a:54:6b:46:
e9:57:47:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net