Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214654.roa
File: AS214654.roa (raw, json)
Hash identifier: nJJo68WYGr+eeBfCfbHNHfES6zvrN4bSbykQWfyfVxM=
Subject key identifier: B3:66:8C:8D:97:CB:1B:94:A3:C4:2C:EF:B7:06:8C:39:B7:6B:86:69
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 10AC9144EA5435F4A19C28B7B65587FC3E7B8C68
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214654.roa
Signing time: Sat 12 Apr 2025 00:00:10 +0000
ROA not before: Fri 11 Apr 2025 23:55:10 +0000
ROA not after: Sat 11 Apr 2026 00:00:10 +0000
asID: 214654
IP address blocks: 140.99.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ac:91:44:ea:54:35:f4:a1:9c:28:b7:b6:55:87:fc:3e:7b:8c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Apr 11 23:55:10 2025 GMT
Not After : Apr 11 00:00:10 2026 GMT
Subject: CN=B3668C8D97CB1B94A3C42CEFB7068C39B76B8669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:4b:73:d7:94:7b:4f:e5:f9:5b:6e:2d:99:
c5:6f:33:30:6a:17:f9:9e:8b:9b:8f:aa:e1:b5:fb:
95:b4:d8:6e:cc:c2:33:05:d1:a0:3d:ea:ad:d4:b9:
4d:97:3b:44:61:ce:1f:2f:83:7c:42:50:26:1d:d5:
ef:77:35:62:13:27:29:dd:74:ba:5d:26:6e:ea:f4:
ce:72:da:40:10:88:fb:8d:68:82:3b:15:64:8f:bb:
dc:77:b3:bb:34:8a:e8:52:11:76:ee:52:42:5f:2a:
16:23:1b:27:ae:59:4e:a3:cd:7d:5c:6e:43:c2:46:
4b:ef:58:96:c1:b0:87:42:f3:c6:be:f9:d0:16:c4:
6a:5f:a8:d9:47:6d:d9:dc:8d:83:9a:8c:c0:d9:80:
af:74:ff:06:85:38:76:83:56:20:5a:ae:cf:f2:31:
22:72:8c:67:5c:12:30:be:86:05:d3:dd:91:92:29:
e4:e4:72:cb:77:55:c7:82:de:ed:db:73:51:bb:4f:
55:ef:22:ec:3d:ac:af:41:d3:d2:48:e1:6e:b1:04:
d2:e3:0c:21:3d:ed:8e:20:82:e8:2a:5c:77:e6:23:
3b:09:f1:c8:7f:79:bf:60:e9:54:69:be:22:dc:69:
1c:26:87:b0:00:05:7c:b6:63:35:96:8e:8f:70:86:
35:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:66:8C:8D:97:CB:1B:94:A3:C4:2C:EF:B7:06:8C:39:B7:6B:86:69
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.47.0/24
Signature Algorithm: sha256WithRSAEncryption
62:91:15:81:45:ba:e4:e0:cb:33:87:cf:8c:f7:bc:e2:1c:af:
4b:11:80:4b:be:88:9a:1a:80:43:a0:cd:da:d6:09:40:34:5f:
99:90:12:0f:5a:70:96:ad:57:11:a5:0c:9b:7b:eb:20:c3:8e:
ea:d6:97:52:0b:eb:95:cd:30:79:c0:19:25:96:51:6b:56:78:
2b:02:f3:24:94:16:25:80:6c:cc:bd:a5:df:29:cd:23:97:7c:
d9:d2:45:81:ce:46:1b:2d:15:b2:42:1b:de:8a:c7:5a:92:c4:
2f:87:6b:66:96:5a:23:45:ab:7e:c7:52:15:80:59:bf:7c:fd:
3f:9e:7d:a2:dc:4d:f6:c9:a2:bb:f4:ef:61:68:14:6d:37:b9:
e0:34:bf:b6:24:e5:88:c3:ef:43:8b:b7:ed:b1:7b:49:5d:0b:
1e:b4:2d:79:b8:cc:e1:c1:66:15:75:b0:24:2d:bd:da:ef:e2:
c1:cc:27:16:3c:9e:ab:4a:a1:35:e8:b6:a5:2d:8f:a5:08:32:
aa:78:13:a6:5f:ca:bf:ed:85:e9:2a:35:2c:41:14:68:ca:48:
fa:e4:c7:26:80:04:bb:58:2d:54:06:28:b1:16:3c:42:b6:fe:
d1:19:29:a8:5f:d3:2c:80:c8:8c:17:e7:2e:75:bc:8b:54:dd:
de:54:7c:a8
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUEKyRROpUNfShnCi3tlWH/D57jGgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwNDExMjM1NTEwWhcNMjYwNDExMDAwMDEw
WjAzMTEwLwYDVQQDEyhCMzY2OEM4RDk3Q0IxQjk0QTNDNDJDRUZCNzA2OEMzOUI3
NkI4NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8BLc9eUe0/l
+VtuLZnFbzMwahf5noubj6rhtfuVtNhuzMIzBdGgPeqt1LlNlztEYc4fL4N8QlAm
HdXvdzViEycp3XS6XSZu6vTOctpAEIj7jWiCOxVkj7vcd7O7NIroUhF27lJCXyoW
IxsnrllOo819XG5DwkZL71iWwbCHQvPGvvnQFsRqX6jZR23Z3I2DmozA2YCvdP8G
hTh2g1YgWq7P8jEicoxnXBIwvoYF092Rkink5HLLd1XHgt7t23NRu09V7yLsPayv
QdPSSOFusQTS4wwhPe2OIILoKlx35iM7CfHIf3m/YOlUab4i3GkcJoewAAV8tmM1
lo6PcIY1MwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFLNmjI2XyxuUo8Qs77cGjDm3
a4ZpMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzIxNDY1NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIxjLzANBgkqhkiG9w0BAQsFAAOC
AQEAYpEVgUW65ODLM4fPjPe84hyvSxGAS76ImhqAQ6DN2tYJQDRfmZASD1pwlq1X
EaUMm3vrIMOO6taXUgvrlc0wecAZJZZRa1Z4KwLzJJQWJYBszL2l3ynNI5d82dJF
gc5GGy0VskIb3orHWpLEL4drZpZaI0WrfsdSFYBZv3z9P559otxN9smiu/TvYWgU
bTe54DS/tiTliMPvQ4u37bF7SV0LHrQtebjM4cFmFXWwJC292u/iwcwnFjyeq0qh
Nei2pS2PpQgyqngTpl/Kv+2F6So1LEEUaMpI+uTHJoAEu1gtVAYosRY8Qrb+0Rkp
qF/TLIDIjBfnLnW8i1Td3lR8qA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net