Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS32475.roa
File: AS32475.roa (raw, json)
Hash identifier: nmFj//l5LAHsHKGiUHEKGriRKQMwxaAw0QGxsGm+j0g=
Subject key identifier: 6F:0C:9B:F4:BD:3F:E6:D2:AF:BB:86:45:D4:03:12:8D:82:97:E4:0B
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 2929CB05380D69BDA4B97073F81186D1CCFFA73C
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS32475.roa
Signing time: Thu 03 Apr 2025 20:28:27 +0000
ROA not before: Thu 03 Apr 2025 20:23:27 +0000
ROA not after: Thu 02 Apr 2026 20:28:27 +0000
asID: 32475
IP address blocks: 140.99.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:29:cb:05:38:0d:69:bd:a4:b9:70:73:f8:11:86:d1:cc:ff:a7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Apr 3 20:23:27 2025 GMT
Not After : Apr 2 20:28:27 2026 GMT
Subject: CN=6F0C9BF4BD3FE6D2AFBB8645D403128D8297E40B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:6c:ed:ce:cc:9e:94:ab:08:1f:02:c2:af:
4b:c3:91:5c:11:ae:14:c2:fe:58:a6:a4:ad:35:35:
61:7c:d4:04:01:9f:41:0d:2e:2d:b9:15:0a:85:b3:
e3:50:ff:83:92:64:91:80:68:35:65:b1:0d:f8:09:
bd:dc:f1:a0:e4:df:3d:e3:04:45:51:3b:a8:c6:82:
2a:06:90:e9:c8:cc:65:0c:21:87:9f:5b:a6:2b:c3:
e9:b5:40:4d:75:42:b8:a5:31:be:44:a9:14:26:9b:
ca:e7:c7:6e:ee:c2:b8:77:37:c1:89:92:26:52:74:
09:86:40:e9:2d:3a:f0:67:18:72:47:2e:aa:53:2b:
fb:f9:50:f2:0e:3d:07:45:63:78:e5:f5:52:33:53:
b9:3d:cb:d1:27:66:08:66:5b:43:dc:73:72:c5:44:
7e:d4:30:f3:c0:02:26:68:7f:e5:35:25:ca:30:51:
59:a5:df:18:e8:6f:cc:5c:27:78:5e:47:55:9a:02:
f5:d2:68:d7:80:02:af:3f:88:ac:c8:0d:9b:6d:6c:
5d:eb:b4:d6:c6:81:79:54:c8:a4:f3:a4:3d:9a:76:
43:1d:70:53:99:2b:9d:d6:f2:77:66:c9:e3:43:93:
86:4c:72:3c:e3:b6:c0:c6:8a:bf:76:70:29:67:00:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0C:9B:F4:BD:3F:E6:D2:AF:BB:86:45:D4:03:12:8D:82:97:E4:0B
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS32475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.244.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:f0:e9:ac:8c:68:97:3d:32:58:31:de:30:7e:01:83:8c:ee:
66:5a:d8:72:f1:c7:66:a7:90:89:bb:df:44:29:70:7d:e3:d3:
0c:4f:b5:cf:97:82:c3:a5:1d:56:13:cd:36:47:28:e6:51:ae:
08:db:2d:1b:5f:53:8f:91:43:9b:58:db:21:35:9a:64:54:ba:
c8:8c:59:e5:93:d0:77:db:85:54:0c:1e:3c:22:c0:6b:75:37:
01:21:ee:bb:8a:26:ca:4e:48:59:99:2f:12:65:b0:42:77:b8:
60:1d:ec:08:76:f2:95:f8:8f:99:6a:a9:b0:0f:ff:5e:9e:6c:
9b:02:08:11:fb:7e:5d:8b:38:5f:d7:5d:4b:f8:aa:d7:9a:c9:
cf:64:f0:5c:3f:f7:a1:5a:92:ae:0e:f5:75:8f:62:bf:65:e5:
28:27:ae:5a:42:01:ad:40:bb:89:31:1f:8d:94:a3:5b:29:5c:
20:bc:f6:7c:86:08:8c:d1:24:55:04:7a:ee:76:da:91:c6:7b:
7a:b9:cf:38:16:9a:65:5c:74:be:2f:d5:c4:c3:ad:09:57:9b:
a6:92:62:6f:94:d1:f8:8b:72:ee:7f:cb:dd:46:30:30:21:35:
21:63:c1:ed:6e:01:d8:94:a8:48:cd:77:7d:be:a7:8d:dd:d2:
05:6c:e6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net