Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: VO+U0cmyf32xt57aPluWBl7+IlbqgniI/o850v7IR4k=
Subject key identifier: 5C:5B:6E:8A:2B:9A:0C:B8:96:7B:28:FE:00:87:C6:73:5A:81:D5:2F
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 10BF99787BF68090154DFFBA161BEE5A7FE50744
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
Signing time: Sat 12 Apr 2025 00:00:20 +0000
ROA not before: Fri 11 Apr 2025 23:55:20 +0000
ROA not after: Sat 11 Apr 2026 00:00:20 +0000
asID: 834
IP address blocks: 140.99.48.0/24 maxlen: 24
140.99.131.0/24 maxlen: 24
140.99.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:bf:99:78:7b:f6:80:90:15:4d:ff:ba:16:1b:ee:5a:7f:e5:07:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Apr 11 23:55:20 2025 GMT
Not After : Apr 11 00:00:20 2026 GMT
Subject: CN=5C5B6E8A2B9A0CB8967B28FE0087C6735A81D52F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f2:55:59:aa:64:a5:1e:53:52:97:64:f8:af:
71:39:21:7c:66:bb:05:c7:f9:0f:7b:1f:ec:8f:b7:
a7:97:4d:5d:5e:cb:bd:78:7e:02:99:88:5b:8a:ed:
3d:d6:9c:1e:6d:4f:e6:c0:73:e5:3f:ad:6c:5f:23:
b9:5b:10:25:a9:50:23:e3:20:f8:dd:64:f2:49:e3:
1b:70:19:6b:c2:37:31:91:6e:94:af:f5:95:2f:bd:
57:91:13:0d:5e:f2:32:53:bc:d3:7a:e4:8c:da:a6:
f4:31:20:0f:db:68:8c:2f:1f:41:dc:87:0b:2d:a8:
29:4f:f8:c2:16:fc:12:e3:90:26:56:7a:c0:e6:29:
50:66:6e:7d:e3:21:48:ba:0d:85:15:06:af:ef:02:
e3:f5:eb:e1:9c:2b:cd:fd:ae:89:fc:6a:01:ea:3a:
c7:66:81:35:f0:60:f2:b3:ec:a0:3b:aa:80:d2:a6:
10:5c:74:d0:bf:8e:3d:d5:e4:1e:0c:cd:4d:96:62:
f4:57:ab:df:a6:ce:3e:17:8a:c8:2f:02:3c:f0:db:
27:5f:eb:54:2a:77:74:98:23:ca:61:20:8e:4c:c8:
80:23:46:f4:30:00:c6:10:c5:93:47:7d:b9:9b:dc:
dd:66:4e:cd:78:f3:25:ee:fa:6b:77:d7:95:67:27:
c6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5B:6E:8A:2B:9A:0C:B8:96:7B:28:FE:00:87:C6:73:5A:81:D5:2F
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.48.0/24
140.99.131.0/24
140.99.185.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e5:53:2e:78:98:f4:0d:6c:33:2b:40:78:b1:91:2a:ab:44:
57:e7:75:9b:2d:0c:10:f1:f5:f1:34:ba:e9:46:84:98:b5:d0:
85:02:1f:af:88:23:40:95:97:34:70:2f:ad:09:fd:75:58:97:
6e:aa:de:5a:29:04:cc:35:f2:30:f2:c8:b3:dc:a2:a0:66:6b:
5d:de:6f:a1:f3:30:15:01:67:9f:c2:ad:dd:49:c2:fe:ef:c7:
df:7c:5c:b1:e0:7f:7e:6e:af:23:89:7a:5c:88:df:8a:9b:fd:
77:9f:87:0e:84:0e:d3:26:1f:80:2b:43:64:d2:c7:b2:c2:3b:
2f:e2:a1:a3:2a:b2:00:bc:c4:66:e4:0b:31:23:77:5c:86:5a:
2d:6a:c0:06:78:91:dd:43:07:50:63:ef:57:77:8f:a7:8a:0c:
e3:e6:4d:33:86:b5:5d:78:0d:e5:af:52:49:2c:51:ba:c5:ee:
35:64:f3:38:ef:f7:b8:71:26:bc:2d:9a:4c:bb:4b:3e:20:8b:
0a:96:18:7d:d4:98:03:de:2f:78:62:d4:f3:a6:bb:3e:15:62:
ee:f6:a0:05:2c:f3:c1:60:f3:e3:19:70:c8:d6:f6:94:66:73:
4a:d9:c9:c9:33:5b:af:72:35:26:2b:a3:59:cb:54:89:9d:fb:
0c:4f:e6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net