Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38382e302f32312d3234203d3e20383334.roa
File: 34302e3138332e38382e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: wZPrdEBNgoLUt8JZJTbz64hJbSRB8kGAChH6WZo1zBA=
Subject key identifier: 15:13:7F:1D:29:24:AA:A0:54:82:FA:C5:24:45:FE:A7:5E:81:64:D0
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 0F94FFAE7AEC60CE50A7BBAA5046C5F11F391B49
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38382e302f32312d3234203d3e20383334.roa
Signing time: Wed 09 Apr 2025 21:39:00 +0000
ROA not before: Wed 09 Apr 2025 21:34:00 +0000
ROA not after: Wed 08 Apr 2026 21:39:00 +0000
asID: 834
IP address blocks: 40.183.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:94:ff:ae:7a:ec:60:ce:50:a7:bb:aa:50:46:c5:f1:1f:39:1b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Apr 9 21:34:00 2025 GMT
Not After : Apr 8 21:39:00 2026 GMT
Subject: CN=15137F1D2924AAA05482FAC52445FEA75E8164D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a2:58:d2:d5:bd:bc:49:12:32:4c:60:ce:f7:
b5:f9:e6:ec:63:30:18:c0:9c:5b:5f:97:c0:60:46:
29:87:77:3d:9b:8a:1d:77:88:b0:75:3d:03:09:7a:
18:e2:81:e0:7f:a5:30:16:27:f4:70:08:a4:47:e8:
cd:c4:8f:50:1c:9b:0e:29:81:c3:23:35:b9:7a:0c:
ad:e8:d7:22:e5:64:81:60:45:dd:85:84:40:f7:93:
14:5e:55:1a:9b:29:e6:ea:d8:cc:1b:69:f6:82:a9:
a0:2d:19:06:fe:46:2a:28:3e:7d:9b:40:3d:5a:c4:
97:b8:47:3b:ec:a4:c4:2c:05:76:79:94:60:3c:74:
0e:19:fa:29:b7:79:dc:39:83:c3:e8:c3:af:fb:11:
7d:44:78:27:a1:0c:d7:92:4f:8a:67:48:96:f6:9d:
77:6f:6d:38:7a:f8:ad:99:65:9c:f7:11:25:67:cf:
9b:99:ff:49:13:b4:39:26:e4:72:10:67:3b:22:63:
f0:cf:0e:a2:ca:1c:35:9c:d5:78:af:93:c5:d4:bc:
aa:3e:a8:34:1f:3c:63:b0:a3:93:86:60:9f:78:3c:
8d:ad:13:1c:c9:12:b8:7a:c4:a6:8b:fc:5e:1c:69:
3d:cf:dd:a4:da:96:99:d3:62:20:35:1c:09:95:36:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:13:7F:1D:29:24:AA:A0:54:82:FA:C5:24:45:FE:A7:5E:81:64:D0
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38382e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.183.88.0/21
Signature Algorithm: sha256WithRSAEncryption
83:18:25:b7:72:1a:b0:e7:c4:ab:ed:77:79:6e:f5:50:0b:d2:
7e:21:e0:3d:06:c7:0c:1f:88:44:e5:cf:90:c9:8a:bc:45:44:
79:cc:ef:28:1d:f5:22:54:aa:ea:85:5e:3b:c7:ed:87:bf:b7:
ae:07:64:b8:37:48:5a:fb:0d:5d:db:df:c7:e2:72:45:16:47:
82:39:c5:31:1e:27:38:b0:3f:69:0e:dc:ee:e3:d2:60:87:60:
09:a4:26:03:44:fa:db:11:68:03:a6:c8:40:21:c4:cb:e6:1f:
cd:42:e9:15:44:1d:c7:37:2d:aa:02:fb:2d:43:10:3a:df:c6:
16:e1:00:33:8d:3f:bb:e0:09:cd:42:dc:1f:bc:b2:46:2e:5a:
63:67:1e:80:58:7d:bc:7d:0c:15:d9:18:a5:11:c7:eb:b3:de:
ac:48:b3:09:17:54:ea:2b:7f:ca:fe:c4:38:aa:57:e0:0b:01:
d0:44:e4:16:40:a1:7b:8f:d6:a8:60:3e:c3:34:49:2b:4f:49:
ed:ff:13:63:c9:26:ff:36:f5:fb:d5:bd:62:de:66:b0:f5:ca:
c2:10:5b:42:a8:d0:9f:bf:51:ad:b9:2c:c0:7c:cd:4d:49:b9:
50:4c:0f:91:df:d6:f2:31:e6:7a:f8:a1:35:b1:f6:9b:14:01:
84:bd:2c:4b
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUD5T/rnrsYM5Qp7uqUEbF8R85G0kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNDA5MjEzNDAwWhcNMjYwNDA4MjEzOTAw
WjAzMTEwLwYDVQQDEygxNTEzN0YxRDI5MjRBQUEwNTQ4MkZBQzUyNDQ1RkVBNzVF
ODE2NEQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KJY0tW9vEkS
Mkxgzve1+ebsYzAYwJxbX5fAYEYph3c9m4odd4iwdT0DCXoY4oHgf6UwFif0cAik
R+jNxI9QHJsOKYHDIzW5egyt6Nci5WSBYEXdhYRA95MUXlUamynm6tjMG2n2gqmg
LRkG/kYqKD59m0A9WsSXuEc77KTELAV2eZRgPHQOGfopt3ncOYPD6MOv+xF9RHgn
oQzXkk+KZ0iW9p13b204evitmWWc9xElZ8+bmf9JE7Q5JuRyEGc7ImPwzw6iyhw1
nNV4r5PF1LyqPqg0HzxjsKOThmCfeDyNrRMcyRK4esSmi/xeHGk9z92k2paZ02Ig
NRwJlTbDLQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFBUTfx0pJKqgVIL6xSRF/qde
gWTQMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1
M2RjNjQxMTlkLzUvMzQzMDJlMzEzODMzMmUzODM4MmUzMDJmMzIzMTJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKLdYMA0GCSqGSIb3DQEBCwUAA4IBAQCD
GCW3chqw58Sr7Xd5bvVQC9J+IeA9BscMH4hE5c+QyYq8RUR5zO8oHfUiVKrqhV47
x+2Hv7euB2S4N0ha+w1d29/H4nJFFkeCOcUxHic4sD9pDtzu49Jgh2AJpCYDRPrb
EWgDpshAIcTL5h/NQukVRB3HNy2qAvstQxA638YW4QAzjT+74AnNQtwfvLJGLlpj
Zx6AWH28fQwV2RilEcfrs96sSLMJF1TqK3/K/sQ4qlfgCwHQROQWQKF7j9aoYD7D
NEkrT0nt/xNjySb/NvX71b1i3maw9crCEFtCqNCfv1GtuSzAfM1NSblQTA+R39by
MeZ6+KE1sfabFAGEvSxL
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net