Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa
File: AS399641.roa (raw, json)
Hash identifier: oe/2G5aqdKBK3c6a2rmz8TzG1GI2XXPFWSVBlGqaJsg=
Subject key identifier: F7:57:57:D4:0D:4D:4A:44:EB:D3:50:7F:61:2F:0E:78:65:69:1A:80
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 65F3A558A8C16A1EB80502E3BF044CFCD1FA4B37
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa
Signing time: Fri 04 Oct 2024 20:49:01 +0000
ROA not before: Fri 04 Oct 2024 20:44:01 +0000
ROA not after: Fri 03 Oct 2025 20:49:01 +0000
asID: 399641
IP address blocks: 104.234.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f3:a5:58:a8:c1:6a:1e:b8:05:02:e3:bf:04:4c:fc:d1:fa:4b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Oct 4 20:44:01 2024 GMT
Not After : Oct 3 20:49:01 2025 GMT
Subject: CN=F75757D40D4D4A44EBD3507F612F0E7865691A80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:f5:ca:cd:17:70:e3:ab:fa:04:23:9e:cb:
9d:86:16:db:c4:93:b9:5b:c0:bd:7d:ed:3d:ac:4e:
1c:c1:71:0b:3a:e4:4b:a6:38:c8:d9:0b:72:a9:c1:
93:ac:06:ab:1b:3b:b5:0e:7d:b5:95:78:3b:03:14:
97:85:8d:ad:b0:07:0e:79:f2:bb:25:b9:65:9d:d0:
a1:66:a0:25:33:7d:b2:75:5b:78:f0:16:42:a7:41:
e6:3c:a6:20:53:15:cf:51:f9:b2:1e:a7:00:a9:a0:
da:9f:23:46:62:7c:c2:6c:c9:8c:4f:91:8a:cb:99:
f7:92:dc:63:cf:d6:15:70:27:80:df:5f:97:60:88:
99:0d:2f:c6:be:ff:30:5e:af:fa:d5:13:49:12:d6:
e2:76:9e:c8:12:16:8e:77:92:3c:b0:38:7f:e6:49:
58:2c:20:95:b5:d6:c1:70:1d:20:45:33:06:cc:4b:
ca:77:5c:f5:fd:65:ae:65:89:b0:fd:7a:92:29:41:
f9:34:3f:f8:77:e9:77:94:2d:2f:d4:53:b2:b0:ab:
f4:76:45:06:3d:3e:b7:08:21:13:8d:55:58:42:22:
11:f7:52:00:ef:e3:06:d2:51:23:02:c9:20:2d:70:
9a:70:10:d1:54:4a:40:b8:4e:f7:6f:4d:a0:d6:a7:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:57:57:D4:0D:4D:4A:44:EB:D3:50:7F:61:2F:0E:78:65:69:1A:80
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.22.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:83:58:92:2d:ec:b7:b7:4a:b4:86:e7:3e:a6:61:b3:30:50:
35:bc:b6:eb:58:b4:2d:e1:1f:ca:f5:44:9d:f4:04:dc:cd:b7:
c6:5a:d6:79:58:bf:4b:6e:79:f9:fa:b8:08:6a:20:ed:9f:4b:
8b:61:9a:87:ec:83:93:cf:98:68:f2:b1:ea:93:25:db:8e:1a:
76:a0:23:3f:dd:94:0f:9b:29:96:43:0d:66:24:1f:c1:ea:f6:
b1:04:fa:94:bb:c6:64:c0:8f:8d:e4:f8:85:53:e8:4c:77:c2:
d6:d6:ce:fa:1c:d5:51:5f:f6:0a:5b:d3:0f:66:fc:43:3f:f0:
bd:99:e6:f7:f0:49:4f:e6:7a:ae:90:88:2e:76:ef:f5:63:5e:
48:54:d8:d0:95:05:61:bf:dc:87:ba:97:37:ec:a1:8a:a4:73:
50:d8:23:bc:ad:bd:5e:ae:94:fe:d4:81:72:dd:85:cf:84:ea:
4a:47:63:2f:83:69:9b:10:24:5f:8b:a6:35:8a:23:6e:f5:3a:
5c:7b:1a:a0:af:bb:6e:b2:43:e3:24:24:7b:31:7e:4d:b6:a3:
19:de:0b:16:5c:d2:16:d3:2c:66:f0:27:67:d0:d4:fc:42:c0:
6a:50:fa:b0:a6:03:8e:2a:07:1c:e0:34:99:49:c6:23:f0:aa:
6b:9f:79:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net