Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS996.roa
File: AS996.roa (raw, json)
Hash identifier: BL8MgbO9Kr50xRmAiY7fQ1OyzqOKCR1un+5jcK99UUw=
Subject key identifier: 3F:CF:C4:53:8E:4F:9B:AD:23:48:71:19:20:BF:9A:9F:26:CC:EA:6A
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 7132B0C939119E0CC4D5F7A0333562DEDAED4573
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS996.roa
Signing time: Thu 03 Apr 2025 10:24:28 +0000
ROA not before: Thu 03 Apr 2025 10:19:28 +0000
ROA not after: Thu 02 Apr 2026 10:24:28 +0000
asID: 996
IP address blocks: 104.234.82.0/24 maxlen: 24
206.53.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:32:b0:c9:39:11:9e:0c:c4:d5:f7:a0:33:35:62:de:da:ed:45:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 3 10:19:28 2025 GMT
Not After : Apr 2 10:24:28 2026 GMT
Subject: CN=3FCFC4538E4F9BAD2348711920BF9A9F26CCEA6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:4c:72:4b:0e:3c:c6:45:c6:a6:9c:60:58:
77:ff:f5:58:6f:db:3e:da:a0:89:f3:6a:5a:f7:f3:
a5:0a:aa:c9:f3:c5:f6:a0:2a:b2:56:8b:97:cb:65:
4c:3e:68:17:22:24:4f:2c:95:24:59:82:20:b3:06:
64:9a:f6:fd:ef:11:46:83:19:5b:33:bf:32:68:11:
50:b7:cd:6d:91:50:4c:91:a2:01:ec:f0:d1:2a:1f:
e0:4b:3d:7d:98:0a:57:f2:bc:38:62:63:c6:d1:11:
aa:02:ef:af:30:ff:10:27:81:3b:32:d5:60:c0:16:
1f:00:be:82:66:1a:6d:fc:c5:f1:7f:b0:f6:2c:47:
e4:69:b9:66:e1:7f:4e:f3:07:b9:d3:a6:f9:10:3d:
47:74:8c:b7:1a:42:c8:a1:65:70:6f:0d:c7:89:28:
ff:af:e4:97:c9:77:d1:2c:8c:bb:ce:58:b6:89:55:
ef:58:64:59:8a:1c:aa:eb:42:cc:6a:ca:7f:78:14:
92:28:d7:5d:84:67:89:b9:16:f9:f5:5a:de:e5:30:
14:2d:bb:0f:34:52:2f:d8:9d:96:77:d2:1f:52:2d:
ac:35:94:44:44:bc:f7:fa:2f:e7:20:e6:d0:9d:ee:
57:96:ba:86:95:ca:32:94:45:37:1a:a7:c9:71:f7:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CF:C4:53:8E:4F:9B:AD:23:48:71:19:20:BF:9A:9F:26:CC:EA:6A
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.82.0/24
206.53.57.0/24
Signature Algorithm: sha256WithRSAEncryption
be:20:dd:72:b0:9e:42:7d:4a:86:b8:23:82:70:27:e9:59:6b:
56:81:a0:3c:48:dc:15:10:c6:d6:d8:eb:92:35:3d:e1:e9:3a:
63:13:1f:38:80:23:dd:53:c6:86:7b:fa:4e:d2:a7:10:a9:f2:
a8:df:63:5e:cd:37:78:04:44:b1:f0:93:74:df:5c:11:c5:a3:
a0:31:48:a4:33:72:81:b8:d3:28:47:77:bf:18:dc:51:88:40:
ac:15:ae:4d:2c:59:68:de:9a:74:8a:b3:e4:98:a8:cf:9d:5a:
cb:c9:0c:36:51:d0:76:39:1b:f0:f0:ee:f6:c0:8e:88:02:c4:
4d:5a:6a:7b:c3:69:c1:61:1b:90:0d:33:ab:16:9a:e0:20:ff:
b9:fe:09:8e:9b:35:36:55:c3:d9:0f:28:8f:ba:87:49:39:42:
89:36:2a:4c:3a:12:4a:29:39:e1:48:ff:95:da:53:94:d2:34:
a7:ba:4c:e4:8b:c8:83:56:c3:3f:e8:12:c1:7e:76:ee:48:07:
3a:f8:42:0f:1a:e7:9f:29:cb:92:ed:c7:6b:9b:5f:b3:74:a3:
f1:be:a5:1e:8b:7c:17:b6:91:9c:13:b9:e9:8c:cb:2a:15:46:
6c:00:1e:d7:e9:15:38:94:45:5e:bb:07:19:1b:8c:36:aa:a0:
87:09:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net