Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS393542.roa
File: AS393542.roa (raw, json)
Hash identifier: NBHSisQuQKWA1VQN2arwoddNODdnw9/Cjt1gNJif+JI=
Subject key identifier: CE:41:A1:D0:DB:FB:7A:A9:1C:6E:1C:AD:8F:CE:78:8C:5F:56:DF:42
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 572A3D6D1114D3C919EC21BE343054AF2122B2D1
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS393542.roa
Signing time: Tue 31 Dec 2024 05:55:08 +0000
ROA not before: Tue 31 Dec 2024 05:50:08 +0000
ROA not after: Tue 30 Dec 2025 05:55:08 +0000
asID: 393542
IP address blocks: 50.120.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:2a:3d:6d:11:14:d3:c9:19:ec:21:be:34:30:54:af:21:22:b2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Dec 31 05:50:08 2024 GMT
Not After : Dec 30 05:55:08 2025 GMT
Subject: CN=CE41A1D0DBFB7AA91C6E1CAD8FCE788C5F56DF42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:bb:06:0a:b5:e8:be:ab:54:c2:f9:6a:e5:
b1:76:b3:5e:1f:9e:f5:c4:13:83:4a:28:98:1a:ec:
4e:c2:49:9a:92:cb:79:fd:36:84:9b:e1:d1:2b:bd:
fa:fa:58:18:be:bb:8f:52:6a:f4:36:cb:d6:ea:63:
42:43:a8:8d:e2:16:d8:61:a8:40:dc:62:9f:72:fb:
e6:1a:49:64:db:bd:83:72:35:7b:97:52:6a:93:cb:
74:df:3e:43:f6:56:04:17:3c:fa:34:21:d4:f0:89:
60:72:e2:c3:59:55:9f:59:92:34:69:65:54:28:c7:
e7:68:8a:3f:83:66:cb:ff:ce:27:d4:f9:9a:7e:c9:
9e:b9:9c:ce:80:1f:a5:61:fd:1c:cb:03:3d:ba:8e:
91:25:8c:51:44:53:7f:6d:9c:7c:5e:4c:af:82:43:
72:d3:dc:a6:97:f1:b9:63:a8:55:ba:d5:60:cf:b9:
ac:4c:8b:dd:0d:07:b4:8d:8c:b2:79:9e:eb:41:f6:
5d:7d:3a:3d:66:fe:79:0d:14:dc:c4:16:a5:39:80:
50:28:47:d4:21:5a:51:9c:fb:0f:70:89:44:ec:c1:
43:6e:38:8b:0b:da:76:18:e2:44:ef:4b:0c:6d:66:
4d:ac:92:d2:00:a5:ac:1f:6e:2f:67:d8:7a:eb:17:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:41:A1:D0:DB:FB:7A:A9:1C:6E:1C:AD:8F:CE:78:8C:5F:56:DF:42
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS393542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.120.170.0/24
Signature Algorithm: sha256WithRSAEncryption
84:7d:bf:05:2b:5e:b6:77:a0:be:73:8e:29:b4:85:59:c6:ef:
5d:ff:48:b9:a7:11:16:e8:4f:cc:fe:f3:21:50:1f:9d:91:ce:
d5:d7:83:2d:d5:e4:e8:d2:ed:8a:af:33:fe:e5:63:76:43:9c:
bf:c9:ed:be:6d:55:7a:58:b2:32:b4:84:15:c9:ab:38:b9:6b:
5a:5c:03:da:fc:2f:62:13:f9:cd:be:fe:d8:1a:df:9f:ca:b1:
02:f8:42:38:2e:46:84:84:5b:2a:ad:04:cc:59:eb:d6:87:6e:
dd:3f:d0:64:79:6d:b5:f5:49:4c:88:41:76:2d:55:24:e9:bb:
8e:af:bf:10:e3:68:a4:49:c4:5b:b2:a8:0d:2e:10:32:64:fb:
38:8d:d1:78:cc:39:52:1e:c2:4a:c9:22:51:3a:0f:ed:44:01:
ad:8f:9f:ff:e0:bc:e6:ac:b3:a3:14:69:48:8c:4e:c1:51:07:
4c:b7:e7:b1:e9:ef:e8:fe:94:9f:91:e5:5b:f9:98:83:ce:b4:
7d:76:87:63:ed:7e:5a:77:03:b7:ed:fe:5e:5f:93:91:1c:f2:
cb:c4:5a:2e:d3:4a:6a:9d:0d:c3:a1:1e:33:45:08:02:af:db:
71:a6:37:69:3f:95:08:5f:e4:53:1d:ed:ce:68:db:e3:5d:ca:
47:19:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net