Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS394668.roa
File: AS394668.roa (raw, json)
Hash identifier: xLKDKnH0SP2lUBEfDbW0oseEAzpUgvwCtf2KW0+aM00=
Subject key identifier: 50:A0:95:A8:80:89:C3:04:28:FF:74:AE:00:92:DF:E4:C7:BF:3C:C7
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 785572C3E1EFE137BF8C51444F34FDA8EB6A9286
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS394668.roa
Signing time: Wed 18 Dec 2024 05:55:08 +0000
ROA not before: Wed 18 Dec 2024 05:50:08 +0000
ROA not after: Wed 17 Dec 2025 05:55:08 +0000
asID: 394668
IP address blocks: 184.19.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:55:72:c3:e1:ef:e1:37:bf:8c:51:44:4f:34:fd:a8:eb:6a:92:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Dec 18 05:50:08 2024 GMT
Not After : Dec 17 05:55:08 2025 GMT
Subject: CN=50A095A88089C30428FF74AE0092DFE4C7BF3CC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:ca:72:4b:f0:0b:0a:11:8f:98:1a:3a:c7:
e5:8d:24:53:2f:ec:88:87:0f:51:6e:83:e8:91:a4:
36:de:fb:f3:4f:d0:79:72:e6:21:57:8e:09:17:51:
7f:9c:6a:85:ee:b3:19:65:47:20:dc:3a:91:5d:53:
4d:1a:2e:f8:56:69:b0:ab:e0:4d:94:a8:4d:17:74:
64:52:53:86:5b:95:fe:b9:c2:ec:65:06:6c:d2:07:
59:df:3f:6c:78:90:af:65:53:10:b1:b8:3c:e7:3d:
5e:33:75:29:25:b7:72:4b:4b:90:f8:86:65:ad:11:
40:d7:18:d9:e0:91:fa:d8:47:b3:6b:0d:f8:40:58:
39:ba:f2:f0:cb:b2:c2:58:a4:ac:cb:19:27:86:2a:
f8:88:64:45:bd:48:a0:2a:b3:48:1f:cc:5e:d9:e2:
82:bd:62:a5:48:bd:b2:ae:c2:04:de:6f:ac:dd:ad:
bb:a5:be:e5:01:18:b1:9c:cc:33:2e:7c:65:f3:62:
7e:83:db:4d:51:01:13:0e:a9:b9:2e:bc:ec:ed:e6:
62:64:9b:5a:f5:a4:56:76:26:61:e2:42:f1:16:95:
a8:ce:c9:c6:3a:39:dc:32:75:68:b0:2e:46:0e:49:
75:3a:8a:41:09:27:5b:5f:fd:c5:21:e7:45:0d:d5:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A0:95:A8:80:89:C3:04:28:FF:74:AE:00:92:DF:E4:C7:BF:3C:C7
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS394668.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.19.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:31:1b:71:5a:41:67:90:a3:53:b0:36:75:74:31:af:3f:89:
fa:90:77:63:72:ee:2f:c7:63:26:20:56:a0:24:0f:98:a9:be:
6d:87:44:ab:78:3e:5d:2a:db:5a:7f:dc:f0:92:c2:74:c4:b4:
7c:5b:83:fe:0c:2a:e1:c5:58:8e:66:4f:71:83:ed:6c:2a:a8:
30:6c:d7:a5:75:62:d8:f7:95:b7:32:02:50:1d:0c:ab:0e:24:
bb:1a:65:35:b1:6d:2d:9a:26:f5:4c:64:6c:e2:30:9a:68:bb:
cf:91:b3:b8:6e:29:65:97:be:7d:9e:34:66:38:d3:1e:d4:4a:
37:92:cf:67:49:5b:3b:e2:32:d3:2d:ec:0f:2c:7f:48:73:32:
de:ce:c3:e6:ce:ef:84:01:a3:4b:ba:a1:b1:b4:62:29:6d:ba:
61:bf:9c:f6:3c:47:4e:b2:88:a3:09:b9:6e:48:37:04:18:00:
90:e1:cc:d2:09:69:1a:f5:c7:81:90:a4:a9:0b:41:6b:13:0e:
8a:e8:a8:07:e6:07:23:5e:b3:dc:08:9c:bf:0b:12:3c:63:a8:
20:d5:e0:5b:9a:60:90:f2:b3:f3:93:d5:36:c9:ec:47:47:8c:
75:21:d3:a4:4b:05:bb:0e:ed:03:b1:a6:78:b6:0b:6a:a6:8b:
04:06:98:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net