Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS394681.roa
File: AS394681.roa (raw, json)
Hash identifier: MDIbVcwPD8MYjRdcqrPt+He0+3NAjg78ppEAAknfWcM=
Subject key identifier: 8C:0E:0C:92:D3:B5:C8:82:CA:6F:DA:A6:3B:9A:97:DF:65:E9:9F:74
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 4551D61EC8C22BC0DEFF91CC8AA0ED3E85BD9EF6
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS394681.roa
Signing time: Tue 31 Dec 2024 05:55:08 +0000
ROA not before: Tue 31 Dec 2024 05:50:08 +0000
ROA not after: Tue 30 Dec 2025 05:55:08 +0000
asID: 394681
IP address blocks: 50.38.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:51:d6:1e:c8:c2:2b:c0:de:ff:91:cc:8a:a0:ed:3e:85:bd:9e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Dec 31 05:50:08 2024 GMT
Not After : Dec 30 05:55:08 2025 GMT
Subject: CN=8C0E0C92D3B5C882CA6FDAA63B9A97DF65E99F74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:85:5a:e1:bc:60:68:0e:f3:9c:7f:51:a3:
26:73:e2:d9:c9:8d:cf:55:ee:04:b1:4d:95:4c:e7:
60:7f:a1:64:d4:2d:47:90:70:70:8c:d5:6f:f4:c5:
3d:3c:4d:16:64:e1:36:5a:9e:b2:a2:13:ea:ac:f2:
a6:cc:00:fe:bd:a8:9d:a7:b2:e7:d8:10:c5:e1:66:
8e:63:08:c2:81:3d:53:5a:08:c6:5b:3c:3e:c9:81:
1f:4e:36:e7:28:7e:a9:45:39:fe:65:36:44:a4:47:
7f:5c:8f:32:2d:45:70:1b:3b:15:18:50:c9:3b:67:
54:12:91:b2:f9:6f:a1:3b:ba:bb:66:c9:c2:1b:e1:
d5:f1:c9:8f:44:b2:cf:26:85:db:98:88:87:50:31:
38:0f:8b:f2:0f:d0:f6:bc:e9:0e:a9:d5:88:5b:1a:
37:b2:f9:fa:d2:d7:39:c6:e9:ff:af:38:d9:a8:15:
ef:10:f1:5f:30:09:d8:8e:f4:36:42:05:23:93:e7:
c2:b3:35:ca:72:42:75:36:48:1e:0e:28:09:84:83:
a9:b4:1d:a8:43:89:4d:95:37:c2:20:c6:f1:61:91:
75:fb:b8:6d:c8:1a:76:b7:3f:a3:f3:71:9a:05:6b:
bf:67:1d:8a:5b:eb:a9:84:e3:56:89:16:56:2c:9a:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0E:0C:92:D3:B5:C8:82:CA:6F:DA:A6:3B:9A:97:DF:65:E9:9F:74
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS394681.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.38.135.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e5:38:af:d5:37:c5:6b:07:25:32:0e:c7:9f:82:ec:10:94:
c5:50:ba:6a:7b:38:c2:21:d4:0c:2c:9e:36:29:56:6d:dc:16:
21:71:7c:77:a6:2a:2a:5c:03:77:a9:2a:ad:ef:8a:4b:9e:de:
4d:ac:3c:c1:b4:6e:d4:6d:d8:e1:09:e0:9d:f0:80:eb:b9:53:
8a:77:9d:f0:53:89:d3:c6:52:b8:e8:ba:a1:6f:b6:e3:1f:23:
98:07:ee:35:f6:0d:d7:c9:47:7f:2b:55:5d:25:94:73:40:76:
0a:95:fb:04:ca:e5:89:e4:62:78:8c:58:62:94:69:b0:2b:6e:
c9:78:e4:28:55:97:75:cc:8d:99:e6:61:d9:7f:be:d6:88:d6:
dd:39:b3:25:46:9c:c7:15:be:62:a0:fa:38:82:fd:ca:47:50:
9d:37:78:ac:2e:ad:e0:a2:ce:82:80:37:45:a0:03:45:bc:de:
c8:81:44:52:ca:dc:f5:02:6c:df:31:d5:53:f5:8e:45:ad:0c:
9a:11:6c:72:fb:c4:61:19:e7:3b:bf:d5:55:51:c9:45:4a:50:
34:10:ad:31:9b:c5:2b:bd:bf:f3:ed:4e:f8:4b:0f:24:e8:cf:
af:6f:98:26:5f:37:0a:b8:57:fb:57:c5:e9:b1:59:8b:67:47:
7d:be:1b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net