Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399047.roa
File: AS399047.roa (raw, json)
Hash identifier: B7Fgmrg3MlX9LXLvwUFogUuSX91wJuRiXUSi5vt2JJE=
Subject key identifier: 59:17:1B:FE:02:76:3F:F9:6E:53:D5:44:BC:77:34:43:42:09:B6:81
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 44A7A108C91C4E763892B7862546EFA04D9D69CA
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399047.roa
Signing time: Tue 31 Dec 2024 05:55:08 +0000
ROA not before: Tue 31 Dec 2024 05:50:08 +0000
ROA not after: Tue 30 Dec 2025 05:55:08 +0000
asID: 399047
IP address blocks: 50.102.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a7:a1:08:c9:1c:4e:76:38:92:b7:86:25:46:ef:a0:4d:9d:69:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Dec 31 05:50:08 2024 GMT
Not After : Dec 30 05:55:08 2025 GMT
Subject: CN=59171BFE02763FF96E53D544BC7734434209B681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:36:f7:55:ec:cb:5c:1a:9d:8e:13:2a:05:
f4:30:25:de:4e:8c:5f:54:13:05:e8:b5:2c:e9:ac:
ba:97:45:fd:9d:a9:09:df:5c:55:74:39:63:4c:e8:
81:ae:81:00:6f:3d:eb:88:9f:1a:a8:28:3f:9c:c7:
e3:91:63:4d:50:c1:72:63:8a:8d:04:25:d6:95:b6:
20:1d:67:93:f5:27:47:44:71:24:3d:e1:f1:71:16:
d7:91:e4:87:af:48:8b:e9:79:ba:1e:b4:fd:5b:37:
72:5a:dc:7d:f7:68:93:5c:b0:f6:8d:a8:3d:10:53:
58:ad:df:a3:f2:4b:6d:30:1b:c2:5c:d7:2e:37:7d:
b9:5a:fd:bc:2e:4c:95:fb:2b:5c:4c:76:39:af:e6:
f8:2e:50:1c:c1:d6:28:65:2f:7f:ce:ea:7c:c5:bd:
fd:a7:5a:8d:70:ef:1a:42:05:c7:00:11:e2:8c:de:
46:36:5b:84:73:bc:07:48:dd:a4:fc:9a:a0:c2:5e:
53:e3:32:03:ac:3a:e7:2f:66:d9:0b:12:94:02:b0:
a7:cb:0c:83:91:03:01:e1:2e:34:c4:fb:fa:f5:3e:
ab:57:a8:40:14:d9:9c:da:37:bc:02:bb:5a:c6:11:
e5:d8:ea:1f:f6:58:d4:76:aa:d3:72:2c:4d:4a:49:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:17:1B:FE:02:76:3F:F9:6E:53:D5:44:BC:77:34:43:42:09:B6:81
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399047.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.102.253.0/24
Signature Algorithm: sha256WithRSAEncryption
00:40:d3:59:f6:6b:f4:7d:22:ed:db:64:47:05:d8:54:38:a2:
bb:08:5c:a3:53:e8:9d:d1:d2:81:3a:8e:1b:c5:7f:48:e2:b8:
0d:10:e1:d4:40:6a:f4:09:49:14:aa:75:d9:92:cf:c7:6b:f3:
d1:7a:b2:24:70:42:68:66:61:bb:23:2e:58:3c:ae:a5:92:50:
5a:18:9c:0c:56:00:8f:56:19:0e:8c:d9:89:c2:fd:91:ea:80:
d9:ff:df:4f:80:8e:ec:37:76:7e:31:bf:ba:7a:d6:90:d5:63:
f6:c7:f2:2a:a7:52:ad:fe:c5:80:b0:47:bf:ca:b0:89:d2:b0:
47:61:ed:f4:e2:8f:55:36:0f:ee:05:08:35:49:87:c0:b4:da:
fe:68:c8:53:5d:c6:30:96:34:ae:6c:7a:0d:39:6e:fe:cd:75:
4c:32:2c:1c:99:77:0f:dd:0a:4f:f2:5e:74:39:c6:67:10:59:
d1:26:e5:c9:2d:3a:e8:ca:94:52:bb:6f:a8:60:40:a3:c8:42:
0a:72:b2:97:4e:01:e6:d7:39:4d:8c:33:fe:a0:b4:e6:40:1e:
91:a3:c1:dc:79:9a:4b:2e:c0:7a:c8:8d:9a:a2:e8:6e:5c:d6:
66:1d:83:7f:84:cc:7e:ed:e3:52:c5:0e:8e:71:c5:30:fb:b0:
db:18:94:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net