Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399437.roa
File: AS399437.roa (raw, json)
Hash identifier: 67NX69JeBAdjadw0/1eY/IsdqOj9w9AA+zdU8pA6Pi8=
Subject key identifier: A8:96:BE:AD:7D:C7:D2:0D:F5:4D:2C:5D:9D:77:DF:7A:1D:B3:D2:A9
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 61CD58807DE410CDFC6C31ECEFEBA82C850F227A
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399437.roa
Signing time: Wed 18 Dec 2024 05:55:08 +0000
ROA not before: Wed 18 Dec 2024 05:50:08 +0000
ROA not after: Wed 17 Dec 2025 05:55:08 +0000
asID: 399437
IP address blocks: 50.32.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:cd:58:80:7d:e4:10:cd:fc:6c:31:ec:ef:eb:a8:2c:85:0f:22:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Dec 18 05:50:08 2024 GMT
Not After : Dec 17 05:55:08 2025 GMT
Subject: CN=A896BEAD7DC7D20DF54D2C5D9D77DF7A1DB3D2A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bf:86:f3:27:0e:ca:42:66:2d:8c:22:cc:59:
7a:6f:76:c7:20:25:84:e9:4e:83:64:3a:00:e5:7e:
7d:f1:d0:cd:a7:bb:82:b9:0e:e8:cd:65:c7:b3:fe:
29:36:4a:6d:8c:15:f8:47:06:fc:b9:c5:92:c8:16:
bc:4a:3a:b4:a9:ee:c5:38:9d:a3:66:35:95:cb:20:
9e:fd:45:66:cb:7b:e9:93:4e:88:86:61:23:5c:38:
67:b6:a9:a9:8b:02:42:57:58:0a:86:7f:ce:de:82:
25:0e:45:86:70:d9:f1:a6:44:5a:bc:0b:51:6b:9a:
83:7d:29:70:59:44:20:08:45:24:f0:fb:2e:83:7a:
2c:34:68:34:79:50:56:a7:a7:ff:2c:b8:be:82:b5:
a6:61:01:7f:ee:91:4c:46:dc:43:29:35:70:7a:d4:
ac:82:94:79:ca:a7:e7:eb:9d:19:80:fd:21:a4:ca:
8b:0b:0a:15:f4:e6:a2:ee:a6:2a:cd:50:5b:90:2e:
15:0c:3d:22:06:79:52:d9:e2:1a:2a:c3:1e:cf:c7:
4e:6f:a2:ed:c7:e8:4d:9f:11:9f:cc:7d:03:41:e2:
93:55:50:34:e1:99:36:49:84:5b:9b:7f:04:0c:11:
7b:2a:ac:e7:c5:20:44:f2:07:b5:eb:27:94:8d:46:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:BE:AD:7D:C7:D2:0D:F5:4D:2C:5D:9D:77:DF:7A:1D:B3:D2:A9
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.32.56.0/24
Signature Algorithm: sha256WithRSAEncryption
71:39:43:f8:33:e2:f9:b2:b4:6f:25:57:da:e9:af:79:97:83:
e5:f1:b1:f0:ca:2e:2a:83:5f:e5:c3:5a:15:c5:46:bb:a7:6f:
b7:b8:1a:1d:0e:03:42:97:3c:10:ef:2a:46:bb:3b:61:1b:17:
6e:2e:4f:19:de:f9:15:1f:74:20:e8:c3:3b:05:8c:6b:c8:f5:
fe:9f:a5:47:2f:44:22:a6:66:1d:7e:94:51:97:79:86:45:09:
4e:87:01:f7:73:04:cb:b1:55:1c:f0:64:3d:71:a5:2f:21:62:
61:ce:42:8b:1c:d2:22:55:ce:1b:9c:43:3f:59:c3:8e:8c:72:
4b:c9:5f:a5:3b:a3:19:18:10:c0:f8:d0:bd:74:c2:65:a6:1d:
dd:41:db:9c:08:5d:db:6b:60:62:84:c8:e2:98:99:8a:93:44:
f0:1d:ef:33:0d:e2:47:1a:35:11:2c:96:95:d9:d3:ee:ae:4d:
4a:20:e9:14:1c:87:16:a3:f8:f6:6a:27:d9:5b:dd:d2:fd:bc:
2f:4b:41:03:f2:99:35:3c:a7:1f:09:ef:1e:4d:d6:da:47:6e:
5b:f8:12:e0:bf:9d:e7:7a:6c:90:5b:d5:c9:0c:90:7a:2c:b2:
73:d2:e2:30:fd:27:20:c6:8f:91:bb:12:cb:80:e5:fd:93:7b:
41:2b:6b:60
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUYc1YgH3kEM38bDHs7+uoLIUPInowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjQxMjE4MDU1MDA4WhcNMjUxMjE3MDU1NTA4
WjAzMTEwLwYDVQQDEyhBODk2QkVBRDdEQzdEMjBERjU0RDJDNUQ5RDc3REY3QTFE
QjNEMkE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L+G8ycOykJm
LYwizFl6b3bHICWE6U6DZDoA5X598dDNp7uCuQ7ozWXHs/4pNkptjBX4Rwb8ucWS
yBa8Sjq0qe7FOJ2jZjWVyyCe/UVmy3vpk06IhmEjXDhntqmpiwJCV1gKhn/O3oIl
DkWGcNnxpkRavAtRa5qDfSlwWUQgCEUk8Psug3osNGg0eVBWp6f/LLi+grWmYQF/
7pFMRtxDKTVwetSsgpR5yqfn650ZgP0hpMqLCwoV9Oai7qYqzVBbkC4VDD0iBnlS
2eIaKsMez8dOb6Ltx+hNnxGfzH0DQeKTVVA04Zk2SYRbm38EDBF7KqznxSBE8ge1
6yeUjUZCrQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFKiWvq19x9IN9U0sXZ1333od
s9KpMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy
ZjA5N2YvNC9BUzM5OTQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADIgODANBgkqhkiG9w0BAQsFAAOC
AQEAcTlD+DPi+bK0byVX2umveZeD5fGx8MouKoNf5cNaFcVGu6dvt7gaHQ4DQpc8
EO8qRrs7YRsXbi5PGd75FR90IOjDOwWMa8j1/p+lRy9EIqZmHX6UUZd5hkUJTocB
93MEy7FVHPBkPXGlLyFiYc5CixzSIlXOG5xDP1nDjoxyS8lfpTujGRgQwPjQvXTC
ZaYd3UHbnAhd22tgYoTI4piZipNE8B3vMw3iRxo1ESyWldnT7q5NSiDpFByHFqP4
9mon2Vvd0v28L0tBA/KZNTynHwnvHk3W2kduW/gS4L+d53pskFvVyQyQeiyyc9Li
MP0nIMaPkbsSy4Dl/ZN7QStrYA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net