Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS40777.roa
File: AS40777.roa (raw, json)
Hash identifier: RvdElx5AbSJijk+RC/2DNKU/AzgG+22q9d9/nGVY6Z8=
Subject key identifier: A7:4D:D7:FE:6F:C9:48:1B:59:0E:D8:D9:DB:24:14:C5:97:DF:09:10
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 1F8CFB0EBD87AA6DF36FA3782B794C64F199549F
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS40777.roa
Signing time: Tue 31 Dec 2024 05:55:09 +0000
ROA not before: Tue 31 Dec 2024 05:50:09 +0000
ROA not after: Tue 30 Dec 2025 05:55:09 +0000
asID: 40777
IP address blocks: 74.43.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:8c:fb:0e:bd:87:aa:6d:f3:6f:a3:78:2b:79:4c:64:f1:99:54:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Dec 31 05:50:09 2024 GMT
Not After : Dec 30 05:55:09 2025 GMT
Subject: CN=A74DD7FE6FC9481B590ED8D9DB2414C597DF0910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:86:1f:51:3a:e6:21:2d:b9:b7:0c:cb:2d:
14:aa:42:b7:38:a2:ec:98:c6:76:04:27:8f:79:21:
07:4a:94:8c:7d:cc:92:05:26:ab:45:7c:15:f8:1d:
6f:e5:7a:45:33:ff:c4:49:d8:64:b9:80:b0:8b:d0:
33:7c:f4:69:1c:4a:2a:85:9d:0a:c6:6f:28:a1:86:
91:c5:f5:e2:09:cc:90:86:e3:21:6d:eb:a6:e8:87:
0b:37:d2:19:44:b3:87:c6:93:96:eb:6a:fd:aa:c3:
8f:e2:c3:f7:f5:ca:0c:1d:ca:73:e6:6d:ad:99:ca:
67:75:56:1e:ab:b4:ae:74:0b:c1:29:4f:e7:13:0a:
57:53:03:45:ce:67:b9:8c:ee:9b:65:88:42:ef:52:
cc:79:be:0d:60:d1:1d:cd:75:f0:5e:a9:f1:eb:3e:
11:63:b0:dd:be:91:11:18:46:0b:f1:9f:2d:76:01:
68:d8:27:e3:5d:4c:b5:3e:89:58:d5:a1:f1:1f:31:
85:55:6e:df:e1:d0:ca:f1:d6:ca:91:02:4c:34:60:
e4:28:5a:14:f1:00:7b:d2:08:c1:13:d5:1c:40:94:
23:df:a9:5e:52:6f:3d:e3:14:fb:56:06:e9:72:27:
ae:d4:6c:f6:24:00:52:96:3e:65:b8:49:b4:b6:d4:
ee:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4D:D7:FE:6F:C9:48:1B:59:0E:D8:D9:DB:24:14:C5:97:DF:09:10
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS40777.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.43.131.0/24
Signature Algorithm: sha256WithRSAEncryption
11:1b:ba:5f:47:ee:d8:b8:0d:1c:ad:0b:ef:18:6f:87:2d:56:
b0:da:85:87:ae:6a:60:3c:c4:cb:f8:6b:55:4d:86:0e:10:64:
07:e1:d4:e2:07:c7:46:01:3c:77:1d:40:5a:cd:da:22:bd:a6:
25:37:e4:e4:43:40:8d:6e:de:e8:f8:10:d5:03:5b:ee:a1:be:
a4:8b:c8:12:c1:d6:c7:1e:16:52:1e:f7:68:41:75:d4:30:bf:
88:a6:9c:a1:ed:24:3b:b3:c3:27:48:29:58:9b:2e:c3:9e:88:
d1:9b:19:82:b3:97:e4:99:e5:d6:48:d7:02:4b:aa:92:39:44:
5b:0f:8c:c3:86:03:7d:73:76:8e:b7:12:47:c9:79:7a:cf:2b:
4a:6c:1e:b3:68:63:a1:53:d3:0e:c7:04:8f:29:26:fa:b0:15:
23:c8:55:a6:46:18:2d:2e:ba:d9:a8:8a:79:98:8b:13:ec:cf:
8a:7c:0c:f9:82:d8:be:de:e6:7f:d9:30:fc:9d:45:20:ad:46:
63:10:eb:45:53:58:af:e1:d7:7d:28:00:e7:44:db:83:37:39:
fb:4c:7e:8d:20:66:02:da:37:d0:1d:ac:c8:80:b1:b7:9c:59:
5b:d0:cf:94:40:d4:8e:3d:88:5e:96:ef:24:b4:43:a6:50:46:
a6:65:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net