Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS46947.roa
File: AS46947.roa (raw, json)
Hash identifier: ezIXIeVms4ZVgHc+wRRX3/zCwaAKvLJkMf88yMP3bZU=
Subject key identifier: DE:E3:9A:2C:EF:76:60:F9:BD:EF:34:F3:09:9A:C8:83:C2:6F:9D:B3
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 419F0A87C09597AF9A2E1A60F10B75B0C0BB0861
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS46947.roa
Signing time: Wed 18 Dec 2024 05:55:08 +0000
ROA not before: Wed 18 Dec 2024 05:50:08 +0000
ROA not after: Wed 17 Dec 2025 05:55:08 +0000
asID: 46947
IP address blocks: 74.43.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:9f:0a:87:c0:95:97:af:9a:2e:1a:60:f1:0b:75:b0:c0:bb:08:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Dec 18 05:50:08 2024 GMT
Not After : Dec 17 05:55:08 2025 GMT
Subject: CN=DEE39A2CEF7660F9BDEF34F3099AC883C26F9DB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0a:36:71:82:ae:98:c6:74:d1:0a:5f:44:d3:
47:f1:30:51:c0:93:0d:08:5b:b6:58:6e:97:3e:24:
aa:19:54:04:e9:84:d0:63:c6:58:b2:5f:98:38:6d:
42:2f:9c:ac:d3:04:0a:c8:a0:1e:de:d4:fa:e1:36:
73:8b:38:b9:cb:b5:86:29:fb:9c:cf:d7:b4:a6:90:
1a:46:e9:37:ca:35:56:66:57:d3:a2:4a:b5:b5:b5:
73:5b:a9:c6:f7:c4:70:0e:75:2a:31:ee:cd:d1:ee:
84:0c:77:5d:9f:76:38:d2:44:a2:47:81:64:d5:bd:
ef:6e:f4:b5:0d:0b:58:3a:d2:56:a4:4f:c3:24:d0:
d9:18:2c:ed:2d:c2:27:aa:29:a3:6a:54:04:f6:c0:
39:49:0a:5c:b9:b8:07:34:65:72:a6:80:d4:35:2c:
25:d8:df:57:08:16:99:1c:73:d8:00:99:ff:3c:8f:
ca:79:47:98:b9:6b:30:9d:98:4d:16:97:08:8b:f4:
38:e9:a3:7e:55:e0:37:01:45:48:fe:e5:75:05:33:
9e:d9:0d:20:1d:af:56:e8:b3:42:b0:eb:ba:19:d2:
42:a0:04:ae:55:51:4d:a4:9e:46:14:a6:76:21:e5:
87:4f:2d:ce:4f:6a:6b:24:0b:47:2a:6e:41:51:3a:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E3:9A:2C:EF:76:60:F9:BD:EF:34:F3:09:9A:C8:83:C2:6F:9D:B3
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS46947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.43.25.0/24
Signature Algorithm: sha256WithRSAEncryption
34:98:2c:f5:33:76:44:ab:bb:a0:61:e0:96:04:eb:ec:55:a1:
3a:78:2d:e1:16:9a:d5:a1:9e:a2:53:45:6e:96:ab:20:85:ad:
d7:91:58:58:6e:12:85:55:b6:95:c0:76:2a:5d:04:86:7e:1c:
a6:04:86:02:65:36:18:a9:5b:60:83:22:cd:4f:8f:50:4f:e7:
26:4e:d9:f6:dd:2e:dd:a1:ad:fd:28:ed:3d:dc:da:7a:ac:35:
d2:28:6c:81:d6:13:c4:c3:13:bd:0b:d9:9a:15:2a:1e:15:14:
1c:f2:da:e5:54:44:f1:5f:b0:5e:0c:e1:34:8c:b7:5f:81:99:
61:3e:4c:b3:ae:ee:ec:87:99:36:f9:f0:10:70:94:39:23:25:
5e:0d:15:a9:ad:e1:be:a1:44:2e:e1:03:ac:43:1f:0f:95:4d:
90:41:9a:b0:dc:16:2f:d8:fe:35:54:6b:07:70:b8:90:c0:a6:
06:b1:67:7d:ec:60:c9:2e:b0:a9:a5:f0:26:41:12:2b:0d:4d:
5c:91:af:e3:c6:c5:93:a6:05:4c:b4:b3:12:1b:4d:82:b1:1c:
e8:6e:ad:d6:c4:6f:a8:bb:4f:c1:94:9d:11:cc:ca:5c:2d:0f:
4b:ae:9a:c2:89:44:eb:75:fc:6b:a8:7b:59:c7:2b:fc:90:b9:
be:f2:8d:ee
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUQZ8Kh8CVl6+aLhpg8Qt1sMC7CGEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjQxMjE4MDU1MDA4WhcNMjUxMjE3MDU1NTA4
WjAzMTEwLwYDVQQDEyhERUUzOUEyQ0VGNzY2MEY5QkRFRjM0RjMwOTlBQzg4M0My
NkY5REIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wo2cYKumMZ0
0QpfRNNH8TBRwJMNCFu2WG6XPiSqGVQE6YTQY8ZYsl+YOG1CL5ys0wQKyKAe3tT6
4TZzizi5y7WGKfucz9e0ppAaRuk3yjVWZlfTokq1tbVzW6nG98RwDnUqMe7N0e6E
DHddn3Y40kSiR4Fk1b3vbvS1DQtYOtJWpE/DJNDZGCztLcInqimjalQE9sA5SQpc
ubgHNGVypoDUNSwl2N9XCBaZHHPYAJn/PI/KeUeYuWswnZhNFpcIi/Q46aN+VeA3
AUVI/uV1BTOe2Q0gHa9W6LNCsOu6GdJCoASuVVFNpJ5GFKZ2IeWHTy3OT2prJAtH
Km5BUTpJHwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFN7jmizvdmD5ve808wmayIPC
b52zMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy
ZjA5N2YvNC9BUzQ2OTQ3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASisZMA0GCSqGSIb3DQEBCwUAA4IB
AQA0mCz1M3ZEq7ugYeCWBOvsVaE6eC3hFprVoZ6iU0Vulqsgha3XkVhYbhKFVbaV
wHYqXQSGfhymBIYCZTYYqVtggyLNT49QT+cmTtn23S7doa39KO093Np6rDXSKGyB
1hPEwxO9C9maFSoeFRQc8trlVETxX7BeDOE0jLdfgZlhPkyzru7sh5k2+fAQcJQ5
IyVeDRWpreG+oUQu4QOsQx8PlU2QQZqw3BYv2P41VGsHcLiQwKYGsWd97GDJLrCp
pfAmQRIrDU1cka/jxsWTpgVMtLMSG02CsRzobq3WxG+ou0/BlJ0RzMpcLQ9LrprC
iUTrdfxrqHtZxyv8kLm+8o3u
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net