Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: j/wJAbHoe8ynXHBCUHCR30WSl60XfWOUlbjmNni6mt0=
Subject key identifier: AE:26:BE:F0:B7:BC:EE:CF:7E:D2:5C:56:9A:04:E1:6B:6D:03:01:27
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 1D519B2FEF4A47571D2D17D55275BB3BB0A61998
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3320.roa
Signing time: Sun 23 Mar 2025 01:21:05 +0000
ROA not before: Sun 23 Mar 2025 01:16:05 +0000
ROA not after: Sun 22 Mar 2026 01:21:05 +0000
asID: 3320
IP address blocks: 67.210.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:51:9b:2f:ef:4a:47:57:1d:2d:17:d5:52:75:bb:3b:b0:a6:19:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Mar 23 01:16:05 2025 GMT
Not After : Mar 22 01:21:05 2026 GMT
Subject: CN=AE26BEF0B7BCEECF7ED25C569A04E16B6D030127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:56:0d:76:dd:15:32:ee:e2:ec:90:5d:13:
08:04:d5:14:11:a5:4b:58:5c:95:e4:31:94:e4:c7:
5d:0c:ec:c3:40:14:b6:d1:22:97:21:b2:95:38:9d:
bd:2c:42:58:2e:55:71:5c:08:3d:f0:00:dd:38:7d:
38:7b:b1:57:5c:6c:15:f9:59:f6:c5:89:55:39:4c:
f8:22:8d:e3:92:07:2d:48:a2:8d:72:cb:6c:ad:83:
d3:3f:56:1e:b4:85:cc:3a:28:d8:61:fb:fd:ff:67:
2a:ac:3f:53:ab:c4:10:a0:dd:5a:c5:16:59:84:47:
f9:6c:31:4f:9e:7a:b9:e0:fc:d2:2f:5f:9f:c6:68:
29:87:3a:fe:20:62:61:c1:ba:e7:92:01:84:23:99:
94:2c:e3:06:a8:42:0f:0f:c6:29:18:06:ac:71:5a:
16:d3:4f:94:ee:85:ca:50:5a:55:71:9e:00:cc:c5:
fb:1e:87:ec:e7:b6:1f:51:39:50:74:b4:7d:41:af:
4a:6d:68:07:87:f7:ad:d4:08:1c:11:79:7b:7c:29:
30:a4:5d:16:b1:95:8f:b4:8c:c4:9c:75:9e:7e:55:
9c:aa:54:46:de:54:3a:b9:3a:08:b6:57:1c:83:05:
09:4e:ee:0a:d0:95:23:53:7d:f5:54:37:ce:34:42:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:26:BE:F0:B7:BC:EE:CF:7E:D2:5C:56:9A:04:E1:6B:6D:03:01:27
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.210.101.0/24
Signature Algorithm: sha256WithRSAEncryption
11:3e:4d:17:23:24:75:98:88:99:58:a0:e7:ae:3f:63:9a:e2:
39:83:4b:bb:7f:72:56:f7:c6:8f:36:6b:85:b4:06:0b:3f:8e:
fe:c3:70:b8:f2:c6:e0:9b:39:3a:b9:9c:32:25:e3:0a:72:d6:
32:db:04:92:37:65:b2:49:97:42:b5:b3:01:80:2a:a8:35:4d:
99:4a:9d:6d:ef:1c:d4:4c:e1:11:21:56:1a:46:f4:22:b3:30:
15:1d:a9:df:03:8d:2b:cd:92:0e:10:96:89:ec:b9:95:23:bb:
ab:f0:19:71:85:30:26:12:0d:58:0b:3c:ce:20:ba:eb:fd:e6:
55:92:4b:6c:f4:41:c9:6e:8e:12:3a:c8:29:51:8a:a7:3c:ec:
16:87:6c:7c:ce:92:4f:af:e5:23:20:c1:4e:e5:4a:28:50:59:
e9:e5:34:f8:0d:b2:46:33:4f:15:51:ea:85:0f:be:01:0b:f1:
46:c6:ff:e4:cb:3d:c6:06:92:5c:cc:ac:ce:ef:7b:71:ff:7f:
e5:21:fe:a2:07:7b:c0:2d:1c:be:dc:05:e2:d9:15:70:dd:7d:
6a:e1:74:91:93:7d:d0:32:e9:9d:b3:bf:45:aa:21:c1:55:40:
1c:0b:d3:7e:70:fe:b4:47:fc:e5:26:b4:1d:1f:ad:0d:ed:f1:
e3:3c:0c:4e
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUHVGbL+9KR1cdLRfVUnW7O7CmGZgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMzIzMDExNjA1WhcNMjYwMzIyMDEyMTA1
WjAzMTEwLwYDVQQDEyhBRTI2QkVGMEI3QkNFRUNGN0VEMjVDNTY5QTA0RTE2QjZE
MDMwMTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0BWDXbdFTLu
4uyQXRMIBNUUEaVLWFyV5DGU5MddDOzDQBS20SKXIbKVOJ29LEJYLlVxXAg98ADd
OH04e7FXXGwV+Vn2xYlVOUz4Io3jkgctSKKNcstsrYPTP1YetIXMOijYYfv9/2cq
rD9Tq8QQoN1axRZZhEf5bDFPnnq54PzSL1+fxmgphzr+IGJhwbrnkgGEI5mULOMG
qEIPD8YpGAascVoW00+U7oXKUFpVcZ4AzMX7Hofs57YfUTlQdLR9Qa9KbWgHh/et
1AgcEXl7fCkwpF0WsZWPtIzEnHWeflWcqlRG3lQ6uToItlccgwUJTu4K0JUjU331
VDfONEKLiQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFK4mvvC3vO7PftJcVpoE4Wtt
AwEnMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzMzMjAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABD0mUwDQYJKoZIhvcNAQELBQADggEB
ABE+TRcjJHWYiJlYoOeuP2Oa4jmDS7t/clb3xo82a4W0Bgs/jv7DcLjyxuCbOTq5
nDIl4wpy1jLbBJI3ZbJJl0K1swGAKqg1TZlKnW3vHNRM4REhVhpG9CKzMBUdqd8D
jSvNkg4QlonsuZUju6vwGXGFMCYSDVgLPM4guuv95lWSS2z0QclujhI6yClRiqc8
7BaHbHzOkk+v5SMgwU7lSihQWenlNPgNskYzTxVR6oUPvgEL8UbG/+TLPcYGklzM
rM7ve3H/f+Uh/qIHe8AtHL7cBeLZFXDdfWrhdJGTfdAy6Z2zv0WqIcFVQBwL035w
/rRH/OUmtB0frQ3t8eM8DE4=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net