Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6939.roa
File: AS6939.roa (raw, json)
Hash identifier: /GaUN3FvEDKsMmB+1Acsvkyd5Vrav6Q2/eQqIfkfa/o=
Subject key identifier: 4C:4C:F1:9C:AA:A3:67:42:CD:D0:5A:FA:A5:42:51:F6:30:88:42:2A
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 450A71E948FAD4A6C4FDA447B6D813F6E0B175D9
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6939.roa
Signing time: Tue 01 Apr 2025 01:59:34 +0000
ROA not before: Tue 01 Apr 2025 01:54:34 +0000
ROA not after: Tue 31 Mar 2026 01:59:34 +0000
asID: 6939
IP address blocks: 23.95.45.0/24 maxlen: 24
23.95.159.0/24 maxlen: 24
198.12.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0a:71:e9:48:fa:d4:a6:c4:fd:a4:47:b6:d8:13:f6:e0:b1:75:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Apr 1 01:54:34 2025 GMT
Not After : Mar 31 01:59:34 2026 GMT
Subject: CN=4C4CF19CAAA36742CDD05AFAA54251F63088422A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:cb:26:c8:d9:76:ba:bf:9b:d0:b2:11:c3:
2d:33:52:e6:c7:44:51:5a:2e:09:76:75:aa:37:ac:
53:f3:36:34:de:aa:c2:5c:5d:33:0f:3a:74:3b:65:
4c:12:b6:dd:a4:8e:01:30:42:63:55:f5:d2:b6:4c:
78:1b:22:7a:e0:75:cf:03:b4:e5:43:a7:46:1d:d2:
6f:b2:de:4f:d9:01:4f:1a:4a:72:67:14:0e:a8:48:
5a:af:58:e8:54:ef:3b:d4:73:b7:31:19:42:d2:24:
48:51:01:50:78:2e:3d:a8:d8:e9:4a:3f:ac:e4:3d:
06:04:c7:d2:e7:79:14:a3:61:f5:74:65:be:b3:19:
dd:61:a0:4c:5b:0b:60:37:09:74:b4:c1:0a:b2:6f:
30:cd:8a:19:b0:21:7d:59:9c:5a:6b:8d:b0:07:e3:
8f:aa:cd:9c:7e:0d:0f:83:9a:8b:58:dd:5c:67:51:
0c:9e:08:c4:9f:29:27:8b:f0:f6:0b:86:f9:2a:bc:
db:de:92:db:a6:7a:1d:ee:9e:77:f1:ef:f6:0f:99:
78:39:2a:73:22:56:0f:36:bd:eb:67:4c:18:01:5c:
31:ba:81:3e:93:53:9f:01:b6:f4:95:e1:ae:be:52:
b5:d8:9b:68:89:20:dd:63:17:35:50:92:62:38:c2:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4C:F1:9C:AA:A3:67:42:CD:D0:5A:FA:A5:42:51:F6:30:88:42:2A
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.95.45.0/24
23.95.159.0/24
198.12.102.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f3:30:6d:3b:21:0c:5f:55:bd:b9:ed:7c:0d:f1:a3:af:70:
af:d5:2c:9d:b2:03:0e:3d:0b:a1:5f:67:3b:ea:9c:d6:1a:3a:
a2:6c:53:96:dd:c3:f1:0c:69:81:17:33:be:4a:b6:bb:82:5c:
d5:e1:f7:3b:f6:df:f8:8c:71:36:8e:d6:1c:1d:40:cc:d2:92:
bc:cb:fc:08:5a:be:2d:98:ca:c9:b9:96:e0:b3:27:c5:81:07:
67:a3:1b:2c:37:4c:a7:93:ec:9a:bc:ec:99:80:0e:40:75:1b:
46:11:56:5a:01:74:b7:bd:b7:7b:df:dd:81:89:77:fd:00:3d:
ae:d3:d2:aa:7d:fd:ac:ef:05:77:e8:61:00:43:f6:1a:86:5d:
af:5d:b3:01:3e:88:66:a0:8f:4b:c4:18:ab:d3:c1:f0:89:e8:
1b:c2:03:7a:ba:1e:ca:a4:bf:8f:ea:86:0b:6a:77:fe:7c:24:
16:3d:27:47:73:c4:c0:4e:09:fe:4d:5f:88:68:52:e5:28:24:
23:a7:fe:8b:10:b5:b8:b2:91:20:b3:bc:34:ce:ad:57:70:09:
87:5b:47:4c:e8:ea:d4:71:10:41:13:f3:ed:8d:c0:27:70:4a:
c4:e3:d3:ca:55:82:5e:01:96:85:33:26:d8:16:a0:12:fe:4e:
99:ca:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net