Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS996.roa
File: AS996.roa (raw, json)
Hash identifier: 0pQ9rmWt2ijSbvmLFg9sNrf/lQc3Zvqa1Ivoi7NHzKE=
Subject key identifier: 4F:43:EA:84:66:D4:42:03:3E:FD:74:C0:A7:3A:BA:07:92:FF:12:09
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 64508B9B27976F823F450E371C8DD22E6B5E98
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS996.roa
Signing time: Thu 03 Apr 2025 16:45:32 +0000
ROA not before: Thu 03 Apr 2025 16:40:32 +0000
ROA not after: Thu 02 Apr 2026 16:45:32 +0000
asID: 996
IP address blocks: 89.35.93.0/24 maxlen: 24
89.35.94.0/24 maxlen: 24
89.35.95.0/24 maxlen: 24
162.213.3.0/24 maxlen: 24
192.228.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:50:8b:9b:27:97:6f:82:3f:45:0e:37:1c:8d:d2:2e:6b:5e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Apr 3 16:40:32 2025 GMT
Not After : Apr 2 16:45:32 2026 GMT
Subject: CN=4F43EA8466D442033EFD74C0A73ABA0792FF1209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:a6:72:e8:a6:17:c1:54:97:1f:b8:a4:06:
f6:0a:cf:33:60:6d:2c:69:5c:16:be:7b:4b:d3:52:
4c:17:1b:24:61:37:0b:36:04:46:ff:4c:0d:c0:fa:
43:a5:25:00:dd:3b:5d:2a:17:65:9f:c5:44:a2:5c:
21:16:07:9b:97:02:66:d7:ec:09:6d:3c:32:fd:d3:
87:f6:97:f4:2a:26:3f:14:02:5e:65:b6:82:54:f0:
c6:e8:49:f9:35:4e:66:6a:e9:a6:07:dc:c6:dd:35:
04:80:ba:21:31:89:9a:99:51:db:17:df:d5:5a:ef:
6f:af:13:9a:96:6b:c8:20:07:58:0f:c5:3e:76:eb:
d0:d6:25:e6:66:46:20:f7:99:00:1b:51:d3:93:5c:
42:92:9c:d9:ec:9c:c3:44:8d:fa:c9:30:f2:b0:7c:
77:0b:3b:74:a6:0b:ed:4e:ee:5e:d7:7d:c9:97:fc:
28:5b:9a:07:45:fe:f1:d9:b8:06:54:70:3b:9f:94:
b2:fa:ec:25:fa:e5:31:49:5d:b3:25:e2:f4:f5:28:
cc:1d:83:96:45:06:88:e0:72:a4:26:ad:6d:0a:a5:
0f:b7:13:a8:65:17:23:79:5f:1b:51:c9:f6:97:ce:
ee:e3:44:51:db:dc:24:b5:ad:6c:0d:55:23:3c:a5:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:43:EA:84:66:D4:42:03:3E:FD:74:C0:A7:3A:BA:07:92:FF:12:09
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.93.0-89.35.95.255
162.213.3.0/24
192.228.122.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e9:c6:4c:94:45:5f:a9:c3:0c:f1:d4:b6:99:d1:0b:9a:cc:
ae:a3:0f:0d:63:a8:43:56:65:4b:c7:e8:66:2c:77:50:58:16:
26:8d:7b:55:44:cf:ce:74:8a:c7:f3:c1:46:89:41:68:03:c3:
d2:7d:0c:de:af:bf:64:18:7c:f3:77:70:53:56:3c:cd:3f:30:
87:d1:00:88:c9:0e:a0:7d:d5:f6:66:22:f6:2f:e5:87:5e:d7:
6c:c9:4e:09:b7:e5:c2:ec:26:87:5e:e6:b2:84:6f:de:eb:a0:
9e:40:92:6a:3c:ca:b0:78:56:cf:f0:1a:4b:e5:76:04:a5:be:
09:67:10:0a:f1:9a:e8:af:b1:d2:fa:96:54:50:13:b0:1e:36:
dd:ec:ea:1d:2a:58:0f:e8:fb:2e:c8:a7:bb:46:54:da:14:df:
b7:fe:b7:72:c5:c3:95:48:1d:52:ad:b5:49:49:91:88:2e:e9:
eb:ff:87:fa:1d:2d:08:f6:73:bc:cf:b7:04:9d:79:87:62:90:
7d:7f:a9:c2:fb:a9:69:f8:4b:e2:7e:5e:5f:74:b7:d5:0e:0b:
1a:9d:09:12:77:79:01:02:85:98:c1:03:1d:05:d3:f4:bb:82:
5c:1b:ca:a9:76:c2:43:03:6d:d2:85:02:f7:8a:4d:f1:45:e1:
cf:88:7d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net