Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397441.roa
File: AS397441.roa (raw, json)
Hash identifier: RnTUCnnv2aYuX6Chc0tcd+iByQc4nEJNGOQVVMAAzZw=
Subject key identifier: C1:FE:0C:49:4E:53:3E:D6:1B:90:E0:51:A8:37:99:6C:46:51:37:90
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 109754FB51F6026886A115F04EF0C7B9A967839E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397441.roa
Signing time: Thu 03 Apr 2025 00:00:12 +0000
ROA not before: Wed 02 Apr 2025 23:55:12 +0000
ROA not after: Thu 02 Apr 2026 00:00:12 +0000
asID: 397441
IP address blocks: 199.103.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:97:54:fb:51:f6:02:68:86:a1:15:f0:4e:f0:c7:b9:a9:67:83:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Apr 2 23:55:12 2025 GMT
Not After : Apr 2 00:00:12 2026 GMT
Subject: CN=C1FE0C494E533ED61B90E051A837996C46513790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:49:cb:eb:78:2f:11:9f:5f:9e:0f:12:1c:47:
2c:72:0f:b7:40:e9:3d:f4:bd:a3:20:62:48:3d:92:
99:9f:1b:43:81:2e:4c:fb:4e:e5:d4:5b:b0:91:26:
e7:70:5c:c6:ca:05:19:4d:6e:7b:39:f3:0b:6b:d2:
29:c7:3b:4d:b9:01:8d:f4:1c:f3:fc:be:67:5d:7b:
ef:b5:f3:df:b2:6e:b7:b8:a1:fb:6f:b7:a0:7f:48:
92:f7:eb:84:9e:20:61:eb:22:47:4d:71:24:89:7c:
a3:f6:8b:57:4e:ad:71:23:0c:35:11:46:51:fc:36:
a1:d0:62:d0:d8:69:ab:c9:20:19:02:c1:4d:78:5b:
aa:cb:9f:d1:bb:f3:07:04:69:d9:3a:e4:16:75:d8:
81:6a:8d:a1:8d:e1:08:5d:d7:68:e4:33:e5:4e:5b:
c9:c4:d2:29:7c:ed:6e:7d:51:ba:13:5a:57:93:46:
80:eb:03:c1:4c:87:9c:10:1b:85:12:ff:f0:84:2f:
f5:25:2f:1b:63:1c:7a:13:97:c5:ee:3a:25:1c:94:
a4:74:29:11:18:14:1a:ba:99:70:42:56:69:50:27:
8b:57:96:da:f5:35:3c:1e:f3:a2:e6:30:a7:b2:f9:
32:de:26:f2:f8:25:96:77:4c:9e:23:21:66:3e:71:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:0C:49:4E:53:3E:D6:1B:90:E0:51:A8:37:99:6C:46:51:37:90
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397441.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.103.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:69:7c:e3:19:bd:68:f1:aa:a2:dd:c4:3e:c3:6f:3a:60:38:
37:ae:0b:f9:1d:a9:e7:98:0e:2b:b6:bf:7d:85:68:dd:c5:1b:
fe:f5:97:15:05:cc:2f:6a:a0:30:d6:dd:7e:da:16:a3:fc:e9:
05:b6:81:c4:a4:08:82:6e:cd:79:18:a7:82:85:72:89:ff:81:
f3:53:6e:79:78:13:95:e9:96:2f:8b:be:ea:3b:53:0a:5c:f5:
90:4d:7c:28:e8:c2:8c:a3:58:50:17:0e:9a:18:67:44:db:bd:
62:2d:0d:7a:fa:bc:63:af:62:5e:44:8b:1c:de:17:28:a4:15:
14:76:15:5b:a2:29:64:3f:67:29:0e:00:c4:f9:1a:04:c8:a5:
ff:17:8f:78:89:67:e8:d3:3f:5b:06:6d:13:76:5d:86:ed:0f:
ae:36:07:ef:0e:4c:2a:56:3f:3f:29:05:4e:4b:bf:df:58:15:
f3:3b:48:fd:27:10:f5:1f:89:ac:b7:4d:12:9f:43:47:be:ce:
9f:3e:1b:4f:14:25:62:b5:c4:1e:7c:41:41:f5:3d:aa:24:d1:
f0:82:ba:a6:2f:61:16:07:8a:ed:42:93:c3:b2:18:db:cf:d4:
a7:58:7b:df:68:b3:6d:61:c8:eb:37:56:0a:e4:77:41:e8:59:
8f:30:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net