Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: sQFJyYNKl0oYmwt+SezjVzdeIXn+BMG/tdTQIZjVNhI=
Subject key identifier: FE:71:C5:55:11:4B:7A:B6:B9:E6:C7:7B:D9:74:65:57:B3:7A:05:2A
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 74EC5EEC495DAD3884C71626FF8DB6A98DA9C71B
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214025.roa
Signing time: Thu 28 Nov 2024 12:00:50 +0000
ROA not before: Thu 28 Nov 2024 11:55:50 +0000
ROA not after: Thu 27 Nov 2025 12:00:50 +0000
asID: 214025
IP address blocks: 140.99.43.0/24 maxlen: 24
140.99.45.0/24 maxlen: 24
140.99.47.0/24 maxlen: 24
140.99.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ec:5e:ec:49:5d:ad:38:84:c7:16:26:ff:8d:b6:a9:8d:a9:c7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Nov 28 11:55:50 2024 GMT
Not After : Nov 27 12:00:50 2025 GMT
Subject: CN=FE71C555114B7AB6B9E6C77BD9746557B37A052A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:96:97:9d:4a:fc:90:fc:9b:af:59:0d:17:
cb:5b:54:e7:b6:60:99:54:80:f6:32:4d:51:2f:6b:
27:24:53:f8:8a:1a:dd:53:09:86:2f:a7:36:7a:8c:
7d:cf:69:fd:49:81:89:95:42:94:ce:84:c5:71:6d:
7c:0f:e8:07:a6:6c:3a:03:3e:32:38:77:84:db:75:
4e:c1:9c:6f:82:c3:73:6d:6f:ab:01:7b:7b:67:57:
22:1a:72:bf:2f:e3:84:3f:fe:d0:fe:ab:f8:ac:8a:
67:3c:bc:40:05:cf:42:db:7f:51:e6:f4:3a:45:a8:
99:89:54:3a:9a:6f:db:43:9a:5e:5a:ec:40:a4:a3:
ae:f3:2b:08:a6:62:ca:df:6c:a9:70:7c:a6:dd:aa:
f7:b8:fb:25:f7:1c:8d:70:6d:41:bd:35:b5:f3:25:
45:22:3d:4d:4d:d5:b4:57:ad:71:58:33:96:43:33:
d0:0f:6f:19:83:a7:0e:54:a0:ca:4b:27:e3:f2:52:
2d:76:d3:e1:3a:19:3c:75:71:71:50:7b:65:fe:25:
a5:99:45:5c:92:71:31:40:20:56:f6:09:98:1f:4c:
4d:bc:0c:e1:ba:f3:61:0f:f5:6e:a4:f4:ae:b0:7f:
b4:16:d8:91:11:8e:5f:e8:4e:9e:0f:0c:cc:ef:66:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:71:C5:55:11:4B:7A:B6:B9:E6:C7:7B:D9:74:65:57:B3:7A:05:2A
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.43.0/24
140.99.45.0/24
140.99.47.0-140.99.48.255
Signature Algorithm: sha256WithRSAEncryption
6a:c1:0d:1e:54:1d:0c:78:d2:d3:ca:8d:61:96:f6:98:49:88:
1d:b0:60:bf:e2:1c:ee:43:54:de:7c:b0:73:16:22:92:f0:ab:
8b:e2:cb:4e:3f:26:42:52:22:59:cb:4e:8f:05:d5:0a:e7:7f:
9f:05:a3:53:a0:e8:97:9b:46:cf:bd:9e:6c:f8:81:71:f9:b8:
f9:7d:df:66:ca:54:48:d0:04:04:5d:b3:20:45:92:7f:6b:2b:
09:75:00:a2:d9:d3:51:cc:9d:77:88:73:24:b2:bf:fa:e1:0c:
4f:f9:b1:fb:95:13:a4:ec:45:66:b6:e0:8f:6b:a0:dc:1d:a5:
07:0a:11:59:49:c0:22:6e:9e:81:57:31:f1:62:88:2e:f0:83:
03:a3:c9:c6:fd:78:24:13:c6:9e:ec:2f:91:ee:f6:94:02:5c:
84:46:1c:00:0f:b2:03:10:bd:79:68:7a:03:e5:d7:36:c0:72:
9c:29:1f:2f:df:9e:53:3e:cd:cb:d7:6d:98:69:3c:fa:ca:d4:
1a:af:07:bd:c9:26:46:c6:39:67:e3:c3:bd:fb:f8:89:c8:f7:
82:e7:6e:6b:f1:b3:64:92:64:bb:8b:17:28:b1:2a:e1:fc:d4:
19:37:8d:31:ae:58:09:c8:cd:af:2d:13:b1:2b:f7:ae:f0:7b:
01:ed:8d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:29 2025 by rpki-client