Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS395839.roa
File: AS395839.roa (raw, json)
Hash identifier: 9xZXZs+P5w14rF0Nj1ZKZM/WTsMf3a3MtMPsML35h5Y=
Subject key identifier: 59:A8:BE:3C:70:6F:AE:8C:02:5E:13:D2:DD:AE:C7:AB:4C:A1:C0:98
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 030A0B44101B9731CB5B1CE8C6B6A85C71BB24DA
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS395839.roa
Signing time: Sun 17 Mar 2024 01:22:05 +0000
ROA not before: Sun 17 Mar 2024 01:17:05 +0000
ROA not after: Sun 16 Mar 2025 01:22:05 +0000
asID: 395839
IP address blocks: 140.99.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:0a:0b:44:10:1b:97:31:cb:5b:1c:e8:c6:b6:a8:5c:71:bb:24:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Mar 17 01:17:05 2024 GMT
Not After : Mar 16 01:22:05 2025 GMT
Subject: CN=59A8BE3C706FAE8C025E13D2DDAEC7AB4CA1C098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:92:50:2a:7a:dc:c2:5e:22:33:a7:9b:2a:
37:8a:d8:a3:8b:fb:f5:4b:d8:e8:02:70:f6:c1:17:
64:82:2f:d6:96:4d:02:41:90:58:cf:9e:c0:72:e8:
e7:2e:8b:27:27:31:aa:8a:fe:75:14:29:b0:65:a6:
64:63:30:1c:d2:51:9a:55:60:c4:c1:13:87:65:c8:
40:38:16:50:2d:ef:86:78:36:6f:66:ae:d3:33:67:
16:96:30:fb:48:f8:9c:49:f6:52:4d:a8:e5:3b:73:
9a:7b:51:17:49:31:72:b2:49:4a:6a:89:36:c2:ee:
c7:04:9f:8b:a8:40:d6:31:69:c7:f8:b4:88:c6:0a:
22:48:73:c8:f1:9b:94:47:74:73:9c:ba:1c:1c:bd:
63:23:5c:27:66:77:89:55:79:54:34:8e:44:a8:ce:
d8:f3:9f:30:12:04:b8:23:22:42:71:36:7d:d5:da:
40:9e:a2:19:89:db:db:dc:7a:08:c3:2c:ae:5b:36:
00:b2:58:26:7e:6f:e3:0d:f0:b2:76:0a:81:b9:65:
25:76:c5:6f:fd:60:a4:1e:97:ea:05:9b:f1:d4:2f:
3a:a6:1d:c4:38:5b:d9:2b:c7:d0:24:5a:ed:72:f3:
3a:dd:d7:19:c0:85:4e:f3:a7:91:9a:fb:7c:df:1f:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A8:BE:3C:70:6F:AE:8C:02:5E:13:D2:DD:AE:C7:AB:4C:A1:C0:98
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS395839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.236.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:94:0b:4a:b0:ab:dd:02:0e:4f:e5:c5:3d:d9:f1:af:78:d1:
57:54:2d:46:90:39:09:23:af:6d:58:78:a0:8c:6b:f8:32:71:
b1:bc:f6:7f:89:d6:b0:22:63:fb:03:88:d3:4d:e0:37:e5:9f:
f1:90:f9:9f:57:c4:02:2a:83:2d:66:0c:da:a0:23:ee:6e:9e:
c1:ff:f5:c9:d9:66:51:72:3b:bc:63:96:99:57:04:be:52:c3:
8f:d0:ed:aa:7e:b9:1c:bd:9a:2d:93:8c:c0:d0:a5:9d:20:ad:
e9:1a:63:9f:81:9c:35:df:fa:8c:c6:87:12:0c:8c:f7:22:42:
8d:a7:02:2a:c6:c7:3b:d9:4b:91:46:31:ab:76:54:5f:f7:9b:
e4:bc:2a:66:fd:22:0b:58:9d:f6:3d:f4:64:12:94:a6:f6:8b:
c5:1f:39:43:f7:8b:3b:ca:77:ae:6e:9f:12:fd:c8:07:4b:9a:
42:f2:cd:d5:0e:40:29:89:2a:c2:64:eb:6a:05:22:45:5c:9e:
54:dc:51:3e:25:ca:a6:ef:9b:93:88:52:a9:48:35:95:17:c6:
50:55:ac:49:6b:54:4a:75:fc:2f:07:3e:bb:34:83:23:30:15:
b7:fd:f3:44:d7:fd:16:f7:1d:db:65:58:b5:8b:d5:cf:a9:c2:
bb:a2:5f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:33:40 2025 by rpki-client