Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63473.roa
File: AS63473.roa (raw, json)
Hash identifier: vFnw1BMPUV3k+99RoiMvbZqd4eK5ikgqT2YkL/zoyI0=
Subject key identifier: 73:05:10:E2:0A:AB:1D:D6:63:4F:24:E8:DE:EB:40:05:28:EA:83:93
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 5A049AFEDAD4C6103EFE0F533977C85FBC1C75E8
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63473.roa
Signing time: Tue 02 Apr 2024 20:01:15 +0000
ROA not before: Tue 02 Apr 2024 19:56:15 +0000
ROA not after: Tue 01 Apr 2025 20:01:15 +0000
asID: 63473
IP address blocks: 140.99.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:04:9a:fe:da:d4:c6:10:3e:fe:0f:53:39:77:c8:5f:bc:1c:75:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Apr 2 19:56:15 2024 GMT
Not After : Apr 1 20:01:15 2025 GMT
Subject: CN=730510E20AAB1DD6634F24E8DEEB400528EA8393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1e:bb:b7:ea:4d:3b:6a:c8:13:b9:09:fb:10:
b8:f2:77:ce:52:96:3f:11:86:7f:f8:a3:0f:3e:81:
49:d3:42:0d:eb:42:ae:25:bd:3d:3f:5b:7c:63:87:
22:e5:56:ac:7c:4d:81:1b:6e:25:42:e1:03:98:ba:
00:89:21:c7:90:a1:cf:fc:cc:73:45:d0:0d:88:6e:
2e:1a:3b:d2:4f:b1:79:cd:52:ab:e5:8d:a5:a1:84:
48:7e:b3:42:77:bb:18:f2:56:b9:7b:52:1b:b0:08:
8e:43:76:f9:03:d8:ee:bb:3c:aa:50:6f:28:39:a2:
f8:b2:80:f0:46:9b:ce:cc:b8:73:fb:a6:8b:90:34:
9b:84:04:13:13:4e:99:76:71:55:b1:c3:42:05:19:
47:39:09:93:f0:c1:04:a3:70:10:5d:c1:85:b7:0b:
02:43:7e:cc:90:fe:29:d8:d4:7f:93:74:c7:57:53:
91:4f:2b:59:db:ed:54:2e:66:fc:c7:2f:2a:a5:f8:
cb:9d:6a:dc:af:23:6d:f9:a9:59:ab:32:91:c2:a1:
f2:82:42:03:ba:f5:60:f3:0c:b3:ac:f4:2e:34:9c:
76:e5:d7:40:f8:c8:8a:bc:c2:37:ac:c9:a5:ba:ac:
6c:60:e5:19:c6:f6:f8:7a:01:cf:48:d7:21:e5:06:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:05:10:E2:0A:AB:1D:D6:63:4F:24:E8:DE:EB:40:05:28:EA:83:93
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS63473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:1d:ef:e3:03:cc:cc:49:49:cb:19:1e:7d:19:b6:66:c5:ed:
d0:d4:aa:ba:12:36:41:22:31:9d:f0:0b:66:16:8b:a2:ae:cc:
25:8e:3c:bc:e8:7e:97:d8:00:a4:7b:81:dd:5d:2e:43:26:f4:
d1:a7:69:ae:38:8b:0c:cc:6b:b8:2d:40:07:af:58:cd:32:d9:
b7:1a:93:c0:3c:c1:14:76:52:ac:8a:94:1f:43:31:d7:2c:ae:
5a:17:59:8a:e4:4a:a4:e9:df:fe:08:94:a9:df:06:2b:e8:51:
18:93:08:41:3c:aa:85:cf:56:04:8e:3e:20:eb:70:b5:96:95:
51:1d:91:28:33:88:c5:29:dc:39:d1:15:21:c4:d8:97:ef:13:
c5:a3:08:c4:2c:9b:99:d5:03:11:56:63:fd:e7:b1:88:b2:20:
d5:ce:d2:fc:ea:45:30:92:07:88:c2:e5:3e:96:a1:ce:d2:d6:
bb:9d:09:db:23:33:e4:78:22:51:74:ba:89:d0:e0:30:c0:54:
6b:a4:45:f1:8a:59:f8:cb:fd:f7:7a:5a:f5:04:26:81:fc:d7:
ca:da:f4:c4:6e:9e:96:ef:1d:ba:b8:04:80:d1:b7:d6:38:aa:
2f:f2:f2:13:a6:83:24:df:f1:76:5f:4c:6c:24:7e:a7:6e:3d:
5e:c6:42:68
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUWgSa/trUxhA+/g9TOXfIX7wcdegwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwNDAyMTk1NjE1WhcNMjUwNDAxMjAwMTE1
WjAzMTEwLwYDVQQDEyg3MzA1MTBFMjBBQUIxREQ2NjM0RjI0RThERUVCNDAwNTI4
RUE4MzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7B67t+pNO2rI
E7kJ+xC48nfOUpY/EYZ/+KMPPoFJ00IN60KuJb09P1t8Y4ci5VasfE2BG24lQuED
mLoAiSHHkKHP/MxzRdANiG4uGjvST7F5zVKr5Y2loYRIfrNCd7sY8la5e1IbsAiO
Q3b5A9juuzyqUG8oOaL4soDwRpvOzLhz+6aLkDSbhAQTE06ZdnFVscNCBRlHOQmT
8MEEo3AQXcGFtwsCQ37MkP4p2NR/k3THV1ORTytZ2+1ULmb8xy8qpfjLnWrcryNt
+alZqzKRwqHygkIDuvVg8wyzrPQuNJx25ddA+MiKvMI3rMmluqxsYOUZxvb4egHP
SNch5QaJDQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFHMFEOIKqx3WY08k6N7rQAUo
6oOTMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzYzNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGPzMA0GCSqGSIb3DQEBCwUAA4IB
AQCdHe/jA8zMSUnLGR59GbZmxe3Q1Kq6EjZBIjGd8AtmFouirswljjy86H6X2ACk
e4HdXS5DJvTRp2muOIsMzGu4LUAHr1jNMtm3GpPAPMEUdlKsipQfQzHXLK5aF1mK
5Eqk6d/+CJSp3wYr6FEYkwhBPKqFz1YEjj4g63C1lpVRHZEoM4jFKdw50RUhxNiX
7xPFowjELJuZ1QMRVmP957GIsiDVztL86kUwkgeIwuU+lqHO0ta7nQnbIzPkeCJR
dLqJ0OAwwFRrpEXxiln4y/33elr1BCaB/NfK2vTEbp6W7x26uASA0bfWOKov8vIT
poMk3/F2X0xsJH6nbj1exkJo
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:11:00 2025 by rpki-client