Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: QvxeDJNAYogTsPLo6BsIZS8UbDBtQZoZg4+/dBf/vKc=
Subject key identifier: 3C:46:8C:CD:70:7C:DB:63:33:76:B8:96:FF:38:8F:1A:8F:51:81:51
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 7504C0EEC8629353EC15252B1E3BE40825AD6355
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
Signing time: Fri 17 Jan 2025 14:27:53 +0000
ROA not before: Fri 17 Jan 2025 14:22:53 +0000
ROA not after: Fri 16 Jan 2026 14:27:53 +0000
asID: 834
IP address blocks: 140.99.184.0/23 maxlen: 24
140.99.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:04:c0:ee:c8:62:93:53:ec:15:25:2b:1e:3b:e4:08:25:ad:63:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Jan 17 14:22:53 2025 GMT
Not After : Jan 16 14:27:53 2026 GMT
Subject: CN=3C468CCD707CDB633376B896FF388F1A8F518151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a4:1a:ea:0e:56:96:98:07:ff:af:0b:89:3a:
de:f1:b7:f3:75:e2:4f:ec:df:b5:b3:92:3a:04:b2:
f5:b4:8b:46:c3:f4:1c:0b:31:0d:01:3f:93:b2:50:
92:dd:64:7d:33:fc:31:42:90:63:01:07:f8:cb:22:
39:b9:34:e8:cd:dd:27:f1:74:40:00:61:a6:8d:42:
3f:3b:ab:03:83:c6:6c:6b:51:05:7a:b5:fb:91:3e:
23:47:d9:69:0f:f9:a7:07:ab:f5:7c:13:fe:66:96:
d8:67:93:51:2b:6c:d6:af:2a:03:78:6c:81:05:00:
cb:cf:be:38:62:97:53:ab:c4:f9:e8:49:ee:04:a0:
2d:5b:d5:1c:25:93:e0:64:6c:ec:7d:48:ae:b5:d4:
74:29:61:f2:d3:3b:17:10:6c:15:b1:64:cf:cc:dc:
c5:9c:f7:b4:ab:b0:62:30:a4:03:85:cc:12:c7:a4:
5d:16:56:42:43:49:d7:df:43:37:3a:af:a2:d5:d1:
c5:6e:cc:64:9c:79:17:b1:2e:93:25:de:6f:6b:e2:
49:d7:93:83:20:ba:a1:62:1f:db:d3:24:36:fd:94:
04:68:bc:c1:e4:50:99:14:1c:b0:de:85:8a:20:6b:
b3:37:c5:5d:cd:dd:b0:92:84:70:3a:20:55:37:4e:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:46:8C:CD:70:7C:DB:63:33:76:B8:96:FF:38:8F:1A:8F:51:81:51
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.184.0/23
140.99.209.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f3:c3:21:4e:8f:e2:e4:f9:73:5f:81:29:dc:af:48:04:f1:
9c:52:73:6f:b2:60:2a:22:2c:9b:bb:f4:cc:2e:f2:84:84:d4:
7f:85:a9:57:f0:7c:29:94:f5:2d:25:69:17:6a:68:20:c0:7d:
75:e2:3e:96:ca:ac:15:e1:c3:a6:b6:98:15:f1:06:4f:e1:49:
16:ee:6e:b4:36:f8:47:c2:38:b6:0b:1f:e3:f8:04:15:f0:a8:
08:5b:f6:3d:fc:25:f2:6f:88:f7:44:db:5a:0d:17:bf:88:37:
82:5c:a6:20:b6:d4:17:76:3a:69:e3:64:4f:a2:16:d5:24:86:
10:d6:54:be:24:06:62:f6:6d:d6:a8:8c:5c:17:c6:68:aa:f9:
03:50:83:c5:01:a1:50:9d:d3:c2:b3:7d:db:42:64:a8:da:49:
12:9c:e0:f5:9e:fb:3e:cc:9d:5a:f4:17:76:12:ee:1c:02:68:
f4:85:58:55:a1:4d:f7:d8:cd:49:96:03:22:89:9b:e1:ad:fe:
0e:f7:62:27:65:d2:7c:41:0f:62:82:43:15:13:7e:63:55:70:
74:f7:a8:88:a5:80:4f:09:da:ae:43:7c:e2:c8:e2:cb:e4:20:
42:bf:40:c9:55:11:e1:0d:57:47:d9:c3:53:b0:ed:b3:ec:2b:
b7:71:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:28:22 2025 by rpki-client