Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e34392e302f32342d3234203d3e203336323336.roa
File: 34332e3234352e34392e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: L6slJKZm6/mwP5qnXlK+lSSZ/A7GbBX9a36I+aMtIIQ=
Subject key identifier: 9F:21:3F:FB:FF:B5:FD:53:1C:06:26:95:CA:5D:36:DF:69:7A:1E:DD
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 5507D98772747A88681A2BD784E3364E27E2FD32
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e34392e302f32342d3234203d3e203336323336.roa
Signing time: Mon 02 Sep 2024 21:13:09 +0000
ROA not before: Mon 02 Sep 2024 21:08:09 +0000
ROA not after: Mon 01 Sep 2025 21:13:09 +0000
asID: 36236
IP address blocks: 43.245.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:07:d9:87:72:74:7a:88:68:1a:2b:d7:84:e3:36:4e:27:e2:fd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Validity
Not Before: Sep 2 21:08:09 2024 GMT
Not After : Sep 1 21:13:09 2025 GMT
Subject: CN=9F213FFBFFB5FD531C062695CA5D36DF697A1EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:40:52:7b:98:ba:d3:1f:45:db:d0:15:d1:
b2:f4:76:14:5c:59:bf:0b:b2:8c:83:64:dc:73:09:
86:91:b5:ba:a4:5f:32:27:fe:99:cd:c3:82:7a:af:
28:7d:d2:21:64:4c:aa:87:a9:41:6c:e9:00:8b:31:
ba:0e:cc:a0:86:0d:e5:35:af:7d:9f:fe:20:6a:03:
f2:57:48:71:51:d9:c0:5a:f6:79:0e:8c:2c:8f:9d:
23:eb:1a:29:d3:d9:53:de:c5:1a:13:cc:50:97:85:
37:be:76:be:59:ae:ba:c3:5a:f6:b4:d6:99:30:d0:
10:d2:96:ab:82:d2:b9:a4:96:76:2b:16:47:46:3e:
ab:29:94:a6:da:0a:49:bd:8b:46:77:20:26:e0:da:
94:f1:e7:e1:29:cc:58:9a:87:e9:33:94:8c:d7:04:
78:d1:81:83:2d:53:65:86:6f:54:59:15:94:96:e4:
a9:0f:31:e6:5b:df:51:56:bc:36:bd:e8:70:66:94:
f0:ef:3d:16:f8:48:9f:b4:9b:4a:7b:8c:e0:e4:67:
b0:ba:36:bf:1d:38:75:7d:c7:c8:3d:2b:b3:15:39:
72:31:cc:7e:29:04:05:dc:60:5a:7c:d9:50:b1:ab:
71:d9:ce:0f:b2:fe:fb:6b:66:15:22:47:32:96:41:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:21:3F:FB:FF:B5:FD:53:1C:06:26:95:CA:5D:36:DF:69:7A:1E:DD
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e34392e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.49.0/24
Signature Algorithm: sha256WithRSAEncryption
79:60:1f:96:89:bb:9b:0c:da:08:e6:d6:65:88:ff:66:d9:74:
ad:96:8e:78:55:74:70:5b:6a:88:fb:26:92:2e:72:43:73:9a:
ff:54:65:1e:7d:46:83:dc:e6:85:a3:f0:05:fb:72:4e:22:74:
d9:fd:e8:8d:6c:e5:63:33:c8:5a:03:f0:d5:76:54:46:d0:ca:
c9:33:4c:94:fc:9d:ee:88:e2:d2:17:d4:24:f1:bf:79:0c:eb:
c0:2f:1b:a5:70:e9:f3:28:7d:44:14:f7:7b:ba:fc:e7:4b:bb:
76:69:ea:54:88:40:33:0f:12:e2:b6:ed:1c:10:45:7c:22:94:
f1:9b:fd:ee:80:ee:cb:c4:dc:e2:b4:93:37:c4:b4:b6:a0:be:
75:13:d6:11:a3:73:1d:24:c7:cb:7c:4e:df:a6:f1:f8:f0:64:
24:21:20:fb:ba:52:4b:ec:9a:99:46:43:9e:62:5d:01:d4:c3:
48:68:88:a9:61:5d:1b:1f:bf:13:53:b0:cb:e5:8c:32:47:17:
69:f2:c6:1f:bc:fd:e9:68:51:44:53:1c:b4:ac:4f:1c:79:41:
3c:43:07:e1:45:b0:21:37:8c:0d:ab:48:8e:46:d7:47:03:86:
c0:34:b4:6f:65:1b:89:3b:cf:db:5a:51:45:11:05:b3:57:51:
10:64:33:ba
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVQfZh3J0eohoGivXhOM2Tifi/TIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0
QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI0MDkwMjIxMDgwOVoX
DTI1MDkwMTIxMTMwOVowMzExMC8GA1UEAxMoOUYyMTNGRkJGRkI1RkQ1MzFDMDYy
Njk1Q0E1RDM2REY2OTdBMUVERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALesQFJ7mLrTH0Xb0BXRsvR2FFxZvwuyjINk3HMJhpG1uqRfMif+mc3Dgnqv
KH3SIWRMqoepQWzpAIsxug7MoIYN5TWvfZ/+IGoD8ldIcVHZwFr2eQ6MLI+dI+sa
KdPZU97FGhPMUJeFN752vlmuusNa9rTWmTDQENKWq4LSuaSWdisWR0Y+qymUptoK
Sb2LRncgJuDalPHn4SnMWJqH6TOUjNcEeNGBgy1TZYZvVFkVlJbkqQ8x5lvfUVa8
Nr3ocGaU8O89FvhIn7SbSnuM4ORnsLo2vx04dX3HyD0rsxU5cjHMfikEBdxgWnzZ
ULGrcdnOD7L++2tmFSJHMpZB0zcCAwEAAaOCAjowggI2MB0GA1UdDgQWBBSfIT/7
/7X9UxwGJpXKXTbfaXoe3TAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x
hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE
RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgaAGCCsG
AQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4
Ni8zLzM0MzMyZTMyMzQzNTJlMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMz
MzYzMjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAr9TEwDQYJKoZIhvcNAQELBQADggEBAHlgH5aJ
u5sM2gjm1mWI/2bZdK2WjnhVdHBbaoj7JpIuckNzmv9UZR59RoPc5oWj8AX7ck4i
dNn96I1s5WMzyFoD8NV2VEbQyskzTJT8ne6I4tIX1CTxv3kM68AvG6Vw6fMofUQU
93u6/OdLu3Zp6lSIQDMPEuK27RwQRXwilPGb/e6A7svE3OK0kzfEtLagvnUT1hGj
cx0kx8t8Tt+m8fjwZCQhIPu6UkvsmplGQ55iXQHUw0hoiKlhXRsfvxNTsMvljDJH
F2nyxh+8/eloUURTHLSsTxx5QTxDB+FFsCE3jA2rSI5G10cDhsA0tG9lG4k7z9ta
UUURBbNXURBkM7o=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:57:27 2025 by rpki-client