Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35312e302f32342d3234203d3e203336323336.roa
File: 34332e3234352e35312e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: J4mg4tcQSCEz3epVAH65aqXzk1myTM04z+mjh/4wlxs=
Subject key identifier: 41:E8:EB:4D:B7:C9:5C:B1:B6:42:73:4A:F2:94:71:D5:CA:D2:8E:1A
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 56733E8C378785E0636EADD6AC30DAF44E3D4ECD
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35312e302f32342d3234203d3e203336323336.roa
Signing time: Mon 02 Sep 2024 21:13:09 +0000
ROA not before: Mon 02 Sep 2024 21:08:09 +0000
ROA not after: Mon 01 Sep 2025 21:13:09 +0000
asID: 36236
IP address blocks: 43.245.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:73:3e:8c:37:87:85:e0:63:6e:ad:d6:ac:30:da:f4:4e:3d:4e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Validity
Not Before: Sep 2 21:08:09 2024 GMT
Not After : Sep 1 21:13:09 2025 GMT
Subject: CN=41E8EB4DB7C95CB1B642734AF29471D5CAD28E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:5e:0d:28:2d:b2:6d:16:28:19:b9:9d:a5:
7d:de:be:f1:32:63:93:ee:aa:a0:af:1d:5e:5e:99:
45:14:1b:31:29:85:a4:14:c9:ae:72:b1:2d:6f:8d:
3b:14:b3:f3:ce:94:2f:dd:82:8a:0c:0c:3f:86:4d:
4b:ce:c9:fa:7f:90:1d:72:e3:b4:c2:ff:a0:7a:da:
2a:cf:de:f2:fc:bc:30:28:2d:ba:a1:a1:17:18:66:
26:8e:40:f7:bd:f7:76:f3:18:e6:de:8e:58:dc:35:
ba:bd:2f:46:b5:df:2b:ef:66:90:65:62:4a:a3:64:
8f:c3:16:cd:d2:e0:bd:ab:a3:9a:f6:5c:51:0b:df:
c8:c6:a9:91:45:53:25:18:a4:e4:32:f2:f0:41:2f:
3c:48:dc:ed:d5:ac:42:43:39:b6:be:26:5e:6c:a7:
11:46:3d:d2:29:23:6f:19:d9:cb:9f:50:c8:37:0a:
d8:d3:ee:a9:6a:cb:a4:a5:a4:48:49:d8:0f:00:7a:
b2:04:e8:29:db:c7:4c:22:e2:ab:e2:3c:34:d3:da:
ef:e9:f9:67:3b:7f:3c:8f:2f:a4:aa:0e:69:87:0b:
03:88:59:72:83:02:35:f1:7f:c7:e1:98:ec:b6:fd:
0f:41:8d:18:7b:a3:56:79:61:fa:37:fc:3f:46:78:
dc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E8:EB:4D:B7:C9:5C:B1:B6:42:73:4A:F2:94:71:D5:CA:D2:8E:1A
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35312e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.51.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1e:ce:03:26:75:65:f8:12:10:56:73:c0:94:18:4e:38:f2:
93:ff:25:43:9a:8d:2c:13:78:00:f9:b0:c0:65:0e:19:da:53:
b5:a8:a3:e6:fc:9c:75:25:7b:c1:73:40:f3:16:75:b6:83:a6:
28:86:f9:2e:9a:48:79:c8:df:4b:0d:92:92:b9:6a:7d:4f:f5:
6c:17:5d:fe:8b:ca:f3:d1:84:5a:ca:dd:78:82:62:94:a8:76:
74:4d:96:5e:7f:f3:16:a9:75:29:63:b1:27:8c:d5:a7:0a:93:
a9:46:e7:5e:39:3d:25:cc:df:fd:aa:f9:56:a3:6f:7b:28:57:
96:85:2f:a3:33:07:87:0e:ff:3c:72:94:05:e0:73:5d:4d:31:
dd:35:06:58:14:ef:2b:57:3b:9f:f5:25:da:9b:d9:2c:63:d0:
0e:cb:7c:00:73:89:ed:cd:ac:d3:08:bd:45:18:c3:08:a1:d8:
44:db:8f:b0:41:6a:12:59:43:75:5d:f9:27:ce:08:63:d8:3c:
cf:ec:e3:8d:95:a3:d9:8e:49:64:96:33:fb:7c:b5:66:bb:52:
41:2f:16:80:f9:d3:0f:30:7a:07:4c:4b:f7:3f:4f:4b:f7:d5:
0d:13:f4:63:d4:ba:60:4e:a3:de:b5:46:ba:b2:e2:b7:c2:6b:
12:87:a5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:24 2025 by rpki-client