Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS395292.roa
File: AS395292.roa (raw, json)
Hash identifier: /V5cHa7QGU5Mh83GW6DY6qIdQqzh1qARNxLZYacD3Fc=
Subject key identifier: DE:E6:91:C1:81:C6:BE:C5:D5:C5:3B:4F:44:82:80:BC:73:44:B4:67
Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial: 3E86903F31C8DD7C974FBEDF92E08451CA42A4C5
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS395292.roa
Signing time: Wed 20 Mar 2024 04:17:20 +0000
ROA not before: Wed 20 Mar 2024 04:12:20 +0000
ROA not after: Wed 19 Mar 2025 04:17:20 +0000
asID: 395292
IP address blocks: 47.176.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:86:90:3f:31:c8:dd:7c:97:4f:be:df:92:e0:84:51:ca:42:a4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Validity
Not Before: Mar 20 04:12:20 2024 GMT
Not After : Mar 19 04:17:20 2025 GMT
Subject: CN=DEE691C181C6BEC5D5C53B4F448280BC7344B467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:9f:83:c1:10:61:26:da:6a:91:aa:50:71:
25:0a:1f:51:99:b2:20:99:09:fa:08:0b:55:12:68:
a0:d3:14:fd:90:d6:bf:5f:46:6d:59:f3:91:9f:e6:
44:9c:89:02:41:81:63:9f:72:dc:92:68:b7:83:ab:
d2:52:00:c2:2a:25:85:11:6e:ba:d3:df:4d:9a:21:
19:6c:7b:43:92:34:04:9f:cd:8d:44:a9:fc:24:e7:
15:87:bc:a9:9d:9e:47:27:60:30:e6:b0:ad:83:9b:
ea:e1:a9:c1:88:c7:ea:20:c0:c6:39:51:b8:a2:3f:
c4:01:98:a2:5d:1c:97:50:4f:fd:78:da:3c:47:b4:
54:b5:45:32:01:a4:4a:75:62:9b:6e:20:cf:54:1b:
81:5a:a7:0f:8e:cf:27:32:73:2d:5e:76:8a:cb:67:
dc:6f:5d:83:14:e9:91:71:0d:ef:2f:4e:d8:65:02:
54:80:08:19:25:44:83:de:ab:85:aa:71:25:13:2e:
e7:8f:70:8d:de:75:3e:05:1e:10:f1:08:f2:d4:16:
3b:b8:7a:02:0b:03:ef:92:87:7f:8a:62:bf:4c:b2:
88:4c:62:c3:53:95:72:e3:34:8d:c0:fb:9b:55:0b:
ab:53:42:32:24:fa:cd:63:db:a6:20:94:d6:a1:d4:
4c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E6:91:C1:81:C6:BE:C5:D5:C5:3B:4F:44:82:80:BC:73:44:B4:67
X509v3 Authority Key Identifier:
keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS395292.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.176.242.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ea:6c:49:c0:1f:52:ee:2f:77:75:79:5b:9d:33:f9:ff:18:
11:92:9f:02:65:ae:4c:9c:b6:03:68:18:22:8d:42:27:0a:0a:
6f:05:4d:fc:41:01:c9:5a:a3:63:2c:74:06:28:fd:83:8b:00:
a5:8c:1e:74:a3:42:2e:f0:f2:f2:88:1b:d6:40:8b:85:08:a0:
f0:0b:09:cc:aa:1e:bd:35:5d:74:90:9e:06:d6:c4:25:c7:3d:
fe:38:91:61:80:72:7e:8e:2a:8b:4c:27:3d:bb:9b:b2:72:86:
a1:95:35:0e:9c:9b:d6:65:82:56:7b:2a:50:4a:46:e3:8a:8f:
3b:a7:0f:13:e1:f2:99:c6:17:47:1b:fd:98:15:72:9d:47:a7:
1d:30:b2:02:7d:75:14:8e:37:7c:2a:f2:20:00:45:18:08:e6:
28:1f:0c:21:89:50:81:c9:79:73:8c:d1:a3:b1:4d:4d:61:79:
68:d3:57:c6:99:5a:9f:f5:60:02:92:3b:a5:84:c7:5a:ef:a7:
9b:9f:61:ba:90:d9:6e:30:7e:26:f9:43:7a:cf:c0:9f:07:11:
21:75:66:67:6d:ff:f2:c9:5f:c2:89:73:0d:d3:44:09:6e:04:
59:37:73:97:27:1d:ba:f8:11:06:1f:00:ee:25:b6:f8:cf:08:
88:8a:ce:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:14 2025 by rpki-client