Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS400069.roa
File: AS400069.roa (raw, json)
Hash identifier: DcG/JMPt2rXp8mVhGmIIPM5tBQPAZHKlN/WzcWAxIpc=
Subject key identifier: 29:BB:54:D3:15:6D:EF:A1:52:08:17:ED:42:0E:EC:4C:72:24:17:C5
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 7B90537DBF5D3DE9CAC7A7889FB7182E999C8232
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS400069.roa
Signing time: Tue 31 Dec 2024 05:55:08 +0000
ROA not before: Tue 31 Dec 2024 05:50:08 +0000
ROA not after: Tue 30 Dec 2025 05:55:08 +0000
asID: 400069
IP address blocks: 50.109.132.0/24 maxlen: 24
50.109.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:90:53:7d:bf:5d:3d:e9:ca:c7:a7:88:9f:b7:18:2e:99:9c:82:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Dec 31 05:50:08 2024 GMT
Not After : Dec 30 05:55:08 2025 GMT
Subject: CN=29BB54D3156DEFA1520817ED420EEC4C722417C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:08:d5:09:43:b0:07:fb:d7:17:65:7d:bd:
ee:6e:3d:c6:ee:7d:3d:84:ae:d1:7b:4b:78:12:e3:
cf:6a:c5:6c:66:20:d4:97:21:0c:51:3f:c0:dc:16:
f9:5f:2f:3d:33:36:b9:5f:df:f8:e3:ac:60:cd:b6:
a2:af:cf:b6:b0:85:1e:e8:6a:15:bc:30:1c:b1:30:
e4:12:5b:3b:6c:e0:a2:17:3a:fd:52:3a:09:14:87:
ce:01:9e:47:66:9c:9f:5e:07:8e:12:5a:c0:f3:f8:
b3:f1:9b:52:ce:03:4d:df:03:4c:e7:96:ce:c1:a4:
c9:ea:c8:05:27:3b:60:5b:f9:ea:fe:05:84:98:3a:
5b:f6:43:d3:66:f4:28:6a:7f:9f:01:46:c1:b4:f4:
ae:9f:d8:34:29:2c:83:35:99:2c:40:aa:f5:0a:23:
91:1a:83:42:ee:4c:f5:cd:68:cd:79:4a:4f:53:c6:
2d:a9:7c:ec:ce:bc:9b:c1:64:e3:ba:14:d2:f9:c2:
76:51:3d:42:47:52:56:08:7c:a3:43:d8:0c:da:6c:
d1:ed:34:fe:21:53:42:22:f8:8e:a2:1b:fe:4f:3c:
6f:37:90:32:21:6b:d5:5e:9a:b4:bf:96:ee:8e:8b:
64:a3:91:f8:07:07:17:d8:e7:33:be:9c:64:75:88:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BB:54:D3:15:6D:EF:A1:52:08:17:ED:42:0E:EC:4C:72:24:17:C5
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS400069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.109.132.0/24
50.109.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8c:ff:82:9c:8e:e0:fd:b2:8a:22:47:ff:77:ea:8e:50:9a:
07:e1:d0:ab:a7:85:4a:3d:8c:2b:c2:4b:59:0b:f4:e2:af:d7:
3d:6d:aa:fb:24:b2:10:a6:99:4a:b8:65:31:ea:68:4f:e3:23:
93:aa:99:84:79:db:fa:ba:a0:12:90:25:fd:f3:e9:78:09:9c:
d3:85:ca:37:4b:b2:31:65:b2:94:bf:03:4b:d8:b3:b4:09:be:
a3:13:2f:31:7c:75:5a:1a:0b:21:0c:da:b2:12:27:98:a6:c6:
b0:27:2f:6e:73:fa:82:21:e2:ae:a3:be:18:65:4a:a5:c0:3b:
eb:e9:64:20:bc:43:f7:ba:c0:e2:4b:d7:d1:d0:05:ca:17:01:
ab:f2:3b:00:f2:71:06:23:5a:81:71:7d:36:d6:4c:8e:dc:e9:
be:4a:df:a4:3e:8a:72:57:6b:e0:e4:2b:3d:d5:ba:9f:7f:ca:
17:d0:c6:30:a5:5e:22:aa:a5:ad:e9:c3:ca:b4:10:97:7e:6f:
09:bf:0d:cf:84:c1:58:aa:2c:34:94:09:fe:87:30:be:a9:36:
7b:f5:81:f1:cb:b3:87:92:63:81:19:78:d8:8e:78:89:48:ba:
aa:62:9c:9f:29:5e:b8:cf:52:03:74:af:0d:7a:5f:1a:72:66:
da:66:30:c0
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUe5BTfb9dPenKx6eIn7cYLpmcgjIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjQxMjMxMDU1MDA4WhcNMjUxMjMwMDU1NTA4
WjAzMTEwLwYDVQQDEygyOUJCNTREMzE1NkRFRkExNTIwODE3RUQ0MjBFRUM0Qzcy
MjQxN0M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY4I1QlDsAf7
1xdlfb3ubj3G7n09hK7Re0t4EuPPasVsZiDUlyEMUT/A3Bb5Xy89Mza5X9/446xg
zbair8+2sIUe6GoVvDAcsTDkEls7bOCiFzr9UjoJFIfOAZ5HZpyfXgeOElrA8/iz
8ZtSzgNN3wNM55bOwaTJ6sgFJztgW/nq/gWEmDpb9kPTZvQoan+fAUbBtPSun9g0
KSyDNZksQKr1CiORGoNC7kz1zWjNeUpPU8YtqXzszrybwWTjuhTS+cJ2UT1CR1JW
CHyjQ9gM2mzR7TT+IVNCIviOohv+TzxvN5AyIWvVXpq0v5bujotko5H4BwcX2Ocz
vpxkdYhoNQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFCm7VNMVbe+hUggX7UIO7Exy
JBfFMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy
ZjA5N2YvNC9BUzQwMDA2OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEADJthAMEADJtozANBgkqhkiG9w0B
AQsFAAOCAQEApoz/gpyO4P2yiiJH/3fqjlCaB+HQq6eFSj2MK8JLWQv04q/XPW2q
+ySyEKaZSrhlMepoT+Mjk6qZhHnb+rqgEpAl/fPpeAmc04XKN0uyMWWylL8DS9iz
tAm+oxMvMXx1WhoLIQzashInmKbGsCcvbnP6giHirqO+GGVKpcA76+lkILxD97rA
4kvX0dAFyhcBq/I7APJxBiNagXF9NtZMjtzpvkrfpD6Kcldr4OQrPdW6n3/KF9DG
MKVeIqqlrenDyrQQl35vCb8Nz4TBWKosNJQJ/ocwvqk2e/WB8cuzh5JjgRl42I54
iUi6qmKcnyleuM9SA3SvDXpfGnJm2mYwwA==
-----END CERTIFICATE-----
Generated at Mon May 5 05:06:03 2025 by rpki-client