Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: fqe9dzof6mcOM1/QryQMc1rYcX6db5GFko+ouGi1q8g=
Subject key identifier: D4:40:FF:6B:26:AF:1C:AB:74:D7:D2:D4:B0:8D:75:77:17:5B:D5:69
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 2F8DD72E3DBFA4580432C0F9856F64FA582D9DF1
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
Signing time: Mon 23 Sep 2024 07:22:39 +0000
ROA not before: Mon 23 Sep 2024 07:17:39 +0000
ROA not after: Mon 22 Sep 2025 07:22:39 +0000
asID: 20473
IP address blocks: 192.228.119.0/24 maxlen: 24
192.228.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:8d:d7:2e:3d:bf:a4:58:04:32:c0:f9:85:6f:64:fa:58:2d:9d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Sep 23 07:17:39 2024 GMT
Not After : Sep 22 07:22:39 2025 GMT
Subject: CN=D440FF6B26AF1CAB74D7D2D4B08D7577175BD569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:04:4e:76:ac:ef:b9:ef:a4:0c:04:ac:f5:
18:bc:6a:3e:47:b7:0c:cd:c6:08:a1:10:f7:44:15:
56:c0:24:12:c0:a1:51:7e:23:39:a0:c3:38:38:ef:
77:c5:62:5b:3d:ec:94:37:7e:c7:da:0c:f1:f4:73:
a9:c3:59:b7:98:78:7b:c9:34:bc:a7:eb:40:00:c8:
31:ff:b4:ff:cf:4a:4f:d7:0f:15:11:60:72:e8:7f:
e1:8c:01:0b:12:56:cc:10:8b:d4:7d:c8:8c:17:ec:
58:07:34:4f:e8:83:8b:8e:c6:8b:3c:ff:75:1b:d8:
04:a7:09:e3:2d:81:f1:01:44:81:82:d4:c6:f2:d4:
e8:f0:ca:47:3c:8f:a4:e5:9a:2d:30:6f:9c:e2:d8:
de:0a:7f:a4:c8:78:2a:ed:fd:9b:aa:95:12:8d:49:
58:e7:8c:87:d1:7b:66:ac:64:3a:d8:4d:c8:8a:3e:
4c:e2:22:9c:9a:e4:91:24:2a:b0:ec:b6:23:2c:4a:
32:e7:7f:f8:41:d7:9c:6f:ae:86:a4:88:cc:f7:de:
0f:19:0c:b2:07:f7:71:0b:e4:2e:2e:c1:53:c0:0a:
ee:fa:d8:31:c7:1a:62:98:db:9b:a1:1b:00:b9:06:
7b:36:f1:b4:67:4b:3b:a8:f5:91:e7:a5:bb:61:13:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:40:FF:6B:26:AF:1C:AB:74:D7:D2:D4:B0:8D:75:77:17:5B:D5:69
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.228.119.0/24
192.228.122.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:19:0f:5c:10:c9:2c:a7:da:58:fc:65:3d:9c:9b:17:54:82:
05:19:4e:4d:ed:bf:cd:a8:1d:94:1c:1d:75:e7:e9:d8:e4:9a:
00:55:43:b6:04:3d:ba:d8:7c:5b:9e:d7:f0:29:c8:d6:37:a6:
6d:24:c4:b2:38:d0:1f:be:da:33:46:fd:41:c9:bb:6a:55:44:
05:fc:2e:62:f6:66:0e:f2:04:ab:9c:66:c3:02:76:1b:c5:fa:
91:41:64:b3:47:ea:9a:db:d5:65:ef:8d:fc:30:6f:b1:8d:49:
7b:e9:ee:5e:f9:07:7d:a9:50:f9:83:f3:dc:f4:da:fd:39:b7:
6a:70:0a:4b:0a:60:8c:bb:14:fc:80:48:ba:cb:fe:34:db:6f:
3b:27:92:70:17:9f:19:1d:24:8b:93:43:6a:e1:13:6a:90:6c:
fb:6f:ee:29:a3:13:3b:de:61:d0:1e:2c:cd:21:77:38:36:4d:
1e:dd:71:9b:94:1a:d7:08:60:73:1d:59:a4:d7:6d:2f:3d:49:
34:81:ad:35:47:06:9b:6d:c7:60:f1:c5:44:78:2e:a0:de:80:
e2:ed:b8:52:6c:f7:36:00:dd:ae:44:50:08:1f:36:48:7c:96:
ba:f1:50:6a:e8:fc:95:d1:de:01:a6:3b:6f:eb:42:23:c4:ba:
b1:c1:f2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:50:09 2025 by rpki-client