Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400866.roa
File: AS400866.roa (raw, json)
Hash identifier: qO1HxX3T1f62n3EAOIY2xCfDovb50PjuHKRNWUc9c9Y=
Subject key identifier: FA:CC:75:9A:92:C7:2D:82:9A:E3:4C:45:6A:65:41:1E:4D:2E:B4:76
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 2FAEBB2706EC758C68A6E34B1259B377B0114D99
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400866.roa
Signing time: Thu 19 Sep 2024 00:01:57 +0000
ROA not before: Wed 18 Sep 2024 23:56:57 +0000
ROA not after: Thu 18 Sep 2025 00:01:57 +0000
asID: 400866
IP address blocks: 23.95.177.0/24 maxlen: 24
104.168.31.0/24 maxlen: 24
107.172.149.0/24 maxlen: 24
198.46.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ae:bb:27:06:ec:75:8c:68:a6:e3:4b:12:59:b3:77:b0:11:4d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Sep 18 23:56:57 2024 GMT
Not After : Sep 18 00:01:57 2025 GMT
Subject: CN=FACC759A92C72D829AE34C456A65411E4D2EB476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:16:4d:d8:14:dd:0d:42:b0:f1:d0:8f:58:
e1:6f:cd:94:7e:ac:bb:f9:02:ee:b2:05:19:56:37:
4d:a1:94:b9:74:e5:54:75:d9:d8:a7:cd:c9:a4:48:
11:8e:f7:2a:60:44:00:f7:c7:34:34:07:bc:2b:20:
0f:9a:5a:02:ad:25:57:7c:8d:35:fc:d7:48:05:55:
d6:e3:76:ca:c5:71:83:6c:7a:ac:77:cd:5c:51:86:
4a:82:de:6d:9f:44:88:f8:81:0d:62:1a:40:e3:11:
41:05:71:2c:14:ac:ce:14:ac:d0:19:06:cb:2c:82:
5a:96:9a:c0:80:29:01:df:a6:18:9c:ad:7d:22:0a:
ec:64:58:6a:f7:0d:56:c5:2a:e4:ed:23:e3:de:ab:
0b:2c:1b:1b:39:68:2c:6f:03:c5:ce:08:02:a1:19:
9e:55:72:89:02:a6:d5:c7:8f:c0:30:13:1f:62:79:
3f:bd:87:e5:34:04:df:f5:9e:b9:eb:33:b6:07:fe:
cd:c2:c6:cd:14:26:5a:d8:ca:e1:63:84:fd:1f:86:
fe:96:12:b8:d9:6a:bb:ea:f0:a0:09:f0:dc:77:64:
fb:e5:df:13:a5:6b:bf:64:f5:0b:a3:ce:18:1f:55:
70:65:ec:90:1e:10:11:98:78:02:87:6d:45:d6:cc:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CC:75:9A:92:C7:2D:82:9A:E3:4C:45:6A:65:41:1E:4D:2E:B4:76
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.95.177.0/24
104.168.31.0/24
107.172.149.0/24
198.46.247.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:bb:a6:9e:74:f0:61:9d:7f:38:3a:24:d8:95:d2:5d:80:d7:
c1:e2:0e:7f:41:0e:9c:06:a1:3a:86:98:43:08:b1:15:9f:a3:
ee:72:e0:7d:04:18:1d:62:05:57:53:89:3c:39:ea:15:75:42:
ed:66:55:5f:84:73:e4:a7:3c:b8:5d:ed:5f:7e:00:1b:27:2e:
8a:35:02:6c:f8:97:74:9d:06:86:62:63:a5:18:d1:33:33:84:
0f:3f:05:ee:fe:af:35:d0:d6:99:67:a4:f0:14:0e:b3:33:59:
17:14:2e:af:1f:f5:9f:19:f5:c4:77:9f:fc:fe:3c:79:f1:15:
26:03:98:85:14:3f:99:58:c3:87:85:03:fe:46:da:db:b9:f7:
fd:05:2c:7d:66:e6:39:56:6c:c3:7c:a5:b2:41:d1:16:0f:52:
58:76:2e:53:32:af:0e:ee:1c:eb:3a:41:39:ee:5c:52:34:a0:
0f:bc:bb:68:6e:22:f8:f5:80:4c:ab:9d:52:8b:2d:99:87:7f:
78:1e:d3:ac:1c:fa:39:d8:0d:ce:d6:ec:6a:f4:58:b8:01:41:
23:db:ee:5f:6a:40:dd:c1:92:0f:9e:31:11:ca:12:1f:75:66:
d5:0f:37:90:31:f9:37:95:19:18:cf:9c:db:0e:98:cf:b8:ff:
80:ac:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:03 2025 by rpki-client