Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: FusvQakGObuimbaOS7jPYlaBcMDsz5S26EWJ9BvJULE=
Subject key identifier: C3:E4:C6:58:14:D9:B5:1C:69:86:D7:90:AB:DC:FF:E8:E2:C3:AA:F6
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 15F8FF0FCDFE0803DC9327AA924C8964CDC4EF2A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
Signing time: Wed 04 Dec 2024 13:28:54 +0000
ROA not before: Wed 04 Dec 2024 13:23:54 +0000
ROA not after: Wed 03 Dec 2025 13:28:54 +0000
asID: 834
IP address blocks: 190.92.166.0/23 maxlen: 24
198.23.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f8:ff:0f:cd:fe:08:03:dc:93:27:aa:92:4c:89:64:cd:c4:ef:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Dec 4 13:23:54 2024 GMT
Not After : Dec 3 13:28:54 2025 GMT
Subject: CN=C3E4C65814D9B51C6986D790ABDCFFE8E2C3AAF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:ea:4b:9f:b2:37:84:a7:d7:00:a7:a9:86:
28:01:f1:32:0b:f5:a0:7d:4b:84:07:ca:05:4b:84:
e3:44:69:cc:e5:c6:38:93:75:53:b7:1b:03:c0:dd:
81:1a:76:c8:b3:85:d2:c2:bb:73:07:f0:ab:de:10:
fe:bd:42:3f:2f:12:75:3c:f9:60:32:37:44:ba:98:
6d:c9:62:f7:46:ab:c5:cb:ca:4a:71:ce:dc:fe:62:
f3:66:7a:06:be:5a:8a:78:be:be:55:d6:4e:98:5f:
e6:2c:2e:73:6a:b5:df:0b:9d:13:9a:2c:fe:21:a3:
41:54:e7:10:1b:47:88:91:b5:e4:9c:3e:f1:ff:92:
c8:ac:b1:7b:95:cf:d4:1d:24:f8:d9:3f:f6:8d:50:
80:ec:e6:e5:46:5d:96:c6:2a:69:8e:4d:99:02:db:
7f:ed:8d:fc:c9:b8:70:c9:14:73:e5:0e:d6:da:b6:
3c:9a:84:83:4c:6a:5c:b4:8d:cd:04:9b:2b:f2:76:
f9:60:e9:17:73:e1:b4:37:14:b8:ca:5a:40:c6:06:
66:bd:d7:22:1b:82:b0:9b:33:55:76:9a:e4:4e:c2:
6f:25:86:4a:72:d6:72:55:57:9c:50:2a:dc:08:a5:
06:51:7f:ba:b4:27:5f:6c:40:31:aa:dd:0d:da:75:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:C6:58:14:D9:B5:1C:69:86:D7:90:AB:DC:FF:E8:E2:C3:AA:F6
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.92.166.0/23
198.23.186.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:d6:af:e2:34:2f:4b:6b:82:43:6e:7e:71:08:8d:aa:fb:23:
f5:5b:d7:8f:b9:b5:9c:67:5f:93:ef:25:e9:cd:a7:4d:07:46:
98:8e:8d:9a:2b:2b:25:d4:f4:0c:86:d8:1e:c2:24:8c:15:e2:
12:ec:62:3d:4e:cb:18:22:63:e0:2f:9b:23:f7:1e:2b:52:a6:
b7:ed:bf:d9:ee:13:00:aa:1a:1f:12:b0:f9:b1:e8:b9:fe:d4:
03:4e:eb:9a:e4:de:fa:fe:e0:81:9e:6d:c8:e4:9c:5f:d6:68:
62:df:a4:b0:3d:01:b7:76:3d:21:2c:a4:c9:c3:a4:be:26:6b:
66:47:1c:62:2c:dc:22:50:57:3a:55:d0:8d:6d:29:36:75:7e:
bd:fe:66:f6:29:be:10:ad:ba:2d:8a:41:65:0f:fd:b8:94:87:
38:31:2f:c1:9b:63:8a:bf:00:ee:c3:52:29:03:cb:c2:98:1f:
b6:44:3a:4f:9e:30:be:4f:f2:7b:de:55:9b:a1:53:12:20:c7:
f0:14:9c:d4:dd:6c:b1:ed:ec:89:09:ce:8b:0f:f8:b5:31:d7:
1a:7e:42:c4:8a:92:cd:0a:7f:76:e3:58:c0:ab:f5:ff:76:da:
e4:ee:c1:ca:e9:cc:22:b7:7b:91:27:88:c4:df:52:d0:25:00:
0c:c6:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:42 2025 by rpki-client