Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e20323132323338.roa
File: 34352e34322e34302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: Sq0vdHyRQTQ2yuZEKC39casNhQMVAvvN8Qul0Kru2l0=
Subject key identifier: 81:9C:EB:00:39:97:64:7F:58:F2:DA:00:BB:54:4A:C9:AA:2F:65:56
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 3E3D9C85415244DCFE291A2F637522C781F25307
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 01 Apr 2024 19:16:17 +0000
ROA not before: Mon 01 Apr 2024 19:11:17 +0000
ROA not after: Mon 31 Mar 2025 19:16:17 +0000
asID: 212238
IP address blocks: 45.42.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:3d:9c:85:41:52:44:dc:fe:29:1a:2f:63:75:22:c7:81:f2:53:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: Apr 1 19:11:17 2024 GMT
Not After : Mar 31 19:16:17 2025 GMT
Subject: CN=819CEB003997647F58F2DA00BB544AC9AA2F6556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:4f:c1:1e:79:c2:0d:d2:23:c9:32:63:4d:
bc:c0:73:f4:4b:cb:25:cc:36:9f:e7:51:e3:67:d1:
1e:3f:11:14:fd:0c:7d:88:6a:8f:ab:40:a4:5b:03:
80:0e:3c:3c:b4:09:eb:1f:44:e4:29:b2:be:f2:91:
d6:2d:34:e4:78:2b:48:e0:88:3f:13:08:01:78:4d:
ae:72:77:95:92:f2:69:f5:42:10:c5:a5:09:74:b3:
d6:fe:2b:8e:00:f9:f2:2d:07:4b:43:f8:dd:d5:07:
23:1e:bd:fe:56:8d:5d:81:41:8a:08:30:4a:27:1b:
7d:11:1a:81:03:30:5b:11:7b:36:42:fc:79:8f:fe:
df:77:06:28:b4:9d:de:e7:3e:1e:15:41:81:75:3c:
85:fe:54:03:42:a2:81:ae:1f:80:d1:b8:f0:0d:b9:
ad:15:ff:c6:45:2e:39:8f:a9:b1:45:8f:36:75:bd:
4f:d6:36:6d:35:13:99:70:28:ea:5f:fa:21:0d:39:
1d:ef:62:8a:67:b5:1d:bb:37:e9:22:7e:d0:8d:2a:
67:ff:8c:c6:9a:4e:09:6b:ca:54:54:60:33:19:92:
a1:46:7e:4f:43:68:4c:51:8e:04:14:19:da:a0:f5:
3f:33:d3:e5:20:d5:dd:bf:30:0b:c8:70:b7:2b:05:
56:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:EB:00:39:97:64:7F:58:F2:DA:00:BB:54:4A:C9:AA:2F:65:56
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.40.0/24
Signature Algorithm: sha256WithRSAEncryption
29:95:6d:e0:16:e7:c5:8d:dd:22:aa:e5:0c:8e:0f:3a:b0:2c:
28:52:17:7c:7b:05:3a:8c:66:c9:92:0b:5b:20:db:2a:28:ac:
88:bc:48:23:86:b1:9c:7b:01:64:46:08:e3:df:eb:fa:90:26:
6a:96:96:f1:02:9d:6c:da:94:f4:56:6e:f4:7d:03:3e:1f:03:
c9:90:be:33:e2:bc:3f:f9:87:3a:80:fa:df:63:f3:99:ee:19:
b8:0b:4f:6e:17:8e:9a:27:c7:7e:9b:75:9f:04:b1:a3:34:5d:
c7:00:13:fe:5d:e7:1e:1f:6f:09:3f:59:b8:17:5f:1f:21:b2:
5d:a1:9f:c0:73:a9:d9:db:84:31:09:50:01:0c:4a:a6:0b:43:
dc:62:53:9c:0b:92:d7:a1:28:bc:be:82:55:99:2b:ba:16:03:
5e:25:45:e7:dc:87:4a:d2:bd:ec:e3:1b:7d:fb:e7:aa:9d:1a:
99:61:5d:5f:a7:47:55:db:53:c0:a6:44:c8:36:72:75:57:a5:
80:46:03:f3:d7:17:ec:d5:85:66:1b:47:db:e2:f7:85:eb:ce:
e2:41:80:bd:cc:60:7d:dd:46:14:8d:35:db:b4:89:20:fb:b7:
08:a4:97:e5:b4:71:9d:f5:82:97:96:3f:5b:f1:6b:1a:a1:03:
97:b1:c6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:02:19 2025 by rpki-client