Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: NJ1Je8qZ1tkzGF1PN7DynK26wU+sGyE6bGe7eaB++XI=
Subject key identifier: CC:AD:11:1D:A3:22:6C:76:3B:62:B7:7F:24:E7:14:10:A1:8C:F4:9B
Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial: 7DDDDA99E10FD84D1E7565E49A0529FB62F59983
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS3257.roa
Signing time: Fri 15 Nov 2024 18:38:32 +0000
ROA not before: Fri 15 Nov 2024 18:33:32 +0000
ROA not after: Fri 14 Nov 2025 18:38:32 +0000
asID: 3257
IP address blocks: 66.225.230.0/24 maxlen: 24
205.234.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:dd:da:99:e1:0f:d8:4d:1e:75:65:e4:9a:05:29:fb:62:f5:99:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Validity
Not Before: Nov 15 18:33:32 2024 GMT
Not After : Nov 14 18:38:32 2025 GMT
Subject: CN=CCAD111DA3226C763B62B77F24E71410A18CF49B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:12:f0:9f:60:76:95:c4:d0:d8:5d:7d:d4:
cf:26:41:18:91:db:96:44:3c:4a:c9:89:58:a5:33:
5f:22:5d:ac:aa:e7:78:04:09:fe:5b:63:ba:7f:0f:
32:c9:28:f5:4b:13:cd:6f:54:ec:20:ca:be:3c:d4:
f4:0f:55:d0:04:d1:74:0f:eb:db:f2:14:60:00:ed:
1b:0e:fd:68:a1:81:b3:e4:fb:40:f1:d4:54:0d:87:
61:2b:b0:4c:b4:7d:48:65:8a:d4:84:06:66:65:23:
16:89:9f:66:51:29:ff:b5:d2:ab:13:2d:ee:2d:50:
7d:46:7c:be:98:95:05:8c:7f:dd:3e:2c:dc:c8:38:
97:46:c4:f5:e8:df:56:3e:3d:77:22:2b:56:66:ed:
5e:a6:f9:db:c3:a7:e3:01:cc:d0:0d:ad:24:d0:08:
4b:6b:34:98:08:cf:af:ff:8a:4d:f6:62:07:26:22:
60:0d:b4:76:67:46:c0:df:48:db:e5:e6:e5:12:33:
7e:37:b8:26:73:8b:3b:da:34:dc:f5:01:3c:07:cd:
bc:2d:0c:50:34:71:a0:85:3c:0d:7c:73:a1:36:8f:
2c:06:f3:99:1c:06:36:9a:30:60:4c:c0:04:d0:cb:
17:8e:21:ce:63:64:4b:b6:d6:08:db:2d:9f:07:88:
ae:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AD:11:1D:A3:22:6C:76:3B:62:B7:7F:24:E7:14:10:A1:8C:F4:9B
X509v3 Authority Key Identifier:
keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.230.0/24
205.234.145.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a9:8d:fc:54:ab:1d:d4:9c:cf:ef:d2:b2:af:94:ff:1a:09:
0a:74:59:ee:a9:ef:ce:ab:1c:f4:f5:8f:69:6a:61:61:7d:b2:
fd:f2:cc:80:07:49:5c:2e:53:90:ac:a8:cd:2a:90:49:bd:af:
1f:5f:35:dc:5a:f2:27:55:3f:ed:c7:8d:04:d1:9c:87:72:e6:
cd:6e:9c:42:8c:9e:61:17:90:d3:61:0d:59:ee:91:13:ef:34:
42:ea:0d:f2:b8:59:8a:3d:aa:e9:0a:44:6b:9a:1a:6a:5d:27:
c1:b6:f5:a7:4f:4f:f0:bd:21:75:1f:02:b2:3f:36:94:4e:eb:
14:9b:43:b8:71:b4:4e:92:b5:a5:68:30:71:7c:8b:d9:f4:0f:
42:65:2d:b0:d5:6a:12:cc:80:28:c6:53:b3:63:78:8f:40:ea:
85:04:15:22:fc:27:ac:f8:57:bb:1b:11:ce:f5:cf:fc:8d:49:
06:01:b2:52:0b:bf:99:57:47:d4:54:29:55:16:c5:78:c2:80:
20:9f:fe:8e:06:bb:d8:e4:a0:19:24:81:ac:86:c1:26:57:f8:
c5:a0:5a:98:41:94:c3:45:c6:2a:4c:23:83:26:0f:29:a4:47:
cf:8c:be:a6:59:8c:4b:cf:15:ea:dd:a7:28:cd:dd:94:c0:a4:
b2:c4:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:05 2025 by rpki-client