Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399157.roa
File: AS399157.roa (raw, json)
Hash identifier: gdD6gJcRDu91PaRlmwzpFN7iBz9W3gvXmv9Pi8xKwls=
Subject key identifier: AA:BE:E0:2C:5A:91:B2:32:E8:25:A7:CE:BB:F9:3B:63:A8:4D:AF:AD
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 2E8AC4A31A22F1E73F1117D61A9B12CDCD3EC8B0
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399157.roa
Signing time: Sat 07 Dec 2024 11:13:25 +0000
ROA not before: Sat 07 Dec 2024 11:08:25 +0000
ROA not after: Sat 06 Dec 2025 11:13:25 +0000
asID: 399157
IP address blocks: 2607:f740:17:38::/64 maxlen: 64
2607:f740:17:39::/64 maxlen: 64
2607:f740:17:40::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:8a:c4:a3:1a:22:f1:e7:3f:11:17:d6:1a:9b:12:cd:cd:3e:c8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Dec 7 11:08:25 2024 GMT
Not After : Dec 6 11:13:25 2025 GMT
Subject: CN=AABEE02C5A91B232E825A7CEBBF93B63A84DAFAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:58:d7:0c:27:0f:6a:28:22:fa:7d:b5:6b:
f8:1b:4b:60:04:ad:4c:37:2e:46:ee:e7:33:a8:82:
91:e6:fa:1b:fe:6a:57:55:3d:f6:7b:13:d2:f9:3c:
97:02:d7:05:a6:88:df:9e:ad:9f:2a:91:e2:90:09:
66:24:d6:06:3d:bc:cc:c5:27:e9:24:a7:1c:2e:d8:
71:66:5f:82:0d:37:4f:29:e1:fb:83:53:2d:48:98:
d9:b9:de:4e:27:b6:9c:c8:29:e5:52:75:4e:9d:30:
75:54:23:e2:bc:c5:f9:a7:bd:1a:55:ef:e7:37:61:
76:f9:d8:5d:c2:96:91:ae:0b:d3:2f:95:ce:15:54:
2b:ee:cc:fa:4c:ec:09:21:88:7e:1f:70:bf:ad:1f:
c3:cc:25:db:8e:2a:0a:2c:b2:1e:15:69:1c:30:9a:
fe:76:92:a1:e1:7f:fa:aa:82:03:87:55:67:ef:bf:
22:7b:cd:40:be:aa:8c:dd:53:cd:ce:a2:2c:de:c9:
67:e4:b0:80:4e:ee:00:31:ff:01:29:c4:79:22:00:
59:74:39:ac:3c:8f:27:34:82:1c:87:76:d2:cb:d0:
64:25:3e:fd:23:74:eb:73:0c:35:a7:b4:e8:ac:8e:
41:60:8d:0e:00:2c:70:27:eb:f6:44:21:25:5c:08:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BE:E0:2C:5A:91:B2:32:E8:25:A7:CE:BB:F9:3B:63:A8:4D:AF:AD
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399157.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2607:f740:17:38::/63
2607:f740:17:40::/64
Signature Algorithm: sha256WithRSAEncryption
1e:92:c6:75:57:da:a2:d6:04:d3:b8:12:f4:44:6c:22:ee:e0:
a5:35:56:44:06:53:b4:f0:f0:e6:c2:86:c7:59:21:d4:be:65:
96:17:c8:46:83:30:9d:e2:6b:71:62:1f:99:89:46:f8:1f:63:
fe:97:47:83:06:68:a6:5f:1c:36:95:7e:62:41:7e:0d:d6:1a:
ee:ce:f7:66:fa:94:09:b3:7c:f8:e5:08:4b:bf:25:9a:48:f2:
d4:70:df:0d:1c:e4:1c:a9:61:55:0c:a3:de:a6:67:c2:c8:85:
1b:95:3d:62:19:e6:cd:38:33:7e:75:a5:49:db:fd:31:d2:69:
a9:25:49:bc:af:9d:31:fa:b5:0c:59:95:38:3c:fa:a1:87:a5:
f4:53:54:8d:61:3f:b4:30:a9:2e:2a:ed:65:e6:9c:4a:fa:83:
ff:54:0b:e0:d9:d5:88:24:f6:c2:e7:33:3e:28:18:21:d3:c3:
10:52:bc:64:62:b4:1b:2e:37:3a:48:8a:f1:9a:fa:0d:97:00:
74:ef:fd:51:66:35:b5:1a:ca:ef:44:fd:ad:43:45:91:70:46:
10:d6:9e:6d:27:b5:b0:d2:d4:6d:41:19:05:69:f3:de:17:f8:
02:50:af:ac:48:84:4e:e7:4f:93:32:74:0d:ae:32:21:54:36:
69:7a:94:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:10:59 2025 by rpki-client