Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399162.roa
File: AS399162.roa (raw, json)
Hash identifier: 8bMxzaxdG+66a3o8MNmxvO/qworsk/wFhNwH0VgnDCc=
Subject key identifier: 3B:67:95:49:1F:6C:C1:C6:02:5D:B9:A1:63:4A:EE:09:5A:91:E0:80
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 66AE9AEE809F19955402AF975B052844214D51E1
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399162.roa
Signing time: Sat 07 Dec 2024 12:13:26 +0000
ROA not before: Sat 07 Dec 2024 12:08:26 +0000
ROA not after: Sat 06 Dec 2025 12:13:26 +0000
asID: 399162
IP address blocks: 2607:f740:10:22::/64 maxlen: 64
2607:f740:10:23::/64 maxlen: 64
2607:f740:10:24::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ae:9a:ee:80:9f:19:95:54:02:af:97:5b:05:28:44:21:4d:51:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Dec 7 12:08:26 2024 GMT
Not After : Dec 6 12:13:26 2025 GMT
Subject: CN=3B6795491F6CC1C6025DB9A1634AEE095A91E080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:65:c3:c4:de:03:42:91:21:65:10:3f:f9:
17:23:35:0e:9b:53:6f:a1:a9:f6:72:0b:32:11:fc:
15:de:70:de:88:7f:80:dd:24:55:09:18:98:88:fa:
b9:8b:46:e0:9f:28:0f:3c:7d:4b:79:7e:bd:1f:d1:
5a:b1:46:e6:de:e6:e7:62:1b:68:58:a0:ea:4e:8d:
b9:1a:dd:5c:73:55:d7:0a:7b:8a:ea:18:8a:74:d2:
b0:4a:f1:18:45:82:1d:88:cd:bd:5f:c5:64:eb:84:
ef:4e:eb:5c:54:c9:e7:bc:9a:fd:32:ad:b4:37:7e:
68:0f:4d:e6:27:98:e9:5b:38:9a:94:bb:9d:29:d3:
6e:63:07:0a:f4:a6:c5:a7:45:b6:8b:6a:24:1d:e5:
22:bf:88:80:04:58:e6:31:ff:b6:c2:c8:ad:b6:1b:
32:3d:05:e2:8c:4d:42:73:14:2c:d3:ba:cc:d1:6d:
b0:7c:26:47:87:b9:39:e9:1f:bb:a3:56:b0:da:e5:
72:02:4e:ab:2e:f9:80:a8:3e:48:c9:de:0b:dd:ff:
1f:11:47:e5:ce:95:98:2d:68:06:9f:bb:53:4a:e1:
72:ed:ff:ea:c0:ec:09:b4:fd:46:df:4a:9b:e4:de:
37:00:37:f3:d4:eb:0d:9e:a9:99:0b:20:b4:d8:4f:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:67:95:49:1F:6C:C1:C6:02:5D:B9:A1:63:4A:EE:09:5A:91:E0:80
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399162.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2607:f740:10:22::-2607:f740:10:24:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
69:0c:dc:52:1f:17:66:b1:57:1a:5f:7d:b1:47:b2:d0:29:1a:
21:03:c6:85:4a:17:d3:78:83:81:24:16:57:2e:66:6d:00:a3:
7a:64:ab:44:83:39:ea:94:52:47:50:1e:de:53:db:b0:93:ec:
fe:31:8d:7b:fc:57:bb:17:fa:ff:5d:24:7d:a5:c0:5b:4f:df:
9f:cc:c4:a7:b8:39:13:17:16:02:93:47:16:4a:cc:80:c7:c4:
2c:2a:9a:fb:4c:8c:5e:7f:7c:dc:43:84:52:70:90:81:c4:01:
1b:86:1d:11:38:1f:48:6e:21:2a:e8:bb:3f:78:2f:0c:a3:c8:
66:87:dd:f7:3f:0a:54:fb:da:cd:e8:92:49:16:81:d2:17:f8:
0a:47:6e:93:4d:cf:9a:5b:54:7b:2d:0f:be:1a:99:6f:ab:3f:
74:46:d1:cc:f0:8f:1a:ff:15:89:de:65:90:85:11:d0:35:e2:
8c:81:31:57:7a:c9:ac:c1:a8:5a:65:d7:c7:e0:6f:01:1d:bb:
c6:78:ee:22:21:bf:18:83:92:6c:50:55:72:1d:05:92:d9:77:
1d:90:5d:2f:df:99:09:fd:15:e4:36:16:23:d8:94:d6:98:ad:
9b:f4:c7:27:24:bc:d2:d9:5f:29:e8:59:0d:ec:92:2a:89:1a:
62:64:eb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:27:57 2025 by rpki-client