Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399167.roa
File: AS399167.roa (raw, json)
Hash identifier: 0l8dNfXivWdWRTnWGD8kzkBKdOCWeQktaJR09fxnRd0=
Subject key identifier: 80:B9:E7:78:58:D7:E9:B1:E3:21:9C:B7:F1:C4:A5:17:68:CB:B1:B9
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 46A8156DB10C8DB547B8F22DE8FAD6A8DC34F748
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399167.roa
Signing time: Sat 07 Dec 2024 13:13:28 +0000
ROA not before: Sat 07 Dec 2024 13:08:28 +0000
ROA not after: Sat 06 Dec 2025 13:13:28 +0000
asID: 399167
IP address blocks: 2607:f740:1:15::/64 maxlen: 64
2607:f740:1:16::/64 maxlen: 64
2607:f740:1:17::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a8:15:6d:b1:0c:8d:b5:47:b8:f2:2d:e8:fa:d6:a8:dc:34:f7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Dec 7 13:08:28 2024 GMT
Not After : Dec 6 13:13:28 2025 GMT
Subject: CN=80B9E77858D7E9B1E3219CB7F1C4A51768CBB1B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:ea:b0:2a:f3:f0:af:2f:8f:7b:a8:ac:51:
1a:0f:48:ba:37:2a:10:c5:0c:46:b1:64:e0:4e:df:
5f:c9:6a:a8:13:75:0f:fc:a3:ed:cd:f4:f8:ce:20:
5d:38:55:d0:9a:12:80:f8:ee:12:bd:57:97:7c:98:
2c:4a:e7:ff:1f:34:17:29:08:5b:99:cb:fd:7e:c1:
40:fd:e4:dc:ca:b3:5c:e2:cb:84:2e:d7:d4:c6:8b:
fc:a6:06:1b:b7:29:24:24:b1:b1:1e:87:38:a7:41:
df:e3:59:e9:b7:97:72:f3:ad:b6:37:66:c4:12:e2:
7f:ae:1a:2c:c8:1e:c3:ae:49:9d:13:56:46:a6:4e:
62:0e:58:d1:e3:09:80:e8:c0:54:1b:e5:41:d8:00:
3c:4f:74:2a:09:a7:3a:9e:e0:94:fa:c9:95:8c:8e:
21:3c:b7:e2:73:db:b4:f7:05:d3:78:cb:f0:92:51:
14:57:13:ab:5e:79:11:ae:bb:ce:bb:23:ef:3d:75:
f1:51:e7:82:ab:00:f3:89:b1:0a:2f:d3:a4:00:ac:
2e:80:c8:fa:28:1a:e5:36:5e:a8:ba:5f:ea:4d:51:
a1:f5:33:62:6f:46:be:cb:ba:9f:6e:35:ed:c8:cd:
c2:d1:01:1d:0b:65:79:aa:b0:aa:38:76:52:ec:b9:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B9:E7:78:58:D7:E9:B1:E3:21:9C:B7:F1:C4:A5:17:68:CB:B1:B9
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399167.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2607:f740:1:15::-2607:f740:1:17:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6a:c6:ae:14:a9:de:be:8d:7d:b8:79:b8:09:f8:24:4d:d5:e0:
9b:9b:1e:12:74:ca:d9:1f:1b:dd:b1:e3:4c:bf:90:6a:5a:47:
0d:02:0c:de:8d:15:3a:c4:94:5f:b2:58:44:b6:63:8b:9b:44:
bb:22:5d:b3:3d:50:c8:fd:a5:35:47:37:6e:5c:fa:69:28:81:
d3:f7:e5:a3:06:24:9e:2c:04:a0:86:b3:08:59:a7:80:2b:d4:
f8:e9:39:23:a5:b4:40:b1:8d:d0:d4:2e:fa:82:ef:34:bf:a0:
c1:77:73:95:ed:ad:1f:41:2b:f4:57:a6:d1:ae:0d:58:f8:1d:
51:d5:ad:08:30:29:c3:81:87:f6:6c:17:16:48:b5:91:9e:de:
c5:5f:17:10:42:06:8c:e8:6c:f6:d2:80:2e:14:31:e5:84:41:
c4:2d:0c:14:3f:90:fc:28:5a:cf:fb:44:11:1e:b1:51:48:dd:
a5:85:e4:18:b3:a4:5a:08:9e:12:18:0c:fe:9b:a4:4d:69:10:
66:3b:29:c7:10:12:7b:cc:e6:a0:d8:4b:6d:2b:42:38:00:93:
d6:d6:b1:04:a5:68:36:0f:63:d6:4f:dd:43:b3:c7:bf:31:70:
7d:34:4f:84:2b:e7:2c:a4:37:53:9f:16:de:8a:bb:5a:01:17:
b9:47:a0:fe
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIURqgVbbEMjbVHuPIt6PrWqNw090gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQxMjA3MTMwODI4WhcNMjUxMjA2MTMxMzI4
WjAzMTEwLwYDVQQDEyg4MEI5RTc3ODU4RDdFOUIxRTMyMTlDQjdGMUM0QTUxNzY4
Q0JCMUI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q3qsCrz8K8v
j3uorFEaD0i6NyoQxQxGsWTgTt9fyWqoE3UP/KPtzfT4ziBdOFXQmhKA+O4SvVeX
fJgsSuf/HzQXKQhbmcv9fsFA/eTcyrNc4suELtfUxov8pgYbtykkJLGxHoc4p0Hf
41npt5dy8622N2bEEuJ/rhosyB7DrkmdE1ZGpk5iDljR4wmA6MBUG+VB2AA8T3Qq
Cac6nuCU+smVjI4hPLfic9u09wXTeMvwklEUVxOrXnkRrrvOuyPvPXXxUeeCqwDz
ibEKL9OkAKwugMj6KBrlNl6oul/qTVGh9TNib0a+y7qfbjXtyM3C0QEdC2V5qrCq
OHZS7LlAGwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFIC553hY1+mx4yGct/HEpRdo
y7G5MB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw
ODRiODYvMC9BUzM5OTE2Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAIwGDAWAwkAJgf3QAABABUDCQMmB/dAAAEA
EDANBgkqhkiG9w0BAQsFAAOCAQEAasauFKnevo19uHm4CfgkTdXgm5seEnTK2R8b
3bHjTL+QalpHDQIM3o0VOsSUX7JYRLZji5tEuyJdsz1QyP2lNUc3blz6aSiB0/fl
owYkniwEoIazCFmngCvU+Ok5I6W0QLGN0NQu+oLvNL+gwXdzle2tH0Er9Fem0a4N
WPgdUdWtCDApw4GH9mwXFki1kZ7exV8XEEIGjOhs9tKALhQx5YRBxC0MFD+Q/Cha
z/tEER6xUUjdpYXkGLOkWgieEhgM/pukTWkQZjspxxASe8zmoNhLbStCOACT1tax
BKVoNg9j1k/dQ7PHvzFwfTRPhCvnLKQ3U58W3oq7WgEXuUeg/g==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:01:04 2025 by rpki-client