Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa
File: AS64089.roa (raw, json)
Hash identifier: FO0AxrubxRls8/mimzyThA2KhLPc90YM3TyMgs1F4OE=
Subject key identifier: 69:87:80:B3:78:5B:42:89:3E:6D:4F:13:A0:40:E8:FA:AB:C2:ED:6F
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 34CBCE2462A8C1A0535F7296E2C505850FCDCA97
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa
Signing time: Fri 29 Nov 2024 13:13:24 +0000
ROA not before: Fri 29 Nov 2024 13:08:24 +0000
ROA not after: Fri 28 Nov 2025 13:13:24 +0000
asID: 64089
IP address blocks: 45.54.28.0/24 maxlen: 24
45.54.84.0/24 maxlen: 24
45.54.85.0/24 maxlen: 24
2607:f740:e005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:cb:ce:24:62:a8:c1:a0:53:5f:72:96:e2:c5:05:85:0f:cd:ca:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Nov 29 13:08:24 2024 GMT
Not After : Nov 28 13:13:24 2025 GMT
Subject: CN=698780B3785B42893E6D4F13A040E8FAABC2ED6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:cb:59:24:79:6e:ff:26:b6:b7:f0:fa:f4:
8b:94:5e:86:14:92:9f:1d:5b:b3:c5:28:d5:29:2b:
d1:06:e4:1a:62:75:c3:41:95:39:e8:b4:84:a9:a6:
72:55:0d:13:00:aa:f2:dc:35:c9:14:8d:5e:3a:8a:
29:fd:8b:c2:87:9f:7b:67:40:94:9f:51:e6:e2:92:
c9:80:b3:03:7a:2a:7b:76:9c:c2:ee:43:17:83:91:
3b:04:5b:76:d7:4c:6f:40:7c:b8:2d:83:91:a2:2f:
b8:63:aa:85:5f:9b:2d:f8:ad:29:bb:69:07:3b:ea:
7d:b7:a7:7c:77:a2:7b:ff:6f:47:91:bb:b3:c8:89:
83:45:e0:5b:1f:59:1a:2e:7f:56:59:12:41:5f:ba:
cd:57:e5:e1:3d:00:0b:61:8b:1c:38:7b:31:2a:7f:
5b:3d:06:ae:33:57:38:17:04:08:ce:9c:bd:a1:f0:
53:ff:2e:9c:9f:5f:1d:a1:27:10:0e:aa:cd:ce:43:
98:08:87:96:51:d7:8f:27:65:58:bb:9b:3f:86:b9:
6d:fb:69:19:37:06:fe:2d:0e:84:c3:8d:ff:22:8a:
66:3a:11:b9:d6:db:40:44:d8:04:b0:63:d8:1d:d0:
cb:f8:f9:15:a6:ea:b6:36:ed:f8:57:a8:a0:ca:3f:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:87:80:B3:78:5B:42:89:3E:6D:4F:13:A0:40:E8:FA:AB:C2:ED:6F
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS64089.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.54.28.0/24
45.54.84.0/23
IPv6:
2607:f740:e005::/48
Signature Algorithm: sha256WithRSAEncryption
53:0c:e3:bb:dc:a6:dd:f4:b6:69:72:cc:8e:8a:f5:1a:e8:8d:
56:75:42:78:bb:26:e5:64:b0:ba:0f:dc:dc:12:5c:3d:ad:b9:
6d:87:46:a6:93:68:3e:83:bf:d8:8d:24:40:7b:93:78:15:39:
23:74:e0:cd:93:2e:c0:46:f5:f8:56:53:2a:85:af:fb:ac:e4:
91:e8:45:a4:29:b4:f2:6f:50:91:c2:4f:2c:47:6e:b6:62:f2:
29:b5:51:49:99:7d:62:11:35:5a:bc:14:35:92:6a:25:89:9e:
03:b9:6c:7a:39:68:01:7b:96:d5:78:c8:88:85:0e:da:ee:6c:
d2:a7:3b:2d:cb:18:af:60:59:21:8c:5d:4a:b6:2a:cb:14:74:
d6:aa:55:c1:8a:85:67:95:f3:2b:a4:a6:22:32:27:9e:d6:8f:
64:41:45:f9:a2:b6:2b:f1:6b:c1:ae:89:dc:6d:ed:a0:90:02:
79:75:a8:dd:df:aa:23:43:b9:a9:04:d3:01:71:6f:77:3e:6d:
f7:f3:47:1b:4f:9e:63:ce:a1:9e:15:6c:7c:19:2a:c8:36:e6:
5e:b4:7f:0e:a6:90:90:55:c8:47:31:8c:3b:34:ed:2e:5b:a8:
f0:a1:91:b8:e6:e6:76:d3:b8:e4:99:ab:b2:41:3c:86:a6:b6:
6f:06:ce:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:10:28 2025 by rpki-client