Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS11427.roa
File: AS11427.roa (raw, json)
Hash identifier: Ud3tn1yurkcPth4sKZrxlxk8LIAFPXkLaaiCAcvBTyI=
Subject key identifier: E1:77:84:7D:97:1D:FB:78:C2:5C:C1:42:4B:6E:F5:2D:FF:2D:81:E5
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 6FBFF907A69B26E9D036DBDFF8C3EC6B86512B5B
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS11427.roa
Signing time: Mon 24 Feb 2025 11:48:26 +0000
ROA not before: Mon 24 Feb 2025 11:43:26 +0000
ROA not after: Mon 23 Feb 2026 11:48:26 +0000
asID: 11427
IP address blocks: 140.99.45.0/24 maxlen: 24
140.99.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:bf:f9:07:a6:9b:26:e9:d0:36:db:df:f8:c3:ec:6b:86:51:2b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Feb 24 11:43:26 2025 GMT
Not After : Feb 23 11:48:26 2026 GMT
Subject: CN=E177847D971DFB78C25CC1424B6EF52DFF2D81E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:ce:45:1b:03:b1:cd:23:4f:13:f7:22:03:
1b:b1:84:90:e4:9e:d5:54:e1:1c:3d:3c:53:56:fa:
ab:7c:50:c7:a4:3d:7b:a2:a5:f0:af:0d:85:4f:41:
21:6b:20:9e:c9:ee:f3:a8:5f:03:d9:e2:2b:10:44:
c3:23:31:bc:a1:1f:85:88:81:06:e9:c3:c2:1e:70:
26:f1:b5:01:23:ac:87:45:a5:3f:95:68:64:a6:d0:
6c:f2:f4:05:72:db:ee:9d:c1:e3:87:02:3a:25:a4:
9c:16:c5:98:b9:9a:19:54:d6:d6:2c:3e:bd:66:47:
c7:2d:0d:b3:e9:5f:f2:33:21:04:c8:7f:09:54:11:
42:8a:79:84:ff:94:5a:c8:55:d1:9e:fc:c3:01:32:
f0:aa:b1:f2:55:a0:93:00:0a:08:3c:1f:da:0e:33:
e8:79:fc:2d:43:42:98:01:9b:62:4b:7a:f7:01:a3:
d5:dc:d5:4c:c1:53:96:07:2d:9e:2d:da:66:61:f8:
a5:51:fb:57:b7:06:90:58:60:7a:83:02:89:eb:7c:
d0:97:b2:35:16:98:d9:cf:64:38:5e:1e:1f:7e:61:
a5:b4:d6:0f:93:c8:b1:8b:bd:98:12:10:ad:9b:be:
d8:93:dc:bd:5c:8d:77:84:60:e5:79:96:15:e2:ea:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:77:84:7D:97:1D:FB:78:C2:5C:C1:42:4B:6E:F5:2D:FF:2D:81:E5
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS11427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.45.0/24
140.99.209.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:6c:6a:58:99:70:13:c5:b9:5d:12:ae:0b:11:12:a9:ca:30:
aa:51:27:ad:2e:73:07:3c:1e:23:de:58:c0:ab:6b:cb:9e:15:
88:4e:a4:f8:f0:dc:9b:38:64:76:a1:bd:78:99:1a:f7:52:e5:
28:f8:de:9a:aa:31:05:e5:7a:32:6e:f4:e7:bc:4b:4f:60:f3:
75:dc:66:f0:a2:99:37:3a:19:39:2b:f1:24:c7:be:91:6e:65:
8d:e8:d5:5b:7c:5c:d1:1f:ae:61:3e:19:62:6c:d5:07:75:85:
26:56:d6:17:47:41:78:4b:0d:e8:7d:0e:36:42:7c:04:bc:f7:
5a:86:e0:c6:5e:04:6b:a9:23:f7:90:10:0b:f4:34:22:6b:38:
60:6a:c2:5b:72:82:70:64:f5:79:e8:be:e1:be:cf:51:fb:ff:
33:1e:7e:ae:0c:69:81:d4:8c:8c:0e:48:2a:6e:4e:85:89:3d:
1d:b0:8e:18:91:8a:92:a6:9a:0f:c1:34:63:e4:54:c0:d8:b5:
ca:fe:8d:03:3a:67:16:85:d2:ba:e3:4f:c8:91:5b:73:94:4b:
b6:99:ad:98:18:2b:c3:97:93:98:cf:5b:9e:3a:8f:4f:ce:13:
19:c6:8e:66:d6:1a:be:dc:ff:f7:65:7c:47:e6:91:39:c0:65:
b5:ac:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:11 2025 by rpki-client