Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20001.roa
File: AS20001.roa (raw, json)
Hash identifier: wUDlfGYROkV5uZp3CM73aXmZnTDjdvHlKCbDtBXSEL4=
Subject key identifier: DD:35:CE:0B:24:03:1F:36:4D:66:82:5C:C4:9C:2B:91:76:28:96:B4
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 54EF99C9D0A42951B443935BE58C69CB48D4B9F7
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20001.roa
Signing time: Mon 24 Feb 2025 11:09:37 +0000
ROA not before: Mon 24 Feb 2025 11:04:37 +0000
ROA not after: Mon 23 Feb 2026 11:09:37 +0000
asID: 20001
IP address blocks: 140.99.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ef:99:c9:d0:a4:29:51:b4:43:93:5b:e5:8c:69:cb:48:d4:b9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Feb 24 11:04:37 2025 GMT
Not After : Feb 23 11:09:37 2026 GMT
Subject: CN=DD35CE0B24031F364D66825CC49C2B91762896B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:b1:72:9a:95:4e:b0:cb:e2:b1:7f:31:0e:
17:79:d8:92:19:02:d0:a5:2e:8f:ad:09:b2:ce:03:
5e:29:d5:4c:83:31:53:cf:0f:df:bd:80:f0:f8:a3:
15:d5:d5:7c:48:f6:0e:bc:0b:c3:7f:41:bf:bd:10:
b4:b2:96:60:e3:08:e8:f8:e1:df:a0:9f:95:c7:0f:
50:e9:ed:ec:3c:27:c5:ab:17:e6:f4:aa:11:3c:c4:
99:9b:b7:fb:76:52:5d:67:89:3d:6c:7c:05:9e:ea:
dc:6c:54:44:4c:66:d8:be:ac:14:d1:fd:ca:5e:68:
30:a0:37:08:9a:94:73:b8:f9:7b:41:38:ef:33:9d:
42:12:31:be:d1:57:c0:bb:a0:9c:d4:89:61:00:6c:
9c:81:94:98:80:c2:af:99:7d:3b:94:eb:85:07:8a:
05:1d:50:b0:dc:c3:71:be:8c:25:24:97:e5:ef:01:
9a:5c:d0:17:7e:27:54:ff:a5:a4:e3:6a:4d:0d:4d:
09:8b:60:dd:ff:c9:ba:f8:45:f9:b9:48:4d:9f:53:
58:8c:6d:e1:e8:63:c9:82:df:26:f4:da:16:e0:33:
73:da:ad:37:ba:ea:1d:c6:2d:db:1d:ec:95:96:a5:
af:84:ce:f0:28:c0:4d:10:b0:1b:29:b2:04:d3:ec:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:35:CE:0B:24:03:1F:36:4D:66:82:5C:C4:9C:2B:91:76:28:96:B4
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20001.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.43.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f5:26:8a:c9:53:3e:fe:be:97:e8:3f:05:6c:a2:44:90:ce:
67:6c:ea:a1:81:75:cf:98:42:a4:09:78:d8:ef:9a:b6:4d:3f:
86:14:94:8e:90:e4:56:82:1b:c0:ec:70:9a:c7:dd:2d:90:62:
9f:55:3d:95:c8:d9:3a:5a:0e:31:c5:38:90:35:1b:e6:4f:96:
3d:87:3f:f1:d6:a4:b7:69:ac:e8:91:61:bd:80:9d:e8:9e:ee:
01:02:0e:dc:1b:c5:e1:da:a4:4c:f5:b1:70:43:24:24:15:67:
bd:a4:70:a6:31:99:c6:ab:2f:2d:67:8c:0b:eb:c6:0e:78:76:
4b:c7:34:97:93:ee:e4:c4:63:3e:df:19:e8:45:19:3c:5b:3b:
4a:09:e7:cb:2a:7c:e0:11:21:de:f8:a7:fe:7b:83:19:3c:82:
c3:1d:e6:e4:02:f7:9e:8f:f5:5c:7e:c0:da:11:ce:8f:e3:5b:
df:55:d6:40:66:cd:af:02:38:83:bd:89:f8:c2:92:ff:80:54:
64:01:4e:18:58:30:af:a5:ae:ed:f3:5c:57:02:6d:b6:6f:8d:
18:86:cf:03:90:c8:f1:86:75:1c:7d:63:30:fa:2e:d3:02:7b:
96:f0:5d:32:bc:51:9c:fa:c1:d5:46:41:c1:b5:7b:49:51:7f:
01:24:1e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:29 2025 by rpki-client