Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20068.roa
File: AS20068.roa (raw, json)
Hash identifier: /RLLRobKUMPYnC9kMXbQOV3wzFYGWTRNaxyA2F78WmE=
Subject key identifier: 36:10:8C:19:D4:FC:C3:0C:C9:36:10:C3:02:8C:4E:66:ED:73:E6:AB
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 263593171619AFD0E009319AD6570F5B80171B8A
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20068.roa
Signing time: Sat 23 Nov 2024 06:49:22 +0000
ROA not before: Sat 23 Nov 2024 06:44:22 +0000
ROA not after: Sat 22 Nov 2025 06:49:22 +0000
asID: 20068
IP address blocks: 140.99.244.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:35:93:17:16:19:af:d0:e0:09:31:9a:d6:57:0f:5b:80:17:1b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Nov 23 06:44:22 2024 GMT
Not After : Nov 22 06:49:22 2025 GMT
Subject: CN=36108C19D4FCC30CC93610C3028C4E66ED73E6AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:42:37:83:e6:71:6a:b6:7b:42:c9:94:a6:
71:3b:fd:59:bb:b0:bb:59:0d:70:87:eb:c6:53:64:
a9:f9:e9:58:ba:9b:3e:f9:2d:50:40:4e:d1:46:df:
fb:e7:d4:ff:34:6f:73:f1:9c:c3:5a:2d:d9:2a:de:
60:8a:9f:7f:cf:53:4a:7e:57:07:f7:28:98:75:44:
3b:0c:fa:80:30:fa:97:c5:f6:a1:0d:9c:50:ca:e6:
b0:eb:cc:3f:53:13:bb:54:1a:7a:7b:95:22:be:31:
dc:3b:a9:69:f0:76:26:b6:cf:4b:a1:9d:d4:83:c3:
1e:aa:e7:97:bb:56:5d:cd:eb:80:c8:57:09:0f:b4:
ee:f1:23:ec:ea:20:3d:59:0a:fa:e4:51:48:73:ab:
ca:b7:44:4d:62:0c:6b:87:69:eb:b3:58:4e:4d:d8:
e4:79:68:72:0d:fe:f1:85:42:05:fb:50:c8:67:3e:
56:80:a5:7a:0e:59:ae:d8:55:46:65:27:81:78:a4:
f9:16:31:07:5e:c2:31:60:e6:7a:5d:fa:4d:58:13:
62:6f:2d:46:ae:9a:e8:30:25:69:d2:17:d6:3e:5d:
6b:6b:26:1e:6e:23:5a:c9:c5:b7:67:7f:f4:fe:ea:
88:07:a0:e1:fc:2f:04:76:a6:08:99:90:e3:20:64:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:10:8C:19:D4:FC:C3:0C:C9:36:10:C3:02:8C:4E:66:ED:73:E6:AB
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.244.0/23
Signature Algorithm: sha256WithRSAEncryption
79:cb:28:85:0b:29:d4:90:43:eb:2a:9e:7a:b6:3d:01:a2:bf:
e8:6f:dc:9e:b6:f2:a4:15:72:6c:ff:c1:cf:f9:70:52:1e:66:
0f:9e:1e:83:a1:ac:ac:f7:c9:20:d5:93:62:38:bc:8f:b5:0a:
1d:25:14:5d:26:1c:10:fa:5f:9e:67:e2:94:bc:30:53:14:00:
f4:cc:1b:91:ad:b6:b2:da:58:b6:bb:2f:24:b5:5f:bf:14:10:
82:fa:74:ba:e8:12:1b:0e:89:ed:c0:4c:0e:4f:67:e2:75:90:
7e:fe:81:61:c5:4a:85:2d:9e:e5:fc:50:a8:20:96:e0:72:c9:
d0:de:e1:15:82:0f:cc:35:4e:5d:41:cf:d3:1b:62:95:49:b6:
fa:46:fd:f1:b4:e5:f0:1a:05:aa:d1:36:b6:86:e6:df:33:d3:
e3:ec:3a:ac:16:66:f7:8c:b2:44:a7:66:1b:3e:56:53:9b:07:
6f:65:45:8e:a1:64:7d:b6:d0:c1:9c:d3:b2:09:3c:c9:39:ed:
a9:b5:82:5a:24:1b:7e:57:07:cc:43:91:14:a6:7b:d9:81:24:
76:ab:11:a1:3c:29:b7:ff:71:6b:e9:84:35:ac:78:b2:c3:21:
9e:3a:c5:a3:50:25:d0:23:76:b9:2a:5a:67:bb:bb:77:75:e0:
7e:f3:de:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:38:28 2025 by rpki-client