Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29119.roa
File: AS29119.roa (raw, json)
Hash identifier: H2DYJAZpKn+TDbjHKNGTeXMT5X7H5n1EzWbLLoaB928=
Subject key identifier: 97:8F:43:2C:38:6E:AA:E0:FC:DA:77:5C:5E:4C:6C:42:D6:AB:33:9F
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 3FB5D077412D1B880C35197948B3BD4ACD51A348
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29119.roa
Signing time: Wed 30 Aug 2023 14:33:45 +0000
ROA not before: Wed 30 Aug 2023 14:28:45 +0000
ROA not after: Wed 28 Aug 2024 14:33:45 +0000
asID: 29119
IP address blocks: 140.99.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b5:d0:77:41:2d:1b:88:0c:35:19:79:48:b3:bd:4a:cd:51:a3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Aug 30 14:28:45 2023 GMT
Not After : Aug 28 14:33:45 2024 GMT
Subject: CN=978F432C386EAAE0FCDA775C5E4C6C42D6AB339F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:26:9d:52:0a:33:95:f3:86:6e:0e:92:94:
61:df:41:3d:9d:93:59:33:62:45:41:b0:3e:9c:c2:
c6:ff:89:fa:d4:61:ce:4b:f7:c4:a6:83:2c:4c:12:
2c:44:d9:f3:1c:34:f1:06:34:22:77:ed:88:c0:6e:
1a:f8:2b:56:45:48:32:e8:96:13:71:2a:3d:41:be:
4a:17:c1:74:29:d7:8b:06:52:96:6d:2f:c9:e7:3e:
c3:90:b2:0a:1f:ac:46:0d:bd:21:73:20:51:d0:16:
41:d5:ef:c0:d6:18:9a:1b:70:9b:28:c5:72:23:eb:
31:8b:79:7e:a5:0a:00:1b:75:7d:c2:eb:33:a7:1b:
98:0c:bf:9b:f1:33:1b:fc:81:04:6a:46:75:42:8c:
1e:25:17:0a:0c:e1:e7:ad:be:99:72:49:b8:9a:23:
88:8b:44:f7:3c:a8:bb:c4:1c:c7:41:f0:43:83:34:
c3:3a:e4:44:d1:30:4c:42:af:78:ea:b4:32:f8:eb:
e8:5c:f7:0d:79:ea:d9:e9:f6:67:63:df:a8:4b:be:
14:f3:9e:5e:6a:87:63:68:42:e6:6b:3c:4b:5f:5d:
22:53:dc:97:ea:58:75:48:d9:a7:ab:b4:a2:8e:34:
74:ac:4f:a0:4a:7c:6d:fd:b9:e8:5d:89:3a:9d:e8:
e4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8F:43:2C:38:6E:AA:E0:FC:DA:77:5C:5E:4C:6C:42:D6:AB:33:9F
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.48.0/22
Signature Algorithm: sha256WithRSAEncryption
64:e2:00:7f:86:3f:7d:41:27:bf:9e:d5:b8:c0:4c:4b:28:bb:
85:74:ce:ac:a1:b9:30:80:e6:de:4a:c3:6c:99:d9:81:4d:5f:
92:1d:fa:23:cf:12:73:e2:87:b6:e2:c9:a8:67:83:79:00:5b:
b8:ab:4d:d3:b4:f0:85:2c:81:0a:c8:68:86:ae:ff:ab:6d:44:
9f:77:e7:00:5a:ab:50:ad:ef:9b:b2:65:a2:61:e4:38:b7:bf:
74:e2:91:12:e7:73:69:46:96:e7:b3:d0:5e:82:b3:61:a5:a5:
57:85:71:17:0d:3f:3a:e7:3d:e1:28:41:01:6d:a5:10:e5:a8:
fb:21:92:24:d3:4b:eb:54:ba:d4:c4:1c:79:e4:be:5c:30:00:
48:c1:6a:b1:b8:03:cc:f5:cc:43:a2:f1:8e:8f:56:23:83:84:
bc:88:8b:f8:73:a4:62:e8:cf:7c:9b:06:37:af:1e:82:0d:a1:
6d:25:66:34:e4:22:65:11:0b:34:ee:ea:c7:a2:44:86:4a:ed:
55:61:d8:54:70:20:04:5d:b8:64:32:9d:70:8a:d8:e6:c3:8e:
56:12:88:21:6f:54:95:73:c1:fa:3f:41:70:11:56:cc:bd:cd:
e5:37:38:ee:46:6a:04:95:6a:47:88:71:b8:b6:e3:6e:ac:93:
3c:6d:9a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:01 2025 by rpki-client