Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33490.roa
File: AS33490.roa (raw, json)
Hash identifier: TAOuEH4G2Dw50MAg4XZuGUrV3HOh73myMcxRm5i1MA4=
Subject key identifier: 2C:7B:AA:A2:2E:39:79:01:11:81:79:47:FF:32:6E:F3:44:C7:E9:50
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 2F1A4C3D7BD42E00CECA711A5C6BE5548E8F3FA9
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33490.roa
Signing time: Tue 26 Nov 2024 11:30:29 +0000
ROA not before: Tue 26 Nov 2024 11:25:29 +0000
ROA not after: Tue 25 Nov 2025 11:30:29 +0000
asID: 33490
IP address blocks: 140.99.27.0/24 maxlen: 24
140.99.59.0/24 maxlen: 24
140.99.123.0/24 maxlen: 24
140.99.151.0/24 maxlen: 24
140.99.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:1a:4c:3d:7b:d4:2e:00:ce:ca:71:1a:5c:6b:e5:54:8e:8f:3f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Nov 26 11:25:29 2024 GMT
Not After : Nov 25 11:30:29 2025 GMT
Subject: CN=2C7BAAA22E39790111817947FF326EF344C7E950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:c4:b9:1d:78:9f:ae:a1:a3:46:77:e2:29:
80:e9:04:64:58:fe:d0:34:8a:38:88:6d:34:ee:53:
d5:43:e3:cb:54:b6:7c:a7:68:cd:c0:31:4d:b8:1a:
81:09:99:10:af:8b:ed:5f:27:e8:78:8f:1a:43:5e:
39:c7:8f:ee:1d:64:54:b0:f7:de:fd:81:2f:31:0a:
ee:07:29:43:de:ff:bb:b4:39:11:6a:45:92:6c:c1:
52:03:8b:84:58:64:6a:95:35:4f:7c:5f:90:6c:c4:
37:53:a1:64:f6:3c:80:8c:a0:c6:dc:11:0a:0b:e1:
01:6b:45:7f:84:bc:ad:cc:af:b3:11:ae:37:1f:45:
2b:2a:e7:e6:29:03:03:d3:3a:f4:bd:b9:b0:92:69:
1a:37:8e:05:61:4a:68:5d:d0:4a:b3:7d:b5:9f:43:
a1:41:f2:b4:d2:c6:d0:90:c2:18:bd:2e:d0:c9:4d:
c2:7b:56:e6:21:56:eb:f0:d7:a8:71:6d:d2:59:23:
6a:b4:dd:31:f2:70:0d:21:9a:00:ea:24:b8:55:c5:
32:c6:bf:29:be:7e:94:b7:e4:c1:73:54:30:fa:0e:
c1:93:9a:75:2d:34:f6:df:3e:be:56:4e:c7:d0:27:
6b:d0:88:9b:ac:25:90:97:a3:85:a9:c8:cf:c8:85:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7B:AA:A2:2E:39:79:01:11:81:79:47:FF:32:6E:F3:44:C7:E9:50
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS33490.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.27.0/24
140.99.59.0/24
140.99.123.0/24
140.99.151.0/24
140.99.211.0/24
Signature Algorithm: sha256WithRSAEncryption
72:62:11:d6:6c:ba:63:34:56:a1:ed:65:d7:f1:89:b8:de:16:
c0:f9:ef:d6:c9:7e:c6:0d:b3:7e:8d:96:1b:bf:b8:b5:72:4c:
e7:83:81:72:ac:8f:76:3e:82:e6:06:b7:6f:16:74:d7:c0:4c:
fd:82:d1:6e:67:db:67:13:cd:1a:97:3c:8d:ea:c3:13:33:7e:
bf:1e:f7:a9:cb:03:81:38:13:ce:69:5e:ec:0d:09:40:2c:ae:
48:61:76:8e:47:c2:a0:b2:35:cb:32:9a:54:fe:a3:88:51:4a:
50:90:c3:14:84:b5:60:6c:b2:af:5e:fe:85:29:be:20:01:8f:
2c:84:1e:ec:75:3b:0d:d5:13:58:63:1a:eb:94:2b:77:f0:b6:
e9:76:bb:51:3e:a2:89:b0:86:3a:fa:cd:96:7f:78:2b:f3:b2:
10:fd:b5:2c:88:3a:d2:2f:04:06:1e:13:e9:b9:4d:28:82:17:
d2:b6:62:10:c2:a7:2f:55:ed:28:88:ff:16:cf:e4:fe:36:1b:
53:13:08:68:58:02:55:1a:75:2b:12:ae:be:d9:f7:b3:b7:84:
ae:96:ea:58:32:8b:20:63:a7:19:a7:8c:c1:b9:87:69:c4:27:
dd:a7:c3:2a:74:73:4f:73:48:bc:e7:40:cb:26:bd:54:c6:ed:
a6:1a:71:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:04 2025 by rpki-client