Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS49999.roa
File: AS49999.roa (raw, json)
Hash identifier: hWoA6yAR169DnHnSc5Te2ZRbsD6CT71DaxuX6WKai9I=
Subject key identifier: A2:8B:07:13:87:C1:77:C9:69:A6:8F:20:48:C0:72:31:A8:74:89:12
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 5774EF180742887D448EAB2E915C04F7DE0F592F
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS49999.roa
Signing time: Mon 28 Nov 2022 00:00:10 +0000
ROA not before: Sun 27 Nov 2022 23:55:10 +0000
ROA not after: Mon 27 Nov 2023 00:00:10 +0000
asID: 49999
IP address blocks: 140.99.165.0/24 maxlen: 24
140.99.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:74:ef:18:07:42:88:7d:44:8e:ab:2e:91:5c:04:f7:de:0f:59:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Nov 27 23:55:10 2022 GMT
Not After : Nov 27 00:00:10 2023 GMT
Subject: CN=A28B071387C177C969A68F2048C07231A8748912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:11:c1:1b:5e:5c:be:1d:7e:92:5d:f1:10:
e2:47:13:fa:3b:b4:9c:5d:60:31:24:86:a0:53:8e:
18:4a:13:b8:ee:01:f5:c5:3f:32:55:86:1c:ac:4b:
3d:05:53:31:10:65:fa:ad:d0:66:1a:53:fc:73:a0:
3e:b6:f5:f6:f7:e3:01:d0:3d:4f:8c:c2:9f:34:ca:
59:ae:92:30:a3:2f:9e:4e:4d:93:95:a2:b8:e7:2c:
6c:5f:85:51:da:b3:f0:24:4c:57:c7:86:14:21:4b:
08:e0:b0:67:85:d4:55:d5:a0:20:d4:03:32:97:6f:
aa:7a:2f:ae:6e:ec:4b:e3:31:ad:fa:62:a5:fe:18:
e6:b3:40:fb:b2:2c:c3:5c:26:66:c9:f3:82:db:ac:
e1:86:76:4e:31:12:3c:2b:11:33:b1:fa:f1:5c:8f:
0e:5d:ab:46:e2:87:51:c5:f1:80:bf:33:83:2d:e0:
7d:60:58:74:ac:b7:14:6f:d9:50:d3:fc:5b:8b:e7:
d3:cc:39:46:10:26:e4:cc:1b:1c:2e:98:dd:04:95:
db:99:78:ab:7e:5b:9d:0b:23:ca:33:9a:52:06:2e:
c1:a4:25:c8:fb:06:64:ac:53:46:4b:5e:e2:4b:fc:
a7:12:04:4e:c8:71:22:04:27:91:f0:b3:bf:37:15:
d8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8B:07:13:87:C1:77:C9:69:A6:8F:20:48:C0:72:31:A8:74:89:12
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS49999.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.165.0/24
140.99.206.0/24
Signature Algorithm: sha256WithRSAEncryption
39:6e:42:1d:da:7d:11:03:54:a4:e4:65:de:87:19:6f:78:fd:
8e:62:60:67:f5:e5:b1:a2:fa:39:c9:44:98:76:d2:17:b6:25:
b9:ca:d5:3c:63:d7:66:31:c3:ba:c9:5c:87:b9:38:1f:f8:b0:
0f:02:ac:75:88:57:65:2b:bb:24:b1:e4:fb:b5:e1:de:b6:df:
db:5d:83:08:7d:d9:5b:97:e2:b8:a6:fd:7b:f9:47:79:7e:6e:
3c:89:0a:7c:bf:af:48:fa:ed:48:cc:ed:88:e9:03:54:27:58:
cb:24:e9:4b:30:c9:c6:ac:4e:55:53:71:d1:f6:9d:7b:63:b9:
17:c7:66:4d:5f:00:22:5a:2e:19:98:bc:98:c6:d9:c1:5a:3a:
64:0f:f9:d8:3d:bd:3c:8a:b0:2c:b0:99:b1:ac:a9:d2:19:e3:
c5:a7:b6:8f:0e:f8:e8:75:b5:c9:fa:46:2c:ac:b3:ae:62:e3:
d7:dd:92:b9:86:92:40:7f:78:5d:3e:0f:6f:17:63:52:bc:83:
80:8e:aa:64:b2:9b:3c:b4:c8:68:25:a8:0f:50:14:cd:0a:33:
ba:83:31:58:0c:ab:0c:c4:ce:20:62:0b:ad:28:f8:6c:c0:2d:
e7:50:e3:ac:d7:b9:2f:3c:83:60:1d:ad:1f:9d:df:e0:2f:63:
07:da:20:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:58 2025 by rpki-client