Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: JOciZpPxr4ueIqLdSvF6iHVfDvBbbXjzppuyyyL60v8=
Subject key identifier: 6C:60:EE:BD:C2:0C:BE:62:73:75:7F:23:EB:5F:8C:6B:90:A4:ED:A6
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 40BC52A1FC10B7E755105123CD69C4B064424F79
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS54252.roa
Signing time: Wed 08 Jan 2025 15:28:23 +0000
ROA not before: Wed 08 Jan 2025 15:23:23 +0000
ROA not after: Wed 07 Jan 2026 15:28:23 +0000
asID: 54252
IP address blocks: 140.99.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:bc:52:a1:fc:10:b7:e7:55:10:51:23:cd:69:c4:b0:64:42:4f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Jan 8 15:23:23 2025 GMT
Not After : Jan 7 15:28:23 2026 GMT
Subject: CN=6C60EEBDC20CBE6273757F23EB5F8C6B90A4EDA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:28:c4:b0:8b:bf:e1:69:ee:26:f2:5b:87:
cc:ee:ae:32:d5:c7:d6:c2:46:1e:aa:57:d1:51:fd:
04:41:1b:5a:d8:f3:8e:2c:b3:5f:2f:7b:b0:de:88:
8e:b2:43:2f:86:14:ba:54:4e:4a:b9:00:4a:4c:c9:
62:da:68:cb:73:96:ba:1f:06:5b:e6:37:d0:25:20:
2b:ae:53:03:ff:2e:e2:81:99:05:ef:be:30:7f:9b:
17:ed:e9:c4:29:ff:bf:4b:7f:66:e6:f6:99:2d:29:
e4:89:d6:d2:74:53:08:0b:10:be:db:bf:1c:3c:e4:
d9:53:c8:91:27:a3:16:89:ea:de:c2:f7:4d:99:6c:
59:ab:31:ec:e7:fd:1f:f1:d4:62:16:e9:94:8c:21:
b0:3b:2f:35:90:2c:0c:cd:46:f0:ba:71:10:03:17:
ee:da:e8:03:fc:df:0e:f0:89:9c:a7:c0:c6:59:60:
b0:01:1e:c4:2e:ce:46:75:39:17:2d:10:93:b2:c3:
bb:74:c3:c8:45:c1:a1:7b:97:5c:c8:dc:9e:d7:7d:
8e:0f:48:9f:ef:7d:33:43:db:d7:b8:45:3f:90:d6:
ec:d2:1e:ca:2d:35:49:86:9f:66:a4:e2:43:a1:8f:
82:1b:0f:27:3c:fe:6c:42:dc:83:99:90:2c:fe:da:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:60:EE:BD:C2:0C:BE:62:73:75:7F:23:EB:5F:8C:6B:90:A4:ED:A6
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.114.0/24
Signature Algorithm: sha256WithRSAEncryption
28:09:ac:99:ed:39:9e:b4:e4:77:2c:f7:5a:14:16:23:18:19:
33:c8:31:a6:67:50:8c:f0:77:98:b2:38:4b:e4:f3:0f:d6:b3:
c4:6c:16:74:c0:25:a5:6f:7b:52:06:b3:7d:28:34:c3:0b:a0:
76:b5:8c:bf:61:2b:e7:ef:c5:87:f4:cf:4b:ba:a9:bf:2f:94:
f6:be:d6:50:96:68:c3:16:b6:f4:c5:1d:68:28:07:d8:b0:56:
dc:fa:d4:cb:73:af:76:dd:51:98:15:64:bd:22:2e:c2:b4:59:
10:b7:9b:04:a0:61:d3:8a:e1:ec:83:fa:98:4b:0a:a4:b9:fe:
e8:04:6a:43:c1:a3:49:07:ce:71:6e:3f:0a:68:23:ab:3e:b6:
ae:78:1f:58:61:6f:54:de:a0:48:68:4d:5f:d7:1b:87:5c:ce:
d7:b9:bc:bf:40:19:26:3a:67:ee:eb:f6:4c:58:c6:72:74:1e:
52:bf:27:e4:1d:26:e8:b6:d2:04:b0:30:56:3a:90:05:e6:74:
4b:d8:38:bc:27:9f:95:c5:d8:11:66:3f:12:21:99:58:d2:dc:
7e:56:5e:c1:1c:09:ff:77:b5:00:34:42:4e:08:f9:c2:a7:7c:
64:86:2b:63:08:9c:ae:52:14:82:b1:72:b6:23:a3:d0:24:40:
aa:35:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:27 2025 by rpki-client