Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS59711.roa
File: AS59711.roa (raw, json)
Hash identifier: PTr9Z2RdVfe1fCifJjxeocoaXzcNaIRnrLGxSBdYMek=
Subject key identifier: 3F:B4:5B:B8:2C:93:E5:FD:55:6D:59:C7:AA:46:51:AE:7F:2C:D6:BF
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 291DAE25008A75155325748EF37624AEFDE498AC
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS59711.roa
Signing time: Fri 17 Jan 2025 14:27:53 +0000
ROA not before: Fri 17 Jan 2025 14:22:53 +0000
ROA not after: Fri 16 Jan 2026 14:27:53 +0000
asID: 59711
IP address blocks: 140.99.188.0/24 maxlen: 24
140.99.189.0/24 maxlen: 24
140.99.191.0/24 maxlen: 24
140.99.192.0/24 maxlen: 24
140.99.193.0/24 maxlen: 24
140.99.194.0/24 maxlen: 24
140.99.195.0/24 maxlen: 24
140.99.196.0/24 maxlen: 24
140.99.197.0/24 maxlen: 24
140.99.198.0/24 maxlen: 24
140.99.199.0/24 maxlen: 24
140.99.200.0/24 maxlen: 24
140.99.201.0/24 maxlen: 24
140.99.202.0/24 maxlen: 24
140.99.203.0/24 maxlen: 24
140.99.204.0/24 maxlen: 24
140.99.206.0/24 maxlen: 24
140.99.207.0/24 maxlen: 24
140.99.212.0/24 maxlen: 24
140.99.214.0/24 maxlen: 24
140.99.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1d:ae:25:00:8a:75:15:53:25:74:8e:f3:76:24:ae:fd:e4:98:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Jan 17 14:22:53 2025 GMT
Not After : Jan 16 14:27:53 2026 GMT
Subject: CN=3FB45BB82C93E5FD556D59C7AA4651AE7F2CD6BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:72:eb:38:ab:23:59:97:df:57:67:70:87:0a:
dd:bc:a3:8d:fb:82:11:f6:9e:52:cd:ce:67:ac:3d:
77:63:0d:49:ed:f4:ae:1d:19:94:86:28:c5:4e:b3:
a5:62:32:32:fb:bb:2e:8a:03:c7:74:80:02:e1:cf:
81:c5:2e:57:29:dd:49:82:a8:8f:dd:f9:48:ba:a2:
82:84:27:a3:ba:e9:72:c1:4f:75:27:3b:50:72:7e:
eb:2c:29:a5:22:dc:65:f2:c4:98:7e:d1:f8:8e:22:
11:aa:b7:8a:e3:f3:2c:a4:1b:6d:d4:fd:43:50:4b:
f5:cb:24:f0:45:fe:65:5b:34:9c:08:37:09:02:f4:
9a:e2:f9:06:2f:a2:78:81:7e:f4:b8:30:89:3d:c1:
3a:bf:bf:93:94:dc:63:e4:1e:a4:4a:49:67:c8:de:
59:f1:da:31:e3:54:17:bc:02:7a:cf:ed:23:d9:4a:
bc:c7:b5:43:e9:26:4b:1b:5f:2a:a6:52:43:27:1f:
b1:b7:19:73:bc:aa:0d:0a:e5:cd:a1:57:8c:47:89:
9e:52:36:30:f6:16:0a:4a:0e:88:77:b6:1a:49:6a:
87:b4:55:b8:7a:60:4c:81:a9:03:46:bc:60:4c:ef:
f3:11:4a:a4:a0:d0:92:d8:9d:09:a5:58:b4:be:76:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B4:5B:B8:2C:93:E5:FD:55:6D:59:C7:AA:46:51:AE:7F:2C:D6:BF
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS59711.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.188.0/23
140.99.191.0-140.99.204.255
140.99.206.0/23
140.99.212.0/24
140.99.214.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:65:eb:50:53:a0:d4:35:ff:ce:49:e1:ee:68:f1:a7:51:be:
26:cb:27:cf:18:e4:4b:79:d8:57:6f:60:d8:fe:1c:b1:a9:17:
ef:32:cd:b7:47:e6:21:41:dc:76:51:b2:20:46:fd:bd:30:bb:
3b:00:a0:c1:2a:bd:5e:ff:21:72:de:ef:80:ee:9f:66:f9:8b:
f2:e2:9c:63:e4:35:42:b4:e4:9c:0a:d3:11:a8:04:ff:5e:3b:
8b:d0:d2:e2:b0:0f:f5:9e:6e:65:d9:df:a8:b9:79:f0:87:d3:
43:a3:17:86:db:d2:57:c8:96:9b:10:e5:23:52:f2:c4:99:f6:
c0:e0:58:18:76:67:df:f2:f8:dc:44:76:f8:49:fa:c6:2c:23:
c5:b4:d5:a3:bc:e4:c2:b1:2e:4f:f6:6f:58:90:8f:eb:77:f3:
ce:6a:ce:53:71:d8:e9:d4:2a:9c:cf:75:51:32:1b:78:4c:3f:
6e:87:89:02:ab:e8:8d:aa:45:91:0b:5d:9a:73:85:5a:a4:30:
5e:5c:94:4b:39:65:62:b9:d7:0d:5a:3d:7c:49:ff:b4:70:09:
1b:24:5a:d8:ff:2e:f2:13:85:0f:c5:ac:3f:b9:c0:37:b3:49:
67:9a:15:64:a8:6f:91:c8:62:e7:bc:94:f6:c8:b8:1e:7b:f2:
df:6a:6c:d8
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUKR2uJQCKdRVTJXSO83Ykrv3kmKwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwMTE3MTQyMjUzWhcNMjYwMTE2MTQyNzUz
WjAzMTEwLwYDVQQDEygzRkI0NUJCODJDOTNFNUZENTU2RDU5QzdBQTQ2NTFBRTdG
MkNENkJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HLrOKsjWZff
V2dwhwrdvKON+4IR9p5Szc5nrD13Yw1J7fSuHRmUhijFTrOlYjIy+7suigPHdIAC
4c+BxS5XKd1JgqiP3flIuqKChCejuulywU91JztQcn7rLCmlItxl8sSYftH4jiIR
qreK4/MspBtt1P1DUEv1yyTwRf5lWzScCDcJAvSa4vkGL6J4gX70uDCJPcE6v7+T
lNxj5B6kSklnyN5Z8dox41QXvAJ6z+0j2Uq8x7VD6SZLG18qplJDJx+xtxlzvKoN
CuXNoVeMR4meUjYw9hYKSg6Id7YaSWqHtFW4emBMgakDRrxgTO/zEUqkoNCS2J0J
pVi0vnZJPQIDAQABo4ICnjCCApowHQYDVR0OBBYEFD+0W7gsk+X9VW1Zx6pGUa5/
LNa/MB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzU5NzExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD8G
CCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBjGO8MAwDBACMY78DBACMY8wDBAGM
Y84DBACMY9QDBAGMY9YwDQYJKoZIhvcNAQELBQADggEBACpl61BToNQ1/85J4e5o
8adRvibLJ88Y5Et52FdvYNj+HLGpF+8yzbdH5iFB3HZRsiBG/b0wuzsAoMEqvV7/
IXLe74Dun2b5i/LinGPkNUK05JwK0xGoBP9eO4vQ0uKwD/WebmXZ36i5efCH00Oj
F4bb0lfIlpsQ5SNS8sSZ9sDgWBh2Z9/y+NxEdvhJ+sYsI8W01aO85MKxLk/2b1iQ
j+t3885qzlNx2OnUKpzPdVEyG3hMP26HiQKr6I2qRZELXZpzhVqkMF5clEs5ZWK5
1w1aPXxJ/7RwCRskWtj/LvIThQ/FrD+5wDezSWeaFWSob5HIYue8lPbIuB578t9q
bNg=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:55 2025 by rpki-client