Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS7922.roa
File: AS7922.roa (raw, json)
Hash identifier: AoeAkarcM7+EUN3vI3fDvRlaGuRhpWGM/GiKksuJIUw=
Subject key identifier: FE:9F:EB:AB:95:D7:46:23:84:27:B5:0A:4A:17:4A:72:6C:61:73:4A
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 561AFCC0CE322452CEE9BE474BF4617CD27E0195
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS7922.roa
Signing time: Tue 26 Nov 2024 11:09:03 +0000
ROA not before: Tue 26 Nov 2024 11:04:03 +0000
ROA not after: Tue 25 Nov 2025 11:09:03 +0000
asID: 7922
IP address blocks: 140.99.49.0/24 maxlen: 24
140.99.77.0/24 maxlen: 24
140.99.79.0/24 maxlen: 24
140.99.127.0/24 maxlen: 24
140.99.132.0/22 maxlen: 24
140.99.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:1a:fc:c0:ce:32:24:52:ce:e9:be:47:4b:f4:61:7c:d2:7e:01:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Nov 26 11:04:03 2024 GMT
Not After : Nov 25 11:09:03 2025 GMT
Subject: CN=FE9FEBAB95D746238427B50A4A174A726C61734A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:37:a4:ca:59:ea:59:c4:ab:14:51:3e:d2:
00:84:2d:70:3f:84:3c:10:54:22:62:2c:c3:70:82:
7c:f0:3e:29:d1:f1:85:fb:41:5c:05:b9:ec:8b:9e:
fe:bc:64:ea:86:70:61:ed:41:28:6d:f0:a0:a2:d5:
2c:96:da:d8:de:81:53:bb:48:53:9d:44:f5:f2:9d:
8d:55:ff:03:26:db:8f:41:05:8f:ee:fc:88:4f:38:
92:11:32:6c:bc:1a:ac:a5:bb:f6:17:56:82:bb:b2:
04:78:95:1a:39:05:4e:4f:62:06:be:2f:a7:de:84:
d2:dd:bf:ae:bc:24:69:7b:5d:d9:ab:1b:68:c0:1f:
72:81:75:58:a5:47:c3:6e:d5:64:e6:0d:18:6a:72:
dc:e7:20:9c:96:72:87:10:97:3f:3c:e5:0b:26:53:
8b:56:da:cf:76:a5:cd:14:1e:69:8f:38:20:9d:fe:
b7:b8:b0:d4:7c:8d:32:7f:88:e1:d6:1e:da:25:7f:
dc:45:ac:f1:5f:1c:d4:19:78:88:d5:18:af:87:b6:
c8:b8:8b:2e:8b:ca:92:e9:5f:2f:de:5d:18:1d:46:
9c:1c:62:d7:b4:c2:a9:54:0a:5c:75:39:c2:d4:02:
47:ec:4d:d4:26:aa:b6:ce:2b:e3:52:f4:44:6f:c4:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9F:EB:AB:95:D7:46:23:84:27:B5:0A:4A:17:4A:72:6C:61:73:4A
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS7922.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.49.0/24
140.99.77.0/24
140.99.79.0/24
140.99.127.0/24
140.99.132.0/22
140.99.210.0/24
Signature Algorithm: sha256WithRSAEncryption
91:97:b0:ea:f9:fa:9d:0b:a2:98:05:db:31:9f:ae:5a:59:99:
b9:4b:d2:68:55:1c:e5:73:18:9a:7f:41:68:d7:29:38:10:9a:
56:55:ce:33:d1:0b:fa:e0:ed:b7:f8:99:5f:b1:0b:1f:5f:03:
4b:91:d1:69:6b:bb:f1:47:78:68:f2:21:19:f4:16:1b:4f:94:
79:14:c5:10:0d:9a:cd:d0:37:cd:d4:e1:e9:b9:c2:9f:43:a6:
e2:5c:3b:7c:22:08:68:0b:48:81:01:d6:b6:a6:14:0c:b7:f7:
c8:d6:16:39:c8:28:ca:68:97:f1:52:45:23:72:eb:66:30:b4:
68:a6:a2:b0:7e:1c:4c:1b:5b:29:8d:2f:d9:a0:37:3c:e0:4d:
2e:37:f7:17:ff:0d:80:ab:0d:42:ee:21:6c:e4:8b:cc:0d:7b:
a8:89:ed:ee:34:5c:36:b1:00:b6:ac:fb:0e:e7:f7:c9:94:20:
69:01:ad:e3:f9:89:31:19:15:ca:c8:ee:d5:01:8f:3c:e8:4a:
29:3b:27:e2:e9:f7:29:c5:d1:ce:9c:27:1e:7b:24:6c:77:9f:
46:b7:8d:04:1c:10:18:ca:7a:11:9d:f8:1d:4e:e8:4a:7c:23:
4f:bd:82:fc:b8:7b:4e:a5:36:36:c7:c7:0e:cf:24:ea:83:0d:
77:ca:1d:b5
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIUVhr8wM4yJFLO6b5HS/RhfNJ+AZUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQxMTI2MTEwNDAzWhcNMjUxMTI1MTEwOTAz
WjAzMTEwLwYDVQQDEyhGRTlGRUJBQjk1RDc0NjIzODQyN0I1MEE0QTE3NEE3MjZD
NjE3MzRBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroY3pMpZ6lnE
qxRRPtIAhC1wP4Q8EFQiYizDcIJ88D4p0fGF+0FcBbnsi57+vGTqhnBh7UEobfCg
otUsltrY3oFTu0hTnUT18p2NVf8DJtuPQQWP7vyITziSETJsvBqspbv2F1aCu7IE
eJUaOQVOT2IGvi+n3oTS3b+uvCRpe13ZqxtowB9ygXVYpUfDbtVk5g0YanLc5yCc
lnKHEJc/POULJlOLVtrPdqXNFB5pjzggnf63uLDUfI0yf4jh1h7aJX/cRazxXxzU
GXiI1Rivh7bIuIsui8qS6V8v3l0YHUacHGLXtMKpVApcdTnC1AJH7E3UJqq2zivj
UvREb8TSqwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP6f66uV10YjhCe1CkoXSnJs
YXNKMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzc5MjIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYI
KwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBACMYzEDBACMY00DBACMY08DBACMY38D
BAKMY4QDBACMY9IwDQYJKoZIhvcNAQELBQADggEBAJGXsOr5+p0LopgF2zGfrlpZ
mblL0mhVHOVzGJp/QWjXKTgQmlZVzjPRC/rg7bf4mV+xCx9fA0uR0Wlru/FHeGjy
IRn0FhtPlHkUxRANms3QN83U4em5wp9DpuJcO3wiCGgLSIEB1ramFAy398jWFjnI
KMpol/FSRSNy62YwtGimorB+HEwbWymNL9mgNzzgTS439xf/DYCrDULuIWzki8wN
e6iJ7e40XDaxALas+w7n98mUIGkBreP5iTEZFcrI7tUBjzzoSik7J+Lp9ynF0c6c
Jx57JGx3n0a3jQQcEBjKehGd+B1O6Ep8I0+9gvy4e06lNjbHxw7PJOqDDXfKHbU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:59 2025 by rpki-client