Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: BebyjbonY/OZV1/nPc46Stp2J6qgVWr86qSIxZ1mLaQ=
Subject key identifier: 33:69:39:6E:3E:3C:22:BB:82:BC:A8:42:FD:22:A7:C4:70:3A:39:D5
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 13CE1B8EDAB24415B2E3C917FA5FFE59694BC8FC
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa
Signing time: Tue 25 Mar 2025 14:10:22 +0000
ROA not before: Tue 25 Mar 2025 14:05:22 +0000
ROA not after: Tue 24 Mar 2026 14:10:22 +0000
asID: 16509
IP address blocks: 23.95.142.0/24 maxlen: 24
209.200.231.0/24 maxlen: 24
209.200.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ce:1b:8e:da:b2:44:15:b2:e3:c9:17:fa:5f:fe:59:69:4b:c8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Mar 25 14:05:22 2025 GMT
Not After : Mar 24 14:10:22 2026 GMT
Subject: CN=3369396E3E3C22BB82BCA842FD22A7C4703A39D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:0e:41:48:1e:c4:08:e4:fe:81:f8:64:df:
0d:27:86:64:ee:f2:44:bc:6a:cd:82:3f:c0:96:c3:
95:d1:73:be:0d:df:f0:44:7a:52:86:17:55:1a:bd:
d9:d2:b5:60:3b:8c:83:a1:9e:85:69:d4:2c:47:ca:
e7:65:f1:4e:a2:a7:92:e8:bf:96:b0:3d:13:d9:83:
ea:03:d2:b9:4b:8a:22:e1:57:75:95:06:f2:e2:9c:
97:ae:35:0b:d4:5f:e3:7d:85:8c:d3:da:93:1d:b7:
da:f2:50:3f:eb:c7:39:b6:08:4a:b3:61:bd:a7:42:
af:c4:25:16:79:7e:a2:3e:cb:1f:45:90:a1:44:cd:
0f:e2:a8:92:76:14:d1:5e:4a:7b:5d:2c:86:10:40:
ed:a2:8b:79:a6:f5:ab:bf:f2:74:db:63:2c:76:39:
d8:8b:eb:40:25:71:71:3a:c5:51:fe:05:2f:ce:49:
40:d9:b2:13:78:fa:46:bb:3a:bc:db:c0:48:5e:b0:
57:f3:7b:70:6b:a1:42:bd:fc:f1:53:78:3d:86:86:
cf:5c:f7:2a:1c:7b:59:f7:ee:4f:96:39:db:60:16:
b6:bb:f3:f5:6a:6f:9e:e1:e1:29:37:a9:ea:9b:90:
79:1a:1f:fa:94:24:0e:12:35:6d:25:e6:b7:4d:df:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:69:39:6E:3E:3C:22:BB:82:BC:A8:42:FD:22:A7:C4:70:3A:39:D5
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.95.142.0/24
209.200.231.0/24
209.200.241.0/24
Signature Algorithm: sha256WithRSAEncryption
50:24:d5:49:52:f5:d4:eb:30:71:1d:b3:3d:0d:4f:60:e7:70:
0b:b9:59:35:2c:88:ee:57:ed:ca:e9:84:2f:69:ce:cd:d2:ef:
0f:6e:d3:9c:48:17:f2:82:8b:58:50:c4:fb:63:dd:3f:91:9f:
44:0a:5b:ae:d1:e2:91:08:fd:1b:57:e0:64:07:97:15:19:19:
6d:cb:a0:82:8c:eb:e2:cd:f6:38:84:b9:54:9a:73:93:0f:83:
50:90:97:bc:6d:24:91:35:78:16:0e:dc:fd:9e:37:07:8a:06:
fd:35:7d:6a:67:8a:7b:00:8d:85:cb:1b:6c:1f:82:d5:d7:b4:
d3:60:64:57:a5:50:0e:79:05:5a:3c:c1:4d:1f:96:99:6e:c4:
d6:8d:c6:e1:1e:3f:72:6d:1b:bf:43:59:fb:9e:d7:9d:3e:e7:
40:1e:8f:ea:51:61:cf:76:01:f8:bd:df:0d:a5:06:7d:a8:6e:
13:8a:70:65:21:ca:e6:55:74:d4:b5:25:92:1e:57:a7:1f:14:
55:e0:f0:a6:cd:ac:ec:1e:76:74:55:0d:0b:ae:6d:a7:46:19:
12:ff:2d:cb:28:07:af:36:58:fe:0d:05:38:3e:0b:71:26:14:
8c:92:e5:fd:63:90:cf:62:7e:0f:1b:c7:30:31:0e:c9:b7:be:
db:b2:6e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:48:30 2025 by rpki-client