
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS199707.roa
File: AS199707.roa (raw, json)
Hash identifier: b95IqojOzAjo8UNA2W5iYDk23SF7gdWH6+Od/LmqSeE=
Subject key identifier: 63:88:B9:EF:14:1E:E3:31:B6:52:D6:D4:9E:23:34:B0:D6:94:D0:15
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 329B72BCC023297AA1A9EB2F5BACC7EDCD393BB2
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS199707.roa
Signing time: Tue 21 Jan 2025 06:28:32 +0000
ROA not before: Tue 21 Jan 2025 06:23:32 +0000
ROA not after: Tue 20 Jan 2026 06:28:32 +0000
asID: 199707
IP address blocks: 23.95.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:9b:72:bc:c0:23:29:7a:a1:a9:eb:2f:5b:ac:c7:ed:cd:39:3b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jan 21 06:23:32 2025 GMT
Not After : Jan 20 06:28:32 2026 GMT
Subject: CN=6388B9EF141EE331B652D6D49E2334B0D694D015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2c:ce:04:f6:b6:78:fa:21:14:7e:4c:24:d1:
bf:1c:5e:b6:54:2c:f8:7f:70:6c:5d:93:43:cf:02:
76:c7:a3:69:a6:ac:99:33:04:24:3e:0b:68:47:af:
c7:6b:ec:62:bc:02:24:99:bd:1d:e2:c3:60:82:36:
6d:70:57:86:8b:94:b2:45:ff:89:4f:1a:3c:fb:3b:
9c:5e:47:cb:0f:e3:8d:ce:ca:3f:2d:7d:14:22:65:
ed:36:4e:2b:85:7c:4f:ff:fc:a1:c7:ca:72:d1:9d:
81:71:0b:37:eb:49:57:b1:d2:3e:76:34:56:92:3c:
4d:ed:74:d7:35:f7:18:ed:1a:c7:cd:4f:3b:05:e2:
2e:4e:20:15:66:2c:db:43:01:9d:b6:5e:87:52:8d:
39:e3:ed:6e:4d:eb:2c:b2:f9:77:c5:cf:84:67:8a:
29:d5:1c:6f:1d:75:91:9c:48:de:78:d4:ab:71:88:
a2:27:0c:51:59:e7:b4:82:65:27:be:c6:3f:16:2e:
df:3d:e2:d5:38:b7:45:51:92:3b:04:c2:5c:fc:7f:
16:74:b0:c6:84:c4:56:e4:88:82:5c:b8:a6:b9:42:
1a:0f:a5:5b:db:df:14:6b:7a:77:ff:89:8b:1e:aa:
06:53:b0:1b:e0:75:49:24:1f:47:2c:25:16:93:04:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:88:B9:EF:14:1E:E3:31:B6:52:D6:D4:9E:23:34:B0:D6:94:D0:15
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS199707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.95.123.0/24
Signature Algorithm: sha256WithRSAEncryption
18:89:17:ff:78:e4:a0:04:ad:cc:59:f9:02:4f:f2:d7:b5:72:
a9:a8:65:37:dd:ba:17:d8:3c:e4:5c:89:48:23:70:1c:65:fe:
50:3e:68:14:ab:fa:ce:a1:66:12:e0:b8:7e:bc:67:92:6f:db:
9d:bf:0d:44:4e:84:b6:38:8b:e4:b1:0a:08:73:e4:30:5e:e6:
42:0a:06:53:1d:53:20:2a:f6:21:34:5d:fe:32:03:35:e1:ee:
60:3f:cb:19:af:74:09:c0:58:a8:c3:2b:c0:ff:4f:5e:a8:1f:
d6:b2:70:28:6c:11:fd:6a:fb:e1:eb:2a:56:7d:9d:cb:38:b4:
7a:0c:c6:d4:71:2c:4f:4b:15:e2:f0:b4:e5:87:fc:21:26:4f:
7b:f7:fe:a6:d5:35:cf:2d:39:57:3e:1a:a4:5f:e1:89:e3:4f:
a8:70:c6:99:2d:42:25:ed:91:e5:31:9e:e3:34:dc:33:67:8f:
52:83:8b:67:37:80:fd:d9:c0:89:29:24:34:ad:9f:2d:44:cf:
a4:a3:ef:d7:fe:83:a0:47:59:76:6f:98:13:56:fe:00:e6:67:
15:7c:25:f3:02:0b:b7:3e:31:bf:e5:0b:85:c1:fd:53:d9:08:
c0:0c:cb:ca:b2:ef:81:76:5c:6b:30:2c:98:d0:8b:14:bf:59:
f4:56:b2:f6
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUMptyvMAjKXqhqesvW6zH7c05O7IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMTIxMDYyMzMyWhcNMjYwMTIwMDYyODMy
WjAzMTEwLwYDVQQDEyg2Mzg4QjlFRjE0MUVFMzMxQjY1MkQ2RDQ5RTIzMzRCMEQ2
OTREMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSzOBPa2ePoh
FH5MJNG/HF62VCz4f3BsXZNDzwJ2x6NppqyZMwQkPgtoR6/Ha+xivAIkmb0d4sNg
gjZtcFeGi5SyRf+JTxo8+zucXkfLD+ONzso/LX0UImXtNk4rhXxP//yhx8py0Z2B
cQs360lXsdI+djRWkjxN7XTXNfcY7RrHzU87BeIuTiAVZizbQwGdtl6HUo054+1u
Tesssvl3xc+EZ4op1RxvHXWRnEjeeNSrcYiiJwxRWee0gmUnvsY/Fi7fPeLVOLdF
UZI7BMJc/H8WdLDGhMRW5IiCXLimuUIaD6Vb298Ua3p3/4mLHqoGU7Ab4HVJJB9H
LCUWkwSB2wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFGOIue8UHuMxtlLW1J4jNLDW
lNAVMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzE5OTcwNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABdfezANBgkqhkiG9w0BAQsFAAOC
AQEAGIkX/3jkoAStzFn5Ak/y17VyqahlN926F9g85FyJSCNwHGX+UD5oFKv6zqFm
EuC4frxnkm/bnb8NRE6EtjiL5LEKCHPkMF7mQgoGUx1TICr2ITRd/jIDNeHuYD/L
Ga90CcBYqMMrwP9PXqgf1rJwKGwR/Wr74esqVn2dyzi0egzG1HEsT0sV4vC05Yf8
ISZPe/f+ptU1zy05Vz4apF/hieNPqHDGmS1CJe2R5TGe4zTcM2ePUoOLZzeA/dnA
iSkkNK2fLUTPpKPv1/6DoEdZdm+YE1b+AOZnFXwl8wILtz4xv+ULhcH9U9kIwAzL
yrLvgXZcazAsmNCLFL9Z9Fay9g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:21 2025 by rpki-client