Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa
File: AS5065.roa (raw, json)
Hash identifier: fZiMdWRf1UZl84PNFQ49Z4AXoCs4bvm4rd533uR32jE=
Subject key identifier: 22:6B:E8:DD:9F:89:EC:16:65:50:C3:C3:46:67:37:EA:9C:57:CF:30
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 15875167F159D4DAA29ECF5503D0AA0E3F5410BF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa
Signing time: Thu 13 Mar 2025 08:13:00 +0000
ROA not before: Thu 13 Mar 2025 08:08:00 +0000
ROA not after: Thu 12 Mar 2026 08:13:00 +0000
asID: 5065
IP address blocks: 23.94.142.0/24 maxlen: 24
162.213.2.0/24 maxlen: 24
190.92.160.0/22 maxlen: 24
208.76.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:87:51:67:f1:59:d4:da:a2:9e:cf:55:03:d0:aa:0e:3f:54:10:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Mar 13 08:08:00 2025 GMT
Not After : Mar 12 08:13:00 2026 GMT
Subject: CN=226BE8DD9F89EC166550C3C3466737EA9C57CF30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:3a:8b:da:83:34:bd:c0:9e:29:40:24:bf:
fb:8d:d3:eb:47:73:e1:4c:87:06:70:ae:0b:f8:21:
18:c9:6d:f0:e9:eb:de:0c:f4:b1:fd:b7:a6:d8:b2:
46:a4:9d:95:1f:62:1c:b2:01:59:1b:f0:b3:a2:6d:
76:2d:74:33:43:cd:9f:45:f0:ac:89:2c:77:5d:19:
2c:53:63:47:f0:69:64:b4:13:0f:be:eb:96:0b:27:
da:e4:fd:df:80:f7:54:96:76:0a:a9:ea:62:13:09:
be:ea:95:87:dd:26:ba:a1:51:ec:04:ed:fa:c9:19:
31:4d:e2:50:86:cf:d8:8c:c6:26:31:51:0d:70:f4:
bf:48:dd:2d:0d:36:b2:11:6b:e8:cd:e2:be:58:6d:
29:a8:4b:fc:9a:44:f4:0b:20:8f:9b:de:48:74:16:
bf:2b:07:d3:04:c0:45:ae:cc:7b:90:b1:6d:3e:d7:
b9:52:08:b2:09:42:c7:36:bf:52:c1:32:23:bc:50:
52:66:dd:85:85:b0:80:76:69:0b:0b:46:e7:74:34:
17:fe:1a:dc:cb:b6:a0:f8:7f:00:52:15:d8:84:77:
05:08:83:d0:ae:ca:7a:03:fe:08:3a:0c:01:17:17:
fe:93:db:9c:c3:9a:2b:f3:4e:92:cd:72:15:c1:ee:
ce:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6B:E8:DD:9F:89:EC:16:65:50:C3:C3:46:67:37:EA:9C:57:CF:30
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.94.142.0/24
162.213.2.0/24
190.92.160.0/22
208.76.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:8b:70:0f:df:02:28:29:d5:d7:5a:66:8e:26:39:2f:54:bd:
09:7b:09:86:75:9a:c6:6f:43:c4:06:64:46:c6:12:16:be:bf:
11:b0:59:cc:20:60:17:3d:af:9d:a4:69:ab:fe:c1:b7:dd:31:
2a:f0:f8:d3:e7:b0:27:2d:e8:14:c4:ad:dc:26:61:68:6a:95:
19:80:33:21:3f:7b:54:21:71:a0:4a:47:cb:cd:8b:80:ce:d0:
0d:4b:f9:c1:70:8c:3d:cd:14:39:28:6b:fe:b2:33:66:e0:36:
24:e3:df:1b:5a:7f:21:88:31:22:9f:41:a3:a5:c3:31:a1:69:
23:5f:58:ca:05:1e:80:4f:c9:d9:0a:5b:be:52:47:30:6f:26:
88:64:d5:52:37:32:2d:b2:ee:1e:3f:29:26:5d:77:8b:0d:6c:
ee:db:7a:8b:e4:a3:3d:c9:21:47:2d:e2:04:2d:2d:78:b4:87:
72:aa:91:a9:cd:99:77:79:6c:da:99:98:bb:6c:32:e9:92:0e:
67:f0:6e:41:d2:49:7d:fb:04:ba:5a:8b:b1:90:27:db:9a:7d:
c8:bf:85:a0:77:df:5a:36:4b:cb:aa:41:eb:47:a5:1c:89:8e:
29:ac:58:a0:29:e1:7e:61:ce:9b:08:3c:c6:a0:88:a3:8c:d6:
e1:a9:d5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:41 2025 by rpki-client