Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS996.roa
File: AS996.roa (raw, json)
Hash identifier: 0a9BF2hQ7rW0IPa4lE3pr5LTj9szPAoAuaE7TgcH7KU=
Subject key identifier: 31:02:15:D9:A8:21:73:D8:A4:E4:04:D0:A8:8B:74:D2:8F:61:A6:A6
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 3CFFE9927C074E6C962975CBF93388E59FB822D5
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS996.roa
Signing time: Sat 22 Mar 2025 08:45:38 +0000
ROA not before: Sat 22 Mar 2025 08:40:38 +0000
ROA not after: Sat 21 Mar 2026 08:45:38 +0000
asID: 996
IP address blocks: 89.35.93.0/24 maxlen: 24
89.35.94.0/24 maxlen: 24
89.35.95.0/24 maxlen: 24
162.213.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ff:e9:92:7c:07:4e:6c:96:29:75:cb:f9:33:88:e5:9f:b8:22:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Mar 22 08:40:38 2025 GMT
Not After : Mar 21 08:45:38 2026 GMT
Subject: CN=310215D9A82173D8A4E404D0A88B74D28F61A6A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:0a:72:37:bc:e9:91:f7:ed:5a:fc:1c:95:
a4:cf:99:30:b8:da:95:14:df:4d:fe:13:69:57:4b:
89:7f:b7:56:32:ab:e0:c8:3c:45:6b:7e:f2:80:53:
70:08:40:36:8c:1a:0d:6a:fa:44:9b:01:19:e2:a9:
c5:6e:bd:d2:ca:95:4d:70:5e:40:f6:ed:15:f9:70:
44:7a:70:58:65:6d:23:6b:5b:c9:80:72:4b:b2:11:
e7:97:c8:6b:aa:6a:8c:eb:f7:38:b9:a7:ef:22:e0:
51:49:28:c9:40:a8:aa:b8:80:c9:e2:2e:6d:c8:09:
6d:fe:9c:4a:a4:99:ec:43:de:a5:32:23:b9:78:ef:
7a:ab:62:ab:10:8a:f6:e2:49:08:8d:de:fe:fc:95:
b4:24:06:09:0a:4a:43:7a:d0:21:f0:7a:b0:58:af:
4f:c2:00:5d:6c:c3:5b:09:72:4a:5d:c0:e6:98:0b:
c3:53:de:64:c5:d4:df:4d:a4:70:a4:ba:a1:ae:3f:
0f:fb:23:5f:3d:69:11:f0:f4:1d:5b:dd:ce:84:c4:
26:e2:e9:21:82:01:a2:05:f2:0a:61:47:ea:60:3e:
f1:f9:e5:a4:8c:a0:e0:5c:2e:5f:13:50:c4:92:69:
dd:74:82:81:db:aa:8b:b0:91:58:75:55:3e:59:e6:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:02:15:D9:A8:21:73:D8:A4:E4:04:D0:A8:8B:74:D2:8F:61:A6:A6
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.93.0-89.35.95.255
162.213.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:cb:97:b6:d4:4f:a2:d1:06:e4:2e:82:e9:00:1e:ce:b2:8f:
f3:20:cc:12:09:73:02:52:d3:d4:56:f0:49:95:5a:09:c4:1e:
63:ca:54:0d:89:0a:70:9d:6a:f1:d2:74:7e:4d:e1:46:dd:a8:
c1:c8:58:ea:d3:f6:fe:83:c2:69:33:bd:dc:87:bb:56:50:e7:
86:82:9b:1a:89:c0:d6:e6:7a:6f:e0:59:6f:74:fc:c4:ad:b6:
99:63:04:c9:a8:71:a1:99:3a:de:5b:39:1f:bf:b6:16:71:58:
7c:d5:9a:06:c6:12:1d:b3:29:6a:f1:29:fe:f6:ca:61:b4:b4:
04:de:dc:80:72:86:93:ce:a0:87:5a:c6:2e:39:f7:4a:a2:3c:
2d:00:a9:9a:b3:b5:a6:30:63:f5:83:2a:fc:6d:da:44:11:e6:
a4:c9:e6:ea:35:3b:db:5c:c8:81:19:aa:bd:4b:84:2f:e8:73:
9f:5f:ad:6d:df:78:40:ec:75:84:66:ab:30:6d:87:ab:a3:fc:
6f:54:c4:48:bb:98:f6:a3:bf:df:7f:c8:5d:94:32:09:7f:8d:
89:f6:e7:19:75:af:a2:1e:9c:2d:86:22:74:93:24:2a:6c:09:
d5:a2:26:db:73:32:bc:ce:b9:8e:e0:fa:13:7e:1e:59:db:3d:
5d:cd:26:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:09 2025 by rpki-client