Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397441.roa
File: AS397441.roa (raw, json)
Hash identifier: gvqklrJkbpJm91rNqaj9NN0ueERlyNc9I4C0FCgjKvE=
Subject key identifier: F3:30:0C:1F:67:C6:3E:1B:2F:D1:9A:F8:8D:30:62:29:19:94:1F:CC
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 5ED18BFBA1D7699533E329EE23A826DCB1E20F00
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397441.roa
Signing time: Mon 03 Feb 2025 12:53:04 +0000
ROA not before: Mon 03 Feb 2025 12:48:04 +0000
ROA not after: Mon 02 Feb 2026 12:53:04 +0000
asID: 397441
IP address blocks: 199.103.94.0/24 maxlen: 24
199.103.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d1:8b:fb:a1:d7:69:95:33:e3:29:ee:23:a8:26:dc:b1:e2:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Feb 3 12:48:04 2025 GMT
Not After : Feb 2 12:53:04 2026 GMT
Subject: CN=F3300C1F67C63E1B2FD19AF88D30622919941FCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:3c:c4:fc:2d:14:58:86:21:9d:d1:45:9f:
ef:dd:31:40:c4:08:55:f2:44:46:95:25:44:08:d2:
5e:04:49:78:77:70:08:f7:4a:e6:09:e5:12:7b:ed:
47:22:96:7c:af:89:0a:30:60:bb:e8:e1:55:eb:71:
df:45:2c:7d:a6:3d:42:e6:a5:2a:3e:79:20:d4:24:
d9:59:0f:73:22:81:99:37:60:48:cc:87:7c:5d:c0:
88:d1:db:8a:2f:bd:94:12:3d:58:ef:d2:1f:ca:ac:
ce:f7:6f:6e:f4:7d:06:ce:41:3f:4a:20:da:ed:a7:
cb:60:2d:b0:d7:70:7f:75:f1:17:22:60:72:c1:f1:
51:82:e6:3b:63:ea:5f:7e:56:1f:58:32:fc:de:93:
37:b8:b2:78:39:1e:37:39:c9:ac:de:46:39:2d:0b:
2b:fc:71:45:0e:61:a1:2d:70:64:bc:fc:73:6c:f8:
06:4e:93:a5:7a:3b:4b:ae:0c:86:3c:ed:77:9f:0a:
53:cd:42:39:3e:4e:1e:08:f4:37:c8:07:e1:21:0c:
78:93:bd:83:b2:25:85:06:67:52:9d:16:c2:ea:68:
08:91:73:db:30:2a:7d:43:8c:30:47:ca:da:bb:ad:
4b:db:47:1c:73:42:6f:e5:1b:ea:83:55:e6:61:bb:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:30:0C:1F:67:C6:3E:1B:2F:D1:9A:F8:8D:30:62:29:19:94:1F:CC
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397441.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.103.94.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:75:ba:45:bf:2b:f8:a7:b4:7e:b5:c9:83:4b:db:23:f9:d2:
9c:7a:a1:16:1f:4b:40:a7:1f:a6:f3:f2:78:b9:37:e1:94:c4:
12:46:cc:11:7e:d3:45:75:f8:4b:ab:85:13:05:a8:22:c8:43:
92:d2:f8:3b:d1:a8:7d:88:48:1b:58:89:da:ae:74:26:d1:e4:
61:62:e8:76:6b:90:34:d0:27:39:ca:2e:12:c7:2f:be:25:e2:
55:e3:bd:77:58:bb:ce:45:4d:ff:09:ea:4d:36:97:2e:8b:e4:
24:91:21:d7:e9:7b:ab:a3:22:85:cb:64:c2:90:b8:05:0d:92:
36:96:5f:fd:fb:ae:1e:bd:ef:0e:87:33:59:85:0c:d4:17:68:
98:db:5b:77:d5:61:12:6d:c4:4b:4d:0b:37:27:05:77:64:21:
d5:f4:d7:23:73:a8:b2:bf:37:d1:7c:3e:7c:45:4a:10:dd:a6:
18:75:2f:ad:0a:aa:7a:5f:0b:3c:97:65:5d:a5:fe:b7:96:38:
74:9b:88:28:0d:9a:42:06:6d:8f:67:c4:14:09:ad:17:24:fd:
c5:45:b9:68:b1:1b:e6:f9:29:cf:13:c7:93:c3:3f:8e:a7:3e:
da:bb:17:6d:33:99:72:06:1f:03:a3:73:9e:cc:25:8e:56:c2:
ac:c5:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:00 2025 by rpki-client