Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS34927.roa
File: AS34927.roa (raw, json)
Hash identifier: Fx8+1eP8D/YRkno93AiZeuxrEpw3oeW/dkNWZV6i3IA=
Subject key identifier: 63:22:B3:9E:13:3B:F0:34:6D:66:33:D7:D2:8E:4C:7E:1E:D1:95:57
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 355D051A01DADFC2C71B298647BFF5420AB5112E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS34927.roa
Signing time: Tue 04 Feb 2025 02:20:31 +0000
ROA not before: Tue 04 Feb 2025 02:15:31 +0000
ROA not after: Tue 03 Feb 2026 02:20:31 +0000
asID: 34927
IP address blocks: 118.91.186.0/23 maxlen: 24
144.48.81.0/24 maxlen: 24
185.121.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:5d:05:1a:01:da:df:c2:c7:1b:29:86:47:bf:f5:42:0a:b5:11:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 4 02:15:31 2025 GMT
Not After : Feb 3 02:20:31 2026 GMT
Subject: CN=6322B39E133BF0346D6633D7D28E4C7E1ED19557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:42:6f:91:bc:37:cd:bf:4e:b1:0a:0a:f1:
f7:db:a9:c5:1e:24:65:54:55:d9:5e:e2:6f:94:51:
94:d8:8e:8f:40:a0:6d:a4:48:85:97:ef:22:61:e3:
75:83:1e:2a:cd:f6:8a:aa:48:61:d5:3a:20:d1:d5:
b5:2a:1a:d9:15:80:7f:b9:70:10:fd:66:d7:ae:d3:
dc:f0:74:04:14:7b:81:36:be:94:c3:97:6a:6a:39:
f6:8d:de:5f:64:08:5e:a1:c8:c8:a9:ba:e8:d3:c4:
7d:17:c7:90:d7:44:69:06:13:25:89:cb:d5:e0:15:
75:ac:5d:19:b6:82:93:4b:d6:a9:7c:b8:83:09:6d:
b8:dc:2f:c8:e8:43:d1:fd:5d:76:71:ad:7c:0c:05:
94:ed:26:f5:6c:26:dd:51:d3:73:92:45:b2:bc:cc:
a0:ef:22:54:c6:1b:26:27:d9:ca:fb:e1:1c:32:74:
a1:6f:35:1f:0f:23:e2:d4:0b:92:f4:28:a7:43:f5:
75:ca:a1:97:d3:e0:13:1c:b3:73:ce:58:8c:16:12:
00:b4:bb:6f:8d:c5:cd:bf:c9:6d:77:94:13:63:b4:
ea:99:05:a2:cf:89:8f:8b:f6:b3:b1:af:60:d3:2c:
59:ba:20:a0:bc:19:53:e0:2a:a6:50:48:86:1c:e7:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:22:B3:9E:13:3B:F0:34:6D:66:33:D7:D2:8E:4C:7E:1E:D1:95:57
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS34927.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.91.186.0/23
144.48.81.0/24
185.121.169.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:de:18:25:01:20:f5:77:2e:8c:8a:db:7d:9b:5c:0b:72:52:
a7:37:63:50:8b:6f:66:e0:af:cc:5a:49:8e:38:ee:8a:f9:47:
1b:f4:8a:4c:26:f3:34:4c:b0:5e:10:55:38:6f:06:22:66:1e:
13:d5:46:17:8d:3c:0d:1b:4b:6a:ed:25:e8:84:8e:33:8e:61:
15:b3:4b:19:f3:f1:8b:c8:55:bc:c3:74:33:fe:c5:88:63:f8:
e9:00:f7:c4:27:11:df:a8:e2:a1:4a:09:55:4c:ab:eb:81:9c:
31:b2:c0:2a:63:23:a0:77:ce:bc:65:4b:d7:f5:83:83:68:cb:
38:d1:50:6a:90:03:82:38:fa:ca:0d:98:eb:54:94:9f:11:c5:
e4:aa:e7:52:bd:05:be:d8:09:b9:ac:84:87:75:09:ed:71:54:
b9:51:5d:7f:26:27:b4:aa:80:d8:73:09:6e:a8:8f:15:2c:18:
24:2b:38:d1:8c:e5:84:c0:4b:94:57:f2:32:97:2c:bf:c0:ff:
7d:70:a7:73:8b:f7:36:e4:cf:1d:73:46:58:ba:3c:ee:37:fe:
a8:4e:13:c1:93:37:b7:29:26:d0:42:f9:d9:3d:69:bb:e3:75:
66:07:b8:3d:56:26:69:37:26:bf:30:3d:70:83:24:9e:f1:de:
9c:3c:18:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:40:26 2025 by rpki-client