Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS400529.roa
File: AS400529.roa (raw, json)
Hash identifier: 25QtcpjA3tz4ke2qcHNeojZWMrPORJrD4OR8yfdQF5o=
Subject key identifier: C5:2B:78:A9:CB:A1:0B:7D:6C:5E:C2:40:10:0A:72:1A:44:51:D2:BB
Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial: 1B1585842B8494CBF4E7D72385798D05528DE401
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS400529.roa
Signing time: Fri 15 Nov 2024 18:38:31 +0000
ROA not before: Fri 15 Nov 2024 18:33:31 +0000
ROA not after: Fri 14 Nov 2025 18:38:31 +0000
asID: 400529
IP address blocks: 205.234.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:15:85:84:2b:84:94:cb:f4:e7:d7:23:85:79:8d:05:52:8d:e4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Validity
Not Before: Nov 15 18:33:31 2024 GMT
Not After : Nov 14 18:38:31 2025 GMT
Subject: CN=C52B78A9CBA10B7D6C5EC240100A721A4451D2BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:e7:e5:e5:a1:5b:fc:e1:61:57:7c:2f:b1:
d3:a4:0f:63:71:72:04:74:4e:f3:a6:f4:0c:7b:a7:
eb:fd:aa:1f:80:ce:9a:a1:be:a7:39:a4:5d:9d:1e:
70:42:d2:a6:b8:1d:5f:f7:07:01:dc:70:fc:9d:14:
21:fd:dd:2f:26:99:ee:ca:a4:b5:12:43:a5:88:26:
06:5d:a1:a6:50:fa:87:ad:44:f6:07:1c:1a:88:69:
8b:a6:42:44:0b:fb:8e:dc:db:82:dc:7d:7e:1d:9c:
7d:f8:9c:24:9a:fc:ec:98:61:39:52:68:55:33:9c:
48:b0:d0:87:c7:07:5e:b8:0a:6f:5f:5c:fb:5f:8b:
15:6d:71:d8:53:d4:1e:12:a3:8c:cf:ad:40:f1:40:
73:26:52:ed:5b:84:3d:3f:5e:eb:81:6c:fb:51:13:
bc:a7:c4:78:5b:b6:7c:85:f4:ac:72:2a:a2:2f:fd:
14:28:07:32:57:3a:3f:27:03:96:84:31:9f:8e:4b:
06:fa:cc:dd:a2:c6:46:97:12:73:07:1a:29:4d:e8:
7e:12:1f:f9:e1:5a:a4:e3:90:d7:95:58:dc:9f:3b:
05:bb:90:5e:bc:1e:aa:ac:92:17:3a:17:11:44:26:
ea:74:9b:05:5e:eb:5f:04:2f:da:6c:58:b6:4c:7c:
6b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2B:78:A9:CB:A1:0B:7D:6C:5E:C2:40:10:0A:72:1A:44:51:D2:BB
X509v3 Authority Key Identifier:
keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS400529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.243.0/24
Signature Algorithm: sha256WithRSAEncryption
30:65:68:bd:8f:26:37:83:97:ff:da:3c:2c:4d:04:9a:53:d8:
45:e1:bb:3a:2c:ba:25:4e:5a:be:ce:a1:21:28:05:37:b3:f3:
1c:f5:58:e6:7a:e0:fe:79:f8:c6:7a:eb:88:4c:1f:0a:a2:8a:
dc:55:49:74:8b:8d:57:e3:54:73:89:30:86:3d:32:87:be:81:
43:19:36:c4:13:80:01:21:83:12:0b:eb:10:a8:67:d2:8d:aa:
5a:84:5c:ca:76:f7:04:c3:32:14:5e:24:cb:bc:e5:a4:19:d4:
0c:af:e1:5d:a8:28:b1:0c:e9:e6:8d:fa:f1:0b:e5:b6:16:ba:
4d:ef:26:fa:93:4f:93:e2:dc:0c:86:dd:7c:bc:e7:64:fa:d2:
fa:2f:71:71:f0:d1:b5:95:2e:8d:a6:38:f5:ee:2c:b7:75:a2:
a4:48:c8:63:d8:49:4a:58:58:de:de:eb:3a:54:2c:c2:44:05:
6b:6d:f4:9b:a5:b8:b1:35:f0:45:7c:a1:ed:04:b8:b3:08:c1:
a4:84:a6:f3:f1:1c:d8:5b:7e:b8:e9:d5:6c:76:60:13:33:1c:
ae:75:0a:c6:09:1e:56:a0:2b:d3:23:09:6d:cb:2f:58:b6:e3:
55:58:01:a8:04:17:e1:0a:26:8f:9d:9c:1b:20:df:64:c9:09:
91:d1:e0:89
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUGxWFhCuElMv059cjhXmNBVKN5AEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjQxMTE1MTgzMzMxWhcNMjUxMTE0MTgzODMx
WjAzMTEwLwYDVQQDEyhDNTJCNzhBOUNCQTEwQjdENkM1RUMyNDAxMDBBNzIxQTQ0
NTFEMkJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6bn5eWhW/zh
YVd8L7HTpA9jcXIEdE7zpvQMe6fr/aofgM6aob6nOaRdnR5wQtKmuB1f9wcB3HD8
nRQh/d0vJpnuyqS1EkOliCYGXaGmUPqHrUT2BxwaiGmLpkJEC/uO3NuC3H1+HZx9
+JwkmvzsmGE5UmhVM5xIsNCHxwdeuApvX1z7X4sVbXHYU9QeEqOMz61A8UBzJlLt
W4Q9P17rgWz7URO8p8R4W7Z8hfSsciqiL/0UKAcyVzo/JwOWhDGfjksG+szdosZG
lxJzBxopTeh+Eh/54Vqk45DXlVjcnzsFu5BevB6qrJIXOhcRRCbqdJsFXutfBC/a
bFi2THxr7wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFMUreKnLoQt9bF7CQBAKchpE
UdK7MB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzQwMDUyOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM3q8zANBgkqhkiG9w0BAQsFAAOC
AQEAMGVovY8mN4OX/9o8LE0EmlPYReG7Oiy6JU5avs6hISgFN7PzHPVY5nrg/nn4
xnrriEwfCqKK3FVJdIuNV+NUc4kwhj0yh76BQxk2xBOAASGDEgvrEKhn0o2qWoRc
ynb3BMMyFF4ky7zlpBnUDK/hXagosQzp5o368Qvltha6Te8m+pNPk+LcDIbdfLzn
ZPrS+i9xcfDRtZUujaY49e4st3WipEjIY9hJSlhY3t7rOlQswkQFa230m6W4sTXw
RXyh7QS4swjBpISm8/Ec2Ft+uOnVbHZgEzMcrnUKxgkeVqAr0yMJbcsvWLbjVVgB
qAQX4Qomj52cGyDfZMkJkdHgiQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:00 2025 by rpki-client