Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e20323133373333.roa
File: 36362e3131382e3234372e302f32342d3234203d3e20323133373333.roa (raw, json)
Hash identifier: 2scphLR4Ymt7WHAC7m63+7sAq9/ai3srdHTuwBF/tY4=
Subject key identifier: 85:16:A0:31:2C:07:69:2E:54:84:64:10:E6:5B:49:F4:A7:36:64:B2
Certificate issuer: /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial: 193F9FA13D0E5E8922F1D5BFCAF748FD2FFB5B52
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e20323133373333.roa
Signing time: Fri 20 Dec 2024 11:54:41 +0000
ROA not before: Fri 20 Dec 2024 11:49:41 +0000
ROA not after: Fri 19 Dec 2025 11:54:41 +0000
asID: 213733
IP address blocks: 66.118.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3f:9f:a1:3d:0e:5e:89:22:f1:d5:bf:ca:f7:48:fd:2f:fb:5b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Validity
Not Before: Dec 20 11:49:41 2024 GMT
Not After : Dec 19 11:54:41 2025 GMT
Subject: CN=8516A0312C07692E54846410E65B49F4A73664B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:5e:06:60:f8:b7:6b:0d:45:b8:b5:d2:1d:
6a:32:0d:75:d4:fb:4b:3f:7c:ba:41:32:84:c8:e9:
2b:14:1c:f5:9e:97:13:20:0a:06:88:b8:bc:b4:11:
a7:d9:92:8a:4d:7c:11:19:58:d4:11:eb:d6:0e:41:
64:f0:f0:e8:5a:f5:48:3f:5e:f7:ea:e2:91:d5:61:
1c:c6:5d:fa:d5:b7:2c:fd:a0:fa:77:1e:a4:07:0c:
0d:28:dc:d1:76:07:d1:ed:41:48:a0:29:59:89:c8:
86:e2:f2:25:18:59:7d:12:43:fd:f0:6c:d7:7c:c5:
ea:12:51:04:77:c6:bb:0f:f0:6e:a0:2a:21:dc:80:
35:43:3c:1a:ee:68:19:56:36:0d:c6:8e:85:13:0b:
4a:ed:61:f8:63:7a:ba:db:5e:a5:c3:36:0b:5b:20:
73:4e:ea:f6:ff:a4:8d:b1:f4:b0:a3:4e:d3:c0:20:
89:c7:f1:23:77:ad:96:6e:ab:16:77:4f:94:ac:2d:
8d:8f:6a:82:97:e8:d0:d7:5b:fc:aa:4a:cb:43:14:
2b:3b:15:35:62:0c:79:22:b4:e5:d5:a7:85:78:e2:
92:63:73:fa:95:2c:a7:30:b8:98:9c:33:73:ea:02:
1b:21:bc:c8:dd:f7:1f:88:76:ca:75:db:76:ed:69:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:16:A0:31:2C:07:69:2E:54:84:64:10:E6:5B:49:F4:A7:36:64:B2
X509v3 Authority Key Identifier:
keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e20323133373333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.118.247.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b6:45:92:d7:ab:8c:35:a5:b2:fc:dd:03:c8:2e:2a:7e:93:
cf:94:97:bb:29:ff:52:0d:ca:74:e7:60:1e:42:40:32:77:83:
c8:34:e9:10:89:90:ab:3a:fe:52:c2:a3:ea:40:99:4b:65:83:
bb:55:c2:5b:ee:ed:a1:2c:2d:ea:1c:66:d3:94:f1:ef:eb:8f:
ab:c1:66:ea:76:dd:07:99:bc:f6:b9:81:d6:0f:52:58:9c:9c:
ea:b9:99:8a:30:05:9a:90:42:b4:cf:98:ca:d1:65:b0:6e:b7:
5a:9c:1a:c4:0c:0c:5d:36:2b:f1:4a:34:e8:e8:86:08:13:70:
9e:19:dd:70:42:22:d8:c5:af:49:67:27:9e:bd:b4:42:13:c9:
32:8d:d3:27:40:df:3c:25:f6:0f:87:22:1f:aa:b9:25:8d:4e:
5a:75:c8:d3:cf:8a:4e:ec:0b:ee:f7:ca:b1:5f:34:17:5f:99:
e9:cf:20:7b:2b:05:03:32:48:0b:0f:14:c9:f1:9f:56:24:d7:
a5:bf:5e:74:99:9b:7a:1c:07:0a:13:fb:c4:07:4e:a1:44:78:
b1:df:68:4c:30:e0:b7:4c:ed:ed:73:80:75:cd:60:c7:b9:1b:
6d:72:20:6b:4e:a7:6b:51:b3:91:7f:dd:87:f6:78:b2:56:e0:
a4:35:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:48 2025 by rpki-client