Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36352.roa
File: AS36352.roa (raw, json)
Hash identifier: LLkUynoV1d/7+oFIR5815c3sAnMLQC2VHaixVF/H1OM=
Subject key identifier: F1:66:28:CE:13:17:DD:CC:47:9E:36:EC:29:54:2D:8F:5E:6E:7A:2E
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 7801C17E35F8BAF8D7A8310DE97B64E1CEF8B36F
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36352.roa
Signing time: Wed 12 Feb 2025 16:29:50 +0000
ROA not before: Wed 12 Feb 2025 16:24:50 +0000
ROA not after: Wed 11 Feb 2026 16:29:50 +0000
asID: 36352
IP address blocks: 140.99.244.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:01:c1:7e:35:f8:ba:f8:d7:a8:31:0d:e9:7b:64:e1:ce:f8:b3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Feb 12 16:24:50 2025 GMT
Not After : Feb 11 16:29:50 2026 GMT
Subject: CN=F16628CE1317DDCC479E36EC29542D8F5E6E7A2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:53:a0:ea:c8:4e:72:03:6c:ab:e7:a8:76:
f6:81:10:70:2d:74:36:a7:e6:fc:53:7e:84:42:0f:
9d:80:4a:3e:ef:66:2b:2b:ff:8d:ef:e7:5c:8b:63:
69:53:f9:3a:85:62:fb:d3:2a:2d:6d:ee:20:67:16:
c2:73:d8:b0:de:ff:f7:ee:0d:c3:0e:37:97:4d:76:
b2:f5:ac:d6:b9:44:79:34:2c:cf:08:08:03:70:f2:
84:88:e2:70:b1:a2:ad:a5:3d:60:fa:35:af:3f:07:
28:c8:fd:15:44:e8:ea:91:ac:d9:c5:e3:2b:4c:4e:
f8:d6:9d:a4:43:e1:1b:28:64:93:ae:07:2b:b6:72:
21:5f:11:69:9d:e6:36:70:ef:29:58:4c:11:14:e0:
48:a3:18:a0:5c:f8:27:1a:af:1b:7d:7e:0d:c7:44:
41:6e:eb:ae:22:4a:e3:e3:22:e3:2c:b0:d8:55:b7:
bd:c7:d1:b6:c3:92:56:bb:5c:ac:83:b3:b2:ab:77:
1e:53:ba:85:7e:11:2f:98:e2:a1:a4:5c:61:89:4f:
95:94:0a:f3:fd:9c:52:1f:79:1f:af:44:49:9a:f6:
5c:59:1d:92:aa:37:00:43:bf:39:f8:9e:6c:da:32:
3a:d2:59:8a:f3:4a:02:30:10:f0:94:a9:ed:a4:84:
86:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:28:CE:13:17:DD:CC:47:9E:36:EC:29:54:2D:8F:5E:6E:7A:2E
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36352.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.244.0/23
Signature Algorithm: sha256WithRSAEncryption
57:82:77:1c:20:ed:9d:b9:ca:6f:56:2a:30:0e:45:b6:bf:89:
df:0b:6b:63:ae:83:34:df:9b:d0:6a:c3:26:05:6f:04:16:70:
26:17:15:44:c8:bc:31:72:77:d3:75:ce:d9:28:66:08:01:68:
03:15:d0:ac:5e:40:9e:67:11:25:c0:f9:3e:12:cd:85:ac:90:
30:f5:d2:c8:82:35:0b:94:3a:f2:97:e9:92:c0:0d:f0:a1:bf:
28:34:3c:fd:5d:73:52:08:4a:1e:0f:ec:30:f5:a3:18:bc:b1:
ec:10:37:b6:d6:be:eb:4a:fb:f1:2f:57:20:da:fb:a1:4c:db:
e5:1e:0b:5e:61:df:bc:1d:36:4d:01:e1:a9:ea:76:bc:ab:6a:
d1:79:fd:b4:47:54:4a:45:61:54:34:c4:65:23:f9:37:79:94:
ee:8c:47:40:11:e8:67:4d:dd:fc:c2:41:4f:b8:48:eb:84:e4:
97:9c:a2:ab:ae:e5:58:b1:e9:0d:e5:dd:e1:c8:bc:ef:4d:af:
1b:98:c2:e0:4b:bb:29:9c:97:7e:73:f1:d3:58:69:96:05:02:
ce:5c:2b:6f:db:18:ec:8e:c0:41:c2:a5:a1:c2:16:44:e4:d6:
7c:e6:88:86:b5:15:72:e2:76:d3:a9:2f:db:c8:a2:85:f5:3c:
f0:7d:d2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:41 2025 by rpki-client