Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: y5EUhHlnd6Xa+0y5cSS6Od0t5To2shzn05WaxnL0lwM=
Subject key identifier: 73:98:E3:2D:FB:DC:0F:1B:31:16:5C:45:19:D3:E3:C2:6A:42:A5:85
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 61028ED1F1575A7EE69CA362A9F631076A000CD2
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36530.roa
Signing time: Tue 11 Feb 2025 00:01:57 +0000
ROA not before: Mon 10 Feb 2025 23:56:57 +0000
ROA not after: Tue 10 Feb 2026 00:01:57 +0000
asID: 36530
IP address blocks: 104.234.158.0/24 maxlen: 24
104.234.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:02:8e:d1:f1:57:5a:7e:e6:9c:a3:62:a9:f6:31:07:6a:00:0c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 10 23:56:57 2025 GMT
Not After : Feb 10 00:01:57 2026 GMT
Subject: CN=7398E32DFBDC0F1B31165C4519D3E3C26A42A585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:55:c8:5f:cd:fd:79:f4:cc:c7:45:05:d4:
e7:a5:e8:00:8f:e9:b2:7c:f7:1d:86:56:67:24:16:
8b:67:fb:6d:7f:d2:50:93:c9:72:6e:87:a1:a9:40:
19:b0:28:2d:06:f8:67:08:e7:42:c1:31:28:b7:12:
8d:5e:b6:90:a4:2d:d9:8a:4a:e5:35:b5:4d:f3:37:
54:fa:b9:a4:3f:91:79:d8:bf:93:83:33:e6:82:98:
5d:08:f9:91:89:9f:3d:7a:cb:5c:4b:82:e6:ff:0b:
7a:d0:90:9a:d1:e9:7d:59:88:48:a3:a7:b5:52:a3:
12:31:9c:e3:6b:46:54:4b:45:04:f7:19:94:a2:84:
a9:9b:46:12:da:87:b9:04:46:37:2f:0f:3a:da:7e:
e5:ab:0c:33:d2:9a:54:df:5d:63:41:cf:88:fb:a2:
6f:0e:f1:06:86:53:42:1a:35:86:48:90:cc:cc:3b:
03:95:57:df:34:de:ef:6a:d4:f4:44:fb:21:8d:63:
d8:ed:8c:6e:a5:aa:92:cd:a0:51:08:17:4d:59:dc:
dd:fa:4b:44:05:7e:37:79:e2:13:b7:c1:74:4c:91:
24:7b:b3:9e:b2:90:a1:a5:43:72:33:74:32:6f:5f:
d8:45:e1:ba:57:01:d2:dd:64:c9:4c:bf:b0:4c:98:
a7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:98:E3:2D:FB:DC:0F:1B:31:16:5C:45:19:D3:E3:C2:6A:42:A5:85
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.158.0/23
Signature Algorithm: sha256WithRSAEncryption
29:76:7a:55:4e:dd:d0:21:e9:a3:71:9c:5a:bf:06:06:36:a5:
05:f3:ab:b8:b8:23:2f:d9:a0:78:d1:37:94:65:a0:9e:5a:69:
03:1d:83:70:76:e4:ed:b2:95:db:7a:af:b7:4d:b0:99:5a:f3:
d9:6c:ff:f3:9f:36:87:0a:80:1e:4f:12:a9:6b:b4:b6:13:17:
db:3c:0d:86:08:4f:5b:75:69:04:8d:d7:6c:eb:2c:b7:b2:d0:
ec:da:b8:82:5a:ae:75:ae:f3:f5:c4:8b:5e:12:22:e7:f2:dd:
d5:00:84:bf:0a:e5:c4:62:e8:e4:d4:ba:e2:5f:e2:0f:1b:89:
09:a8:65:61:40:4a:91:2b:e1:9f:3a:13:d8:85:2c:7d:f1:cd:
73:cd:e0:35:16:db:7b:57:db:84:c1:72:a3:f4:81:92:5a:f4:
01:fc:d1:c2:ea:b3:ae:cb:f5:62:d7:14:6f:a8:9f:82:4f:b1:
15:a9:5d:b8:dd:4c:f0:67:ef:53:e2:e0:67:a2:9f:f2:68:a8:
2b:35:00:2a:e8:b3:f9:d7:17:93:fe:cf:9b:d0:ab:ad:cd:5b:
29:c5:e4:d9:ae:47:fd:cf:96:21:6b:5a:5a:1a:7e:78:20:f8:
fd:0f:82:79:f9:a0:22:6c:4d:65:8e:c7:e4:0e:d8:14:e0:8a:
d0:18:dc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:27 2025 by rpki-client