Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230342e302e302f31362d3136203d3e2035363530.roa
File: 34372e3230342e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier: rtPDDWYla3SAuCQmJfFedHlhsNsw/J2icFo4k1ZmTtA=
Subject key identifier: 2C:8E:7B:AC:21:F2:CF:3C:70:EB:7C:2D:93:59:14:5D:15:76:4C:AC
Certificate issuer: /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial: 71A54884E37A5B6F9679447336006F5B58571DA2
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230342e302e302f31362d3136203d3e2035363530.roa
Signing time: Tue 25 Feb 2025 05:08:51 +0000
ROA not before: Tue 25 Feb 2025 05:03:51 +0000
ROA not after: Tue 24 Feb 2026 05:08:51 +0000
asID: 5650
IP address blocks: 47.204.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a5:48:84:e3:7a:5b:6f:96:79:44:73:36:00:6f:5b:58:57:1d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Validity
Not Before: Feb 25 05:03:51 2025 GMT
Not After : Feb 24 05:08:51 2026 GMT
Subject: CN=2C8E7BAC21F2CF3C70EB7C2D9359145D15764CAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:9b:1f:4c:f8:fd:03:0e:b2:7e:a9:03:5b:
34:b8:bf:e7:50:b6:1b:b6:c2:8d:40:e3:53:64:7f:
3d:2e:eb:75:e9:5a:f2:87:69:95:6f:4e:b3:1a:9d:
c9:cf:68:c1:62:62:f2:b5:db:a2:2c:e8:50:3c:07:
e0:57:f0:3c:51:69:5b:44:94:06:4d:05:0d:b4:c2:
ed:10:32:cb:ce:3e:c2:21:d3:b1:96:08:26:d8:31:
a2:43:48:72:7f:9d:d4:9e:1b:07:39:f9:49:21:ca:
6d:7d:dc:8a:c4:9f:3c:2d:0b:3d:dc:e4:2c:71:3a:
bd:3c:e6:84:bc:eb:0a:d2:71:6b:f7:f2:0d:70:69:
b2:60:f2:4c:fa:3b:9e:6e:bc:7f:06:98:35:ae:2f:
6c:54:c9:7e:4e:95:2c:37:13:35:e3:7a:48:c2:e4:
6c:3b:47:c9:1d:ed:93:90:09:9f:de:d2:48:d6:a0:
81:1f:fe:30:8d:6e:70:c4:2f:e2:79:31:f6:60:4c:
99:03:37:55:04:bf:69:e6:8e:01:a8:2c:bb:d1:63:
50:bb:6e:f4:0a:c2:fd:38:ab:62:ec:10:6b:d9:8e:
73:1b:50:3c:88:34:53:3d:a3:08:d4:d1:46:c6:3d:
7f:2d:6d:c0:21:40:51:72:11:d8:3f:3e:d0:7e:4d:
42:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8E:7B:AC:21:F2:CF:3C:70:EB:7C:2D:93:59:14:5D:15:76:4C:AC
X509v3 Authority Key Identifier:
keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230342e302e302f31362d3136203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.204.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:3e:3a:30:21:d8:14:a7:73:35:d9:02:c0:e8:24:7a:40:22:
3f:7a:a0:4f:0d:a1:ed:bf:d3:eb:dc:74:3e:24:20:f1:15:18:
32:b2:36:2c:c1:17:8f:1c:1e:3c:fe:f1:da:fc:60:91:99:d2:
bc:95:41:a8:e4:d1:9c:38:e2:db:96:83:9a:c8:51:00:51:f3:
70:c6:29:57:c9:24:63:22:f6:ae:2c:c8:b1:a1:05:3a:70:56:
a9:be:81:41:69:5b:d3:bb:a8:75:fb:03:56:24:63:28:b9:97:
ab:5a:e4:fa:3d:08:d0:85:cb:20:40:72:9c:42:47:ab:f5:e5:
6d:9d:c0:17:ab:b2:55:f6:4b:fd:53:14:4f:54:5b:80:44:85:
12:6c:85:3d:07:21:a3:41:0d:f4:7e:b5:62:89:38:ef:d7:25:
a0:ad:02:6e:45:b5:53:1f:a0:19:95:e9:2d:a5:c6:dd:42:f9:
2e:2c:fa:be:2c:ee:e7:cf:9e:44:07:38:99:8a:28:03:a8:eb:
15:e4:08:17:ce:e1:b6:4a:b7:e7:43:a6:3c:8a:fe:80:a3:53:
37:2e:e7:41:3c:6b:1b:54:37:19:09:88:92:88:e1:1b:1d:65:
78:75:05:06:d5:31:3f:47:d1:bf:ca:28:09:80:c3:25:3c:24:
8f:96:e0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:34:21 2025 by rpki-client