Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e2037303138.roa
File: 36342e3235332e38362e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier: 17m9DE6F6MbIA1CA2Mnm0AlMH4xfYDEOhdTBzvX+RNY=
Subject key identifier: D7:82:D5:88:2F:B6:73:A9:42:71:1B:AF:64:24:84:30:A4:0D:D3:79
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 14A0429ED72D1786B9365D9C9C1E9A86B40A26DE
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e2037303138.roa
Signing time: Sat 14 Dec 2024 14:37:20 +0000
ROA not before: Sat 14 Dec 2024 14:32:20 +0000
ROA not after: Sat 13 Dec 2025 14:37:20 +0000
asID: 7018
IP address blocks: 64.253.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a0:42:9e:d7:2d:17:86:b9:36:5d:9c:9c:1e:9a:86:b4:0a:26:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Dec 14 14:32:20 2024 GMT
Not After : Dec 13 14:37:20 2025 GMT
Subject: CN=D782D5882FB673A942711BAF64248430A40DD379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:f1:66:17:2d:d5:ae:2a:c9:c3:08:fe:03:
c5:67:d9:0c:f3:d9:02:80:66:c1:3b:d0:8b:f3:7f:
f3:1d:bc:d5:62:5b:1c:8b:53:a0:24:27:48:df:9f:
ca:9d:ec:4e:f9:54:d4:e5:cc:8a:05:79:61:a3:66:
21:93:12:c8:b3:48:c4:96:dc:1a:43:56:c2:73:5c:
70:ed:40:aa:1b:5d:80:5d:12:65:b2:54:b3:5e:2d:
62:16:48:0c:fb:15:53:96:7e:31:c0:77:0e:19:4b:
28:df:2b:97:91:cf:71:e7:fd:8a:b3:94:53:1e:78:
23:97:ea:32:d1:d0:83:63:32:2c:cb:d7:27:96:c6:
84:31:63:a1:43:fb:bd:a1:c2:7b:0a:6b:99:3f:89:
3e:f6:06:6d:6a:c8:15:1b:66:4e:39:44:a3:23:89:
d9:51:16:46:c2:64:26:36:e1:6b:6c:24:1c:23:04:
b5:24:ae:5a:cd:7f:ae:05:ee:0e:ff:33:51:bc:30:
e5:f0:3f:8e:4f:53:0b:c5:b8:ca:db:f8:b3:b9:8c:
af:04:31:a0:7a:74:c6:c0:af:02:c8:c9:fc:a6:83:
18:eb:b1:07:45:38:fe:29:7a:8a:92:0c:dc:91:8b:
7d:ef:0d:f9:bf:c6:29:df:be:6e:bc:9c:8c:05:85:
16:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:82:D5:88:2F:B6:73:A9:42:71:1B:AF:64:24:84:30:A4:0D:D3:79
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.253.86.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:36:25:95:86:2f:c1:e2:65:9d:15:cd:b1:9a:49:05:d3:ad:
b2:0b:de:8f:17:f6:85:2a:11:a7:32:34:bd:b0:33:93:fc:19:
a7:bb:5e:18:7f:b8:82:f7:e8:7a:fb:3b:c3:af:9f:c9:61:70:
23:fe:42:68:a3:23:06:31:af:fc:94:10:35:6a:b4:81:de:0b:
4b:f4:e8:13:25:34:63:ce:b7:b2:b6:9c:87:9a:21:21:99:19:
ec:46:b0:9e:b9:8c:31:0b:bb:9a:02:47:55:36:38:6d:7a:2c:
ac:cb:21:ff:07:da:8d:1d:48:68:d7:40:bb:f6:8f:2f:27:d2:
66:e2:b8:59:82:be:31:26:8d:28:ec:d5:82:bb:97:44:58:55:
4f:12:3c:ba:1c:ec:b9:c3:0b:d1:6a:f3:39:7f:c7:3b:60:b7:
07:d9:79:99:5d:1c:f4:09:55:65:98:18:6e:7b:61:34:04:74:
d6:47:c7:71:1b:ca:05:b7:0d:1e:44:d7:43:9a:92:3a:21:fd:
18:24:c6:f1:2f:0d:23:62:7c:11:b8:8a:0e:58:24:75:99:43:
f4:b8:3b:b3:03:47:1a:10:aa:86:a9:4c:a2:8a:7e:8b:0d:df:
a2:e3:d0:dc:d5:70:86:a2:af:3d:c8:d4:07:0a:64:a2:84:ce:
da:88:f7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:16 2025 by rpki-client