Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20333937343233.roa
File: 36342e3235332e39342e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier: 15Au3qA3bCDWnmK6tLW14okx8e3lo1e7biN8yXaqCiw=
Subject key identifier: F7:CF:77:EA:D5:9C:79:45:52:02:8E:22:58:43:04:7B:33:6A:43:49
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 6E4889DD412CF5234F57CBCB7FB9195B302C4276
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20333937343233.roa
Signing time: Sun 22 Dec 2024 12:24:51 +0000
ROA not before: Sun 22 Dec 2024 12:19:51 +0000
ROA not after: Sun 21 Dec 2025 12:24:51 +0000
asID: 397423
IP address blocks: 64.253.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:48:89:dd:41:2c:f5:23:4f:57:cb:cb:7f:b9:19:5b:30:2c:42:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Dec 22 12:19:51 2024 GMT
Not After : Dec 21 12:24:51 2025 GMT
Subject: CN=F7CF77EAD59C794552028E225843047B336A4349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:29:7c:02:20:2d:1b:56:87:17:94:62:8b:
ba:3a:ea:c2:27:0e:1e:3d:98:f5:68:8e:05:cd:1f:
f6:ca:22:67:68:97:18:f3:81:b6:38:65:7e:e6:d2:
65:84:12:22:e3:99:9d:4e:e3:2b:94:c6:0b:aa:86:
1f:8e:9e:1e:1f:ff:f5:4a:55:10:4c:67:da:1b:b2:
c0:4c:9b:73:7b:03:3a:fd:b4:82:6c:01:6f:a6:a7:
4c:0e:b2:a2:4b:fc:33:d4:ec:74:d5:96:f7:0b:26:
2a:ad:fc:1f:53:d3:52:cf:24:72:2f:68:78:4f:58:
02:16:fd:92:d6:64:3b:2a:a2:8c:25:29:ea:43:f5:
2d:47:60:88:d8:7e:6f:a0:1e:aa:bc:d1:a1:66:4d:
3c:15:bf:98:dd:68:54:23:ce:78:e9:43:4f:e0:58:
bf:7f:1f:1a:34:db:35:69:14:67:71:57:2b:dc:15:
f9:fc:89:5e:c8:7c:82:ff:1d:23:d1:77:ff:d1:43:
ca:9b:b9:cb:fa:6b:19:df:88:c9:04:43:d7:f5:eb:
95:ae:f3:56:0d:7c:e9:96:7d:2f:53:1a:45:be:d3:
e4:7c:9b:f7:5c:67:82:dc:c9:1a:d5:18:0c:c6:5d:
c9:88:62:e8:40:58:b9:3a:0c:23:4b:08:02:a6:31:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CF:77:EA:D5:9C:79:45:52:02:8E:22:58:43:04:7B:33:6A:43:49
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20333937343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.253.94.0/24
Signature Algorithm: sha256WithRSAEncryption
80:65:db:0b:73:27:ad:42:e8:42:57:09:fa:a2:08:6a:8a:1e:
37:b9:76:cf:f6:2e:4d:a7:53:4d:c0:87:92:30:40:44:83:32:
2d:74:e2:a5:09:91:9a:69:b0:1d:18:6a:06:64:62:29:61:3b:
4e:1e:a7:5b:ee:fe:ac:6a:9e:26:75:ef:cf:b3:b9:b5:ef:d9:
c3:80:25:e6:11:2f:10:c1:2d:f3:12:3d:0a:84:5e:f2:83:46:
2f:9c:89:83:c4:36:54:7e:39:f9:c4:aa:ae:b3:01:83:72:8d:
c0:5f:e3:4d:c7:2f:7f:6a:c7:6a:62:0c:24:ba:ab:f8:2a:63:
c6:76:93:ee:37:d7:c8:1d:2d:fb:fe:7f:be:b9:61:f4:eb:07:
f4:8c:dd:7d:63:8f:17:fa:f7:35:63:7f:e1:a9:27:40:96:98:
d5:50:38:6e:78:63:1e:2b:7f:5a:fb:8c:34:79:26:93:24:f9:
ce:7d:5a:ab:c2:b5:e6:3e:80:9b:18:6e:aa:3a:7e:4f:1f:c9:
3a:b0:69:66:f9:b7:27:dd:34:ba:9a:f7:1e:34:fe:37:3a:11:
db:74:b0:c3:f5:e6:59:55:dd:eb:3d:c9:99:b7:7e:67:45:f4:
4c:40:17:04:76:79:26:75:9d:fe:49:da:8e:64:0f:77:ca:a3:
ba:3d:ac:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:41 2025 by rpki-client