Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230382e302f32332d3234203d3e2039333034.roa
File: 36392e3136362e3230382e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier: AcKVG00kzCj4/KfiO0uv/LsafidntvcPvglpE+Mu2zc=
Subject key identifier: 88:B7:2A:69:FD:91:E8:8E:84:6D:6C:40:56:D2:1A:FD:A1:C6:AF:0B
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 45464436922AFBC67720D93C5E8269BBB2FD9B80
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230382e302f32332d3234203d3e2039333034.roa
Signing time: Sun 19 Jan 2025 10:08:21 +0000
ROA not before: Sun 19 Jan 2025 10:03:21 +0000
ROA not after: Sun 18 Jan 2026 10:08:21 +0000
asID: 9304
IP address blocks: 69.166.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:46:44:36:92:2a:fb:c6:77:20:d9:3c:5e:82:69:bb:b2:fd:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Jan 19 10:03:21 2025 GMT
Not After : Jan 18 10:08:21 2026 GMT
Subject: CN=88B72A69FD91E88E846D6C4056D21AFDA1C6AF0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:56:0f:1b:d2:64:cb:ab:81:1a:a1:e4:c3:
53:38:7f:df:d7:47:8b:54:1d:5f:cd:19:8d:1e:29:
45:31:f2:5c:6c:45:e2:d5:04:88:91:58:cd:e6:a3:
35:0c:db:25:f1:91:51:b3:e1:c9:e8:e2:11:7c:81:
bf:e4:00:1e:96:dd:ad:3f:6d:a6:04:4c:17:4e:3f:
ca:98:7e:d2:15:c3:b9:d2:7b:46:1c:31:1f:76:d6:
65:e2:7e:06:08:4d:08:68:69:a6:69:36:90:4f:0b:
60:03:2c:2d:50:3f:53:26:31:0a:c0:4c:f8:b6:40:
15:7a:36:ab:29:a9:a8:fc:5c:df:55:03:a1:12:34:
e6:2b:75:8e:c9:ae:ed:15:1e:f9:74:02:b2:75:9f:
a7:21:5e:04:5b:6a:fc:25:de:23:60:ab:67:c3:93:
79:a1:53:a6:07:c0:df:19:98:f9:ee:27:8c:42:93:
97:c4:cf:ba:c4:0c:7c:72:b9:64:ee:8b:2a:82:d3:
f5:3b:17:c8:45:72:2f:06:a9:59:6d:1e:5c:05:a5:
c2:c4:a5:49:be:23:90:77:1b:0e:87:8c:57:3e:ce:
6c:cb:b2:4c:06:54:56:f2:13:3c:90:68:be:31:d7:
07:bc:5b:64:48:a5:04:b2:08:52:71:2c:d3:b6:79:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B7:2A:69:FD:91:E8:8E:84:6D:6C:40:56:D2:1A:FD:A1:C6:AF:0B
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230382e302f32332d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.166.208.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:c5:fa:40:fe:be:e4:fa:d0:51:5c:68:12:f2:64:2a:a1:97:
10:b7:a0:18:b6:c3:d2:25:0e:3d:2b:aa:17:62:87:8d:49:37:
5a:3f:21:d2:82:ad:7b:51:11:6d:75:58:77:0d:48:9d:01:a8:
6f:3c:31:08:6f:3a:0f:16:30:4f:3f:12:05:09:af:cd:83:5b:
34:84:fb:fd:ad:33:7d:27:b7:2d:70:af:95:60:89:a8:fb:4d:
81:9b:8b:14:46:9c:04:92:39:b3:c9:d5:9b:4d:3b:2d:7d:1e:
55:68:9e:0e:3a:71:3b:e0:04:09:51:7b:84:01:26:de:0e:bf:
b2:88:90:84:4e:db:17:05:db:d7:4e:66:3a:28:93:bf:ec:9e:
d6:6b:34:e4:4b:b4:70:e1:00:fd:e4:a9:94:47:f0:b2:2d:21:
62:90:fe:a6:c2:d1:d3:77:24:ee:ce:30:5e:01:86:60:d9:e0:
39:19:f4:41:18:26:36:d6:17:5c:c5:12:fa:58:19:ba:86:be:
85:86:c6:08:5e:5d:64:48:94:bc:c1:ca:38:99:0a:9a:6a:12:
3c:46:c3:fe:4a:90:89:a8:8d:2d:e5:98:c9:a9:1e:78:5a:33:
b2:95:d3:c4:3c:76:74:13:9a:6c:42:64:75:34:fa:a9:54:8a:
40:86:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:03 2025 by rpki-client