Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232322e302f32332d3234203d3e203130313033.roa
File: 36392e3136362e3232322e302f32332d3234203d3e203130313033.roa (raw, json)
Hash identifier: lGX32tiaRqP4wLkqNlaZORJiVG/iS4e/tb88Z8WwM2M=
Subject key identifier: 73:64:23:7B:1A:14:D2:CB:93:69:4D:6D:E8:3F:AB:B3:04:8F:41:96
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 2D264F13FD50E685E5FA7168DD5D159358A9CE11
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232322e302f32332d3234203d3e203130313033.roa
Signing time: Tue 24 Dec 2024 08:10:57 +0000
ROA not before: Tue 24 Dec 2024 08:05:57 +0000
ROA not after: Tue 23 Dec 2025 08:10:57 +0000
asID: 10103
IP address blocks: 69.166.222.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:26:4f:13:fd:50:e6:85:e5:fa:71:68:dd:5d:15:93:58:a9:ce:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Dec 24 08:05:57 2024 GMT
Not After : Dec 23 08:10:57 2025 GMT
Subject: CN=7364237B1A14D2CB93694D6DE83FABB3048F4196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ea:ec:f6:d2:e5:9b:b6:9a:ea:80:b0:49:d8:
83:be:cc:3e:1b:13:f0:38:93:7b:19:b0:3c:da:82:
e5:fe:f2:96:95:56:52:27:19:19:2a:7d:f8:f1:71:
22:8c:1b:e2:78:d0:38:67:81:20:17:b5:c4:38:ae:
82:92:ff:21:f8:6a:bf:86:c8:91:55:e9:d5:d2:94:
c6:b7:f1:2f:1d:1c:a2:fe:ec:78:0e:32:5c:01:9c:
81:98:87:8e:16:5d:1a:b5:66:16:b6:e0:c8:02:20:
35:b9:e7:d5:56:14:70:ca:96:f7:66:78:27:58:b2:
24:5c:68:8c:ce:03:2b:72:b0:ba:a0:e3:1a:f7:25:
0d:98:1c:b8:07:a0:71:0f:bc:23:72:23:32:47:6d:
16:46:07:29:9f:f4:68:3b:63:4f:36:de:83:92:e7:
7c:b0:7b:62:00:79:2e:92:ad:d0:9b:de:0f:9d:d3:
36:0a:b1:cb:58:75:ed:72:6a:9d:00:93:e8:09:34:
d4:b8:df:e3:06:11:1c:bd:ed:40:6b:f8:86:d7:dd:
cb:e9:fa:85:dd:00:1d:f3:8f:82:5b:b0:a6:39:a5:
91:40:5e:df:27:f3:6a:69:69:7d:75:4b:a8:1a:06:
7a:e6:16:da:ff:87:a3:44:62:d8:b5:ef:fb:d7:db:
b8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:64:23:7B:1A:14:D2:CB:93:69:4D:6D:E8:3F:AB:B3:04:8F:41:96
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232322e302f32332d3234203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.166.222.0/23
Signature Algorithm: sha256WithRSAEncryption
34:43:97:46:16:5b:21:c4:a8:b1:b4:6d:6d:75:cf:6f:d1:d8:
94:2a:f1:ea:90:8e:d4:19:7c:e4:af:f5:72:d1:43:6f:86:94:
88:99:42:8f:7a:cb:4e:82:5f:c8:bd:9f:c1:08:ed:9b:62:64:
6b:c3:74:94:1d:e2:f2:05:95:fb:f4:d5:d4:11:ba:18:af:59:
bd:34:91:6d:b5:c8:e4:ba:ae:0c:b9:cd:a1:c2:2c:2f:d1:06:
51:44:cf:b5:e0:71:70:f0:37:7e:8c:eb:89:64:29:95:26:0c:
27:d3:35:83:43:9e:33:45:50:01:52:65:6e:21:ec:53:d5:d5:
02:88:f7:64:9b:31:73:14:7f:61:84:97:91:bb:4c:27:27:cf:
1a:12:ef:19:60:74:ec:b8:c1:51:16:5d:73:cd:95:3c:38:ad:
07:1a:e2:9a:85:13:06:84:79:1f:e8:eb:76:76:93:ed:9e:d8:
2b:b9:a4:4d:36:27:f8:1e:9f:22:6e:da:27:18:15:d2:27:b1:
4c:f5:13:92:b5:ea:f4:6f:54:73:5c:20:32:04:9d:bf:87:fd:
60:b1:59:f9:54:fb:ce:fb:3a:83:2c:0b:e3:5a:73:17:30:39:
12:4d:db:68:22:4f:b8:25:ff:a0:e6:ff:7c:2b:ca:03:fe:65:
a1:e5:d0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:06 2025 by rpki-client