Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232382e302f32342d3234203d3e20333935373933.roa
File: 36392e3136362e3232382e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: W+Uz0F+qMHgUr5YohtW+NpRHfxXtFUQGaMcynuT3Dac=
Subject key identifier: 5B:36:BF:8C:69:B5:56:A8:15:A4:62:28:89:ED:49:25:49:FD:2F:6E
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 4B9F051B425C857265A97DB9A438C39FB199A365
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232382e302f32342d3234203d3e20333935373933.roa
Signing time: Wed 18 Dec 2024 06:01:25 +0000
ROA not before: Wed 18 Dec 2024 05:56:25 +0000
ROA not after: Wed 17 Dec 2025 06:01:25 +0000
asID: 395793
IP address blocks: 69.166.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:9f:05:1b:42:5c:85:72:65:a9:7d:b9:a4:38:c3:9f:b1:99:a3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Dec 18 05:56:25 2024 GMT
Not After : Dec 17 06:01:25 2025 GMT
Subject: CN=5B36BF8C69B556A815A4622889ED492549FD2F6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:da:02:6c:0e:c6:cd:7e:fd:a6:78:dc:12:
b6:5e:c5:fc:cf:0c:bc:6e:22:36:30:b4:78:a7:2c:
9f:6c:bc:b9:8b:f6:9e:b8:2f:b4:0e:4b:57:70:04:
a7:d8:19:4f:93:76:87:9e:58:46:dc:65:fa:e9:4a:
e9:02:a6:57:26:e1:0c:f6:67:5e:a9:7e:70:ee:6e:
c4:d1:8b:72:89:11:80:50:6f:5e:f5:fc:e3:5d:27:
2d:27:a3:4e:70:35:c4:a5:37:74:9a:8f:cf:35:8e:
0b:63:9b:be:10:c1:43:f1:f4:5f:cb:8f:8e:bd:48:
c1:78:05:22:8a:1c:93:7d:3a:e8:b3:85:51:3f:c5:
e0:35:86:d9:7d:69:21:77:38:c6:d1:87:1a:02:2f:
cb:ef:67:ce:42:22:7b:f9:15:f3:a7:58:94:72:c6:
5f:90:68:d6:89:ba:cd:ff:79:99:18:0d:24:bc:81:
61:22:02:83:a8:75:47:e8:a6:a0:25:7e:24:bc:7d:
b7:2b:d6:2d:ce:83:9a:d1:93:2d:ee:36:16:d7:bc:
d1:ea:f4:f8:2b:a8:7e:e8:5d:73:97:f1:d0:14:92:
76:95:4c:3e:6b:58:b7:5e:cc:60:97:35:62:45:64:
f3:ad:11:b4:2a:b3:c2:e3:45:d1:dd:c9:c1:5e:34:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:36:BF:8C:69:B5:56:A8:15:A4:62:28:89:ED:49:25:49:FD:2F:6E
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232382e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.166.228.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3b:96:f1:e7:6f:f3:9b:ad:a4:40:51:72:bf:11:a3:11:e0:
54:fb:05:d4:d5:c6:9c:ec:b3:79:98:76:3c:50:10:d9:31:ce:
03:0d:6e:b7:9c:d4:ac:66:a3:64:71:f8:df:98:ca:41:a2:13:
a7:f7:39:88:6e:77:95:7b:50:6f:ad:d2:e4:6e:bb:81:f9:e4:
54:81:76:ad:5c:4a:3d:6a:ce:ce:af:8b:26:f5:b8:d5:70:fd:
0d:cd:ef:78:bf:fe:54:8b:e5:b7:17:1a:c9:74:cb:ed:d5:1a:
ea:0e:d7:07:cf:68:ee:8f:bd:dd:cc:bf:10:63:cc:6f:71:8e:
87:7c:c4:01:26:f5:4f:66:ba:3b:de:f2:24:4f:b9:8d:b9:a6:
ef:83:2d:da:72:e6:9f:08:08:c4:41:84:55:d3:21:2b:4d:d0:
96:40:df:18:14:f8:b1:8c:5a:06:9f:b5:45:4c:2f:03:7b:a8:
c3:9a:50:41:de:df:48:b4:df:29:c3:5d:3e:d6:70:8b:38:7b:
e6:d3:b5:e6:92:25:43:71:e3:0e:a0:6a:af:90:53:a0:76:81:
0f:d2:f2:14:9d:ff:42:a0:3e:dd:2d:8e:e4:a3:00:92:a6:d0:
35:9f:32:f2:95:e4:78:f7:b7:96:70:9b:5e:80:07:f5:50:a5:
fc:2e:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:05 2025 by rpki-client