Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232382e302f32342d3234203d3e2039333034.roa
File: 36392e3136362e3232382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: mH0NKnlnF7b1D1yfmlN5/QGyGYAr7lZ5Pxr3ynnGI9o=
Subject key identifier: 47:C5:60:F5:09:A9:A6:41:E4:CA:7F:5C:E2:98:DA:71:65:28:34:1F
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 3D127ED46A687373DF8FD569AE1BFB7D9807866C
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232382e302f32342d3234203d3e2039333034.roa
Signing time: Sun 19 Jan 2025 10:08:21 +0000
ROA not before: Sun 19 Jan 2025 10:03:21 +0000
ROA not after: Sun 18 Jan 2026 10:08:21 +0000
asID: 9304
IP address blocks: 69.166.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:12:7e:d4:6a:68:73:73:df:8f:d5:69:ae:1b:fb:7d:98:07:86:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Jan 19 10:03:21 2025 GMT
Not After : Jan 18 10:08:21 2026 GMT
Subject: CN=47C560F509A9A641E4CA7F5CE298DA716528341F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:ac:56:f6:4a:e8:3e:e9:a2:fe:45:b5:1d:
29:08:2c:63:c6:8c:81:24:c2:3a:3a:c8:74:5a:ae:
79:f2:0d:fe:74:d6:4f:f6:4b:03:05:6c:a3:af:72:
d7:9c:73:cb:1d:f8:73:b2:7d:aa:4f:fe:4c:af:6b:
cc:66:02:37:6b:8b:0a:af:09:22:59:b6:95:fa:92:
cc:ad:3a:0f:83:8d:96:6e:ec:63:27:ff:f0:b4:cf:
35:5d:2a:9d:6f:05:a3:9b:3f:50:45:73:dd:1f:a1:
ca:20:1b:49:9d:cf:bb:27:64:c4:47:3c:1f:bf:b0:
42:48:2b:2f:4f:b9:a2:d8:94:28:01:ee:ce:69:06:
78:7d:61:40:48:d5:e2:9a:d7:ad:ae:14:7e:b4:38:
4a:e9:bd:06:d6:0c:f5:52:02:77:f0:2e:06:4c:c3:
94:82:24:e9:14:5d:2b:0f:c9:8b:c5:c2:00:5f:f2:
09:60:72:c9:ba:33:8f:0e:c8:e2:ac:93:de:4e:26:
52:a2:8a:22:59:1f:d6:4f:62:0e:1f:40:c2:83:5b:
23:9c:fe:e4:09:cd:5a:e7:32:e0:1c:50:bc:51:85:
a8:02:25:04:af:5d:0e:12:3a:c5:7b:e1:93:c5:d9:
1d:95:c7:9c:c4:08:f9:74:af:b9:25:9f:b6:f8:9c:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C5:60:F5:09:A9:A6:41:E4:CA:7F:5C:E2:98:DA:71:65:28:34:1F
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232382e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.166.228.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ff:ea:9d:f7:21:f9:e7:92:df:cd:88:9a:71:bd:8c:9f:b5:
1b:87:e4:c9:4f:87:13:da:5f:a8:d9:18:b7:4f:3e:c9:19:83:
40:e5:7e:a5:8d:c7:cd:37:24:aa:96:84:8a:21:5b:17:4a:fb:
48:a8:61:30:95:39:5a:c0:a2:93:71:d0:7b:3b:03:39:4b:dd:
a8:54:f1:2d:f9:5f:f1:9b:78:86:c3:cf:ef:d8:67:c6:20:fb:
d7:c6:a3:84:71:5a:f3:34:03:e8:df:33:fb:ea:eb:8a:7e:00:
d3:37:e4:50:31:bf:7a:c6:b6:9d:46:43:f1:3b:09:fe:f1:49:
13:db:64:5a:5c:45:3b:dd:dc:46:51:eb:d2:dd:0c:97:6e:db:
c4:97:12:7d:01:3a:aa:43:39:c1:6b:d3:fd:69:f5:c1:dd:e8:
a6:e9:bb:5c:34:e8:60:3e:17:bc:5c:3b:82:f3:ea:3d:e8:e3:
b8:92:29:b1:c0:62:67:3d:3d:1c:df:de:13:82:0d:b7:16:a2:
dc:fa:a7:92:01:61:8d:b5:53:6b:75:d4:4a:be:80:08:6c:fe:
b2:a7:5b:02:45:a4:82:d5:86:ab:b2:b8:8d:46:30:4a:67:8d:
2b:dd:94:33:50:68:ea:88:04:dc:33:d6:c8:d8:00:5d:e7:86:
b1:d9:91:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:34:47 2025 by rpki-client