Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233342e302f32342d3234203d3e203231383430.roa
File: 36392e3136362e3233342e302f32342d3234203d3e203231383430.roa (raw, json)
Hash identifier: FjQrIEOab1WN8OozTI/6O4SwhAYThvSzAb2fG/Ohl0o=
Subject key identifier: 66:16:47:FB:4C:B7:53:C5:C1:05:A8:BE:D6:A8:56:FE:96:5F:53:91
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 01491D0D7158BD164A1ED1FB7BCB511428CAD990
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233342e302f32342d3234203d3e203231383430.roa
Signing time: Mon 24 Feb 2025 13:09:56 +0000
ROA not before: Mon 24 Feb 2025 13:04:56 +0000
ROA not after: Mon 23 Feb 2026 13:09:56 +0000
asID: 21840
IP address blocks: 69.166.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:49:1d:0d:71:58:bd:16:4a:1e:d1:fb:7b:cb:51:14:28:ca:d9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Feb 24 13:04:56 2025 GMT
Not After : Feb 23 13:09:56 2026 GMT
Subject: CN=661647FB4CB753C5C105A8BED6A856FE965F5391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:bf:94:93:cb:5a:2f:83:31:1c:1f:68:25:
4d:d7:22:b7:1e:7a:e1:54:50:d8:7a:8a:75:d1:00:
cf:c0:ca:23:fb:81:45:4c:87:af:0a:59:e2:91:d4:
69:b7:fb:db:50:a8:60:7d:cb:6e:83:a8:84:82:6a:
21:01:89:37:aa:a2:d9:d2:2a:70:a9:8a:8f:3e:a2:
e5:f7:47:ad:1c:45:37:e6:57:20:27:40:51:88:aa:
c5:f5:8e:e8:23:bc:2c:19:0e:5e:e5:29:ac:d2:9a:
1a:b8:aa:9c:f2:38:4b:1c:1c:7f:5f:03:27:7a:c5:
0d:e6:12:3d:cd:c0:4f:f4:d1:3a:5d:eb:09:db:d1:
7e:c3:3b:64:da:0a:8e:0a:53:85:00:98:4d:a0:0c:
3c:9f:ab:df:a7:c8:d0:4c:a2:b5:38:11:e1:48:9a:
62:bd:47:99:8d:1a:58:c5:be:27:2c:4c:8d:28:42:
4e:57:a7:89:69:29:65:a2:8c:4f:0d:d2:c0:ad:86:
72:43:3e:ea:81:0d:a7:be:55:2e:fd:2d:ca:fb:f0:
cd:61:65:cf:ea:97:93:43:d8:d1:2d:a7:fc:1b:e1:
6b:19:10:d0:7b:36:f1:b5:20:c4:06:31:03:88:fc:
ed:66:cf:f4:44:6b:da:50:60:78:44:ef:c5:13:54:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:16:47:FB:4C:B7:53:C5:C1:05:A8:BE:D6:A8:56:FE:96:5F:53:91
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233342e302f32342d3234203d3e203231383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.166.234.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b7:6d:54:fe:8e:2f:4a:ee:46:0f:d0:cd:0c:07:c8:c2:8d:
b1:be:18:fc:c4:9f:0c:78:a5:ea:0e:5f:cf:d5:52:f6:f9:0e:
d0:e2:1b:4a:5e:b0:e3:5d:4b:4a:01:02:e3:d7:82:be:50:68:
a9:52:03:54:79:92:72:a7:19:be:fe:30:31:57:7c:2e:ab:0e:
09:fc:93:33:92:c9:be:b7:28:0d:6a:c2:66:59:84:67:d5:66:
4a:dc:50:2e:c5:9f:e1:f6:8a:78:54:02:c4:7a:eb:85:cf:01:
74:c5:d9:33:f9:55:a4:f7:43:18:b4:64:cb:64:3e:e1:39:04:
24:b3:88:40:1a:80:1d:f1:d2:f2:90:9f:4c:19:7e:48:b9:59:
db:e1:b5:ff:37:7b:bc:fb:73:d5:8f:7d:93:4b:f4:5f:e3:db:
9d:3d:2e:15:a0:7b:8d:95:73:38:48:8e:cc:32:18:d3:89:fd:
12:29:cc:16:aa:ec:06:b2:95:92:5c:6a:c1:c1:a7:5c:01:b4:
dd:b3:a1:ea:3f:60:d8:88:a6:53:72:ed:9e:cd:e5:4a:2d:95:
f1:98:b2:6d:9b:e1:1c:d4:4f:aa:53:9b:df:d7:33:fd:41:6f:
1f:82:cb:8d:83:37:0a:8d:f7:5b:d5:bc:c1:56:58:35:ea:51:
ef:59:54:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:46 2025 by rpki-client