Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233382e302f32342d3234203d3e203633303233.roa
File: 36392e3136362e3233382e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier: +qSn0X5j4JBNGBB9J3GfhOXJyM/uJ78nFmbeOjqFPas=
Subject key identifier: 3E:5D:20:47:3F:73:6E:75:B7:29:A5:BE:E7:0C:48:EF:50:06:E7:E0
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 6B69F9D06682497B742952BD88B39DF911BC5CEC
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233382e302f32342d3234203d3e203633303233.roa
Signing time: Wed 18 Dec 2024 13:35:02 +0000
ROA not before: Wed 18 Dec 2024 13:30:02 +0000
ROA not after: Wed 17 Dec 2025 13:35:02 +0000
asID: 63023
IP address blocks: 69.166.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:69:f9:d0:66:82:49:7b:74:29:52:bd:88:b3:9d:f9:11:bc:5c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Dec 18 13:30:02 2024 GMT
Not After : Dec 17 13:35:02 2025 GMT
Subject: CN=3E5D20473F736E75B729A5BEE70C48EF5006E7E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:21:52:9a:69:ec:e8:d8:02:98:ea:1b:84:60:
a8:d9:30:1c:78:5b:5b:01:c2:a2:6c:48:78:46:ed:
fd:a8:1e:cf:3d:e9:97:3b:6a:45:5e:1e:46:99:6a:
21:89:6b:23:52:95:89:dc:ef:5b:7e:3b:4e:0a:ef:
b6:e3:76:b7:97:a3:28:3c:45:74:c1:a5:61:ae:bd:
69:d7:24:17:f7:63:4f:ea:ab:cf:2d:e5:4e:f9:0f:
3b:22:e2:d1:96:e1:09:7b:ab:a9:2f:1d:94:27:31:
d7:6c:fb:28:0f:90:40:ad:d5:32:f3:64:e6:09:17:
42:71:1d:a8:a7:53:57:bc:0f:ca:a1:88:85:1e:d6:
1b:b0:e0:36:60:64:6b:1f:69:31:d2:2b:df:36:77:
82:e0:d9:87:d2:30:6f:a0:44:0b:79:39:2d:37:bf:
01:24:b0:91:81:95:ad:c2:b2:c7:81:d6:0e:e5:56:
c4:f9:91:50:5b:b1:f3:6b:ea:a3:8b:b3:01:63:fc:
b0:91:87:27:3a:15:e0:84:84:f8:b5:dc:1f:dc:10:
0a:9c:9d:7e:2d:a7:fe:90:47:5e:6f:25:ad:9a:78:
54:34:f5:39:00:b1:ae:8a:a2:05:13:8b:de:81:68:
7f:a0:4d:e4:43:38:c2:bf:31:bb:ad:b9:ff:ee:a2:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5D:20:47:3F:73:6E:75:B7:29:A5:BE:E7:0C:48:EF:50:06:E7:E0
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233382e302f32342d3234203d3e203633303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.166.238.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0a:82:bc:4a:7b:4b:0e:02:dc:3f:5a:ed:d1:54:25:22:2a:
d8:ef:b5:e6:53:10:79:0e:fc:3d:a0:7a:e1:b6:c6:30:1e:b9:
ba:74:73:c7:00:09:b1:aa:89:f8:7f:de:28:08:36:2e:ef:da:
4b:c8:ac:26:77:eb:1e:88:b2:c9:fa:1d:48:be:11:84:28:c6:
89:52:34:d7:95:b4:2f:1b:fa:2b:6d:e4:c4:a6:d8:27:89:64:
28:54:b9:45:77:58:59:77:a1:c8:20:40:23:6e:ba:9b:ca:e5:
6c:32:ce:26:09:da:a0:ab:6a:4d:3e:3e:22:a3:62:12:fb:46:
e6:b9:6c:05:9e:c7:c4:a9:e1:29:11:83:5d:8f:ba:d0:f8:15:
4c:dd:e1:14:f9:cf:aa:2a:3d:08:76:39:23:94:2e:38:e5:d6:
1d:93:93:fe:28:66:3c:ca:61:3f:03:20:03:16:06:65:61:df:
36:8a:1e:9a:82:cf:7c:2c:0c:ea:0f:45:80:7d:ac:c6:7b:55:
d3:5c:2b:eb:05:e6:8e:37:54:e8:ef:07:78:73:db:84:9a:77:
3e:3b:22:62:dd:64:93:3d:20:81:d4:07:ed:fc:9f:fb:e3:17:
ee:53:50:db:ef:04:0a:ab:47:39:e8:81:f8:e3:26:88:04:dd:
2c:9d:67:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:39 2025 by rpki-client