Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3234302e302f32342d3234203d3e20323135363732.roa
File: 36392e3136362e3234302e302f32342d3234203d3e20323135363732.roa (raw, json)
Hash identifier: qzbr25iTi12NhzEgBx32+GsphD/2VE5KQP3EQR+YXFw=
Subject key identifier: B2:C0:F4:24:D7:C2:F1:5A:5F:23:25:14:EF:E5:B3:67:72:50:29:AB
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 5F6659FBB32B87E2AE45006D0B25A420EA5D1F2E
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3234302e302f32342d3234203d3e20323135363732.roa
Signing time: Sun 19 Jan 2025 11:54:48 +0000
ROA not before: Sun 19 Jan 2025 11:49:48 +0000
ROA not after: Sun 18 Jan 2026 11:54:48 +0000
asID: 215672
IP address blocks: 69.166.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:66:59:fb:b3:2b:87:e2:ae:45:00:6d:0b:25:a4:20:ea:5d:1f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Jan 19 11:49:48 2025 GMT
Not After : Jan 18 11:54:48 2026 GMT
Subject: CN=B2C0F424D7C2F15A5F232514EFE5B367725029AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:49:f8:4f:f2:1c:a5:56:2a:48:b0:07:11:
9f:cc:33:c8:9b:bd:3c:ff:f9:01:49:e6:05:37:ab:
10:65:71:5a:5b:78:8c:27:d3:bd:43:d9:17:f2:d3:
83:87:63:7a:40:ac:44:fd:b8:7f:30:f6:bf:95:a4:
4e:71:31:85:44:df:fc:e7:4c:f7:49:44:db:d5:f1:
4a:d3:65:12:08:8a:44:36:96:84:98:6e:2f:39:5a:
45:e8:c6:da:9e:fc:17:23:fe:c7:1e:e4:7d:5b:59:
39:76:b7:41:9a:a2:f3:48:09:10:b4:0c:ed:2f:c7:
29:b1:e3:5c:82:2f:c2:94:83:6a:9a:70:ae:c4:96:
ae:29:9d:35:a9:9d:83:30:97:a5:bc:25:89:43:38:
bc:c3:a9:f8:17:6f:a1:57:27:da:3f:a1:e8:c3:19:
eb:e1:67:74:44:ac:82:07:f0:16:ed:cb:d4:c5:0b:
48:26:86:1a:20:15:5d:1f:ae:ff:cc:ef:54:a5:b9:
4f:54:71:80:6a:4f:30:3a:4d:9a:f9:bd:3d:67:5b:
91:61:67:78:ac:bb:d2:02:92:b9:d6:cf:18:67:b6:
53:36:f1:03:70:e5:96:ab:32:74:21:66:03:ce:32:
9d:2b:f5:e5:8e:1c:6e:74:72:a0:84:8e:41:48:8d:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C0:F4:24:D7:C2:F1:5A:5F:23:25:14:EF:E5:B3:67:72:50:29:AB
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3234302e302f32342d3234203d3e20323135363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.166.240.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b8:54:3e:8d:e3:1d:0b:08:25:9b:da:cc:86:b0:9c:35:79:
04:d5:87:f7:49:8f:10:bb:9c:c9:c5:89:db:d8:d4:01:0c:be:
67:7b:64:87:5d:92:67:10:df:68:d3:a4:3c:bd:82:40:13:40:
59:e6:a3:65:68:eb:34:31:b3:39:75:f8:e0:e3:d9:f1:10:73:
ea:c5:e1:b8:ea:bf:6e:8c:7e:38:60:70:19:8c:ed:84:a6:1d:
f5:99:63:f5:b3:8d:45:7c:40:74:96:76:65:cf:f6:45:99:ce:
a4:bd:5e:e5:f8:24:a0:e1:72:dd:cb:75:a5:5b:d5:e7:a0:83:
0c:85:db:0d:36:f7:9f:73:9e:8a:c8:cf:f4:1c:00:0e:f1:7b:
f5:bc:6f:39:c0:17:6a:58:33:23:bd:a6:eb:33:99:18:12:bd:
11:88:fd:cb:78:d4:94:08:a5:00:f1:9d:76:6c:5f:6a:8e:bd:
a1:0f:d3:04:21:a8:48:35:0a:9f:d4:6b:72:d5:03:fa:85:07:
fd:0a:b0:25:38:ce:07:c0:4c:74:05:51:ca:d8:c4:f4:5a:83:
f9:6d:9b:84:c4:23:54:62:b3:1b:c8:c2:b6:b3:52:d5:a6:ba:
54:3e:a9:5f:29:fd:cb:d4:c3:9c:13:80:ac:8f:f7:09:d2:f3:
f2:45:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:54 2025 by rpki-client