Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e20383334.roa
File: 3136322e3231382e32342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: JEgcxFNZMA9Qqy/IscspWupTJuilM84gUUaXdcwSC2E=
Subject key identifier: DC:D0:C0:34:33:CB:0A:C1:1B:82:8C:61:B6:A1:45:26:B1:77:1A:3A
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 5533174CB4E2FC817B53065E8EB213D0A0E8B9FB
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e20383334.roa
Signing time: Sat 30 Nov 2024 00:04:18 +0000
ROA not before: Fri 29 Nov 2024 23:59:18 +0000
ROA not after: Sat 29 Nov 2025 00:04:18 +0000
asID: 834
IP address blocks: 162.218.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:33:17:4c:b4:e2:fc:81:7b:53:06:5e:8e:b2:13:d0:a0:e8:b9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Nov 29 23:59:18 2024 GMT
Not After : Nov 29 00:04:18 2025 GMT
Subject: CN=DCD0C03433CB0AC11B828C61B6A14526B1771A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:42:79:89:a0:b2:85:c9:07:af:7d:a6:26:
42:6a:39:24:bc:77:95:13:20:db:f1:f0:dd:66:6a:
3a:8b:db:90:cd:03:14:c2:fb:e8:bd:a3:62:90:9f:
ba:a5:a9:00:95:e1:5f:f6:e5:6d:27:be:56:bb:e6:
73:2d:39:11:38:95:84:b3:ed:41:4a:31:3e:b5:9c:
52:e4:4f:a0:84:c4:b4:fa:95:8b:d3:a3:85:28:d7:
28:7a:65:14:57:aa:33:67:fd:f6:87:36:f7:18:13:
b2:d6:49:0a:7e:31:08:f3:db:dd:ea:b2:41:db:b2:
aa:f4:b8:87:47:da:05:0a:b0:55:f4:54:27:23:8a:
da:e5:14:0e:f8:30:57:a7:38:cc:ae:2c:cd:86:dd:
cf:bd:4e:a8:cf:60:59:69:7d:df:a0:fa:25:bd:22:
f0:e5:99:be:14:b9:9c:af:b9:61:1f:1a:f3:1e:11:
a6:62:e0:da:36:ba:1b:d4:e8:27:fe:26:a0:cc:da:
1c:c1:b9:df:0d:58:a5:97:6d:b2:cd:6a:d1:8f:37:
5f:42:3e:0f:ee:46:98:83:2a:1e:7b:8d:37:86:77:
21:a5:d2:0c:3d:9a:21:56:99:f7:cf:32:b2:ed:c3:
a1:6b:9a:ff:47:77:ed:eb:31:2c:37:83:d8:81:4a:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D0:C0:34:33:CB:0A:C1:1B:82:8C:61:B6:A1:45:26:B1:77:1A:3A
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.218.24.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d0:41:4b:9e:99:db:ee:d7:05:24:bc:e9:17:1d:f0:09:1c:
fd:b0:96:85:9d:7b:79:18:53:ff:c5:9a:cd:42:a7:69:ec:64:
e4:b1:41:90:99:96:7f:38:09:22:91:d1:e7:e9:d6:19:b8:c5:
3b:a2:74:a3:f6:b4:c7:38:95:79:36:fa:b8:73:f8:b0:0b:8a:
08:cd:57:63:bb:51:d6:3a:f6:f5:67:fd:46:2f:9a:e2:60:13:
6b:a0:5a:e5:ca:d2:c8:be:95:8c:a2:60:fe:eb:07:2c:c5:aa:
f2:3f:3a:ba:21:63:7e:4d:a4:e6:3a:2f:a6:ae:46:b4:8b:64:
db:8d:94:c7:2f:77:90:90:88:07:ca:12:c9:01:f4:de:c8:dd:
c3:6b:b7:04:2e:a6:5d:e0:16:c6:d4:c4:50:37:9f:b5:34:61:
21:23:da:7e:f8:06:24:7a:34:ff:12:d1:67:79:23:50:0b:28:
41:68:91:49:90:04:bf:12:d7:08:e5:fa:92:ea:45:17:3d:e3:
2c:f7:84:3c:d0:9c:a7:80:5a:cf:c5:c0:54:6d:5e:cc:97:ee:
31:f2:66:d3:d6:2e:a0:67:5f:3d:af:a9:70:94:e8:e7:f7:18:
4f:cb:4c:8c:73:50:09:18:f7:62:68:f4:85:cc:55:4f:8b:12:
9b:3c:4f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:48:05 2025 by rpki-client