Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e20383334.roa
File: 3136322e3231382e32362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Y4ZAf6IVK5E9nfhBx2AzJaqv5QoELrTMj/56P8wILoQ=
Subject key identifier: AF:95:33:C3:4B:1F:A9:BE:B9:9B:A6:D9:AF:A5:5B:7C:50:BC:AA:34
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 353885EC7BA65C1F4650EE47C5E118CE9AB093FB
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e20383334.roa
Signing time: Thu 02 Jan 2025 07:43:02 +0000
ROA not before: Thu 02 Jan 2025 07:38:02 +0000
ROA not after: Thu 01 Jan 2026 07:43:02 +0000
asID: 834
IP address blocks: 162.218.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:38:85:ec:7b:a6:5c:1f:46:50:ee:47:c5:e1:18:ce:9a:b0:93:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Jan 2 07:38:02 2025 GMT
Not After : Jan 1 07:43:02 2026 GMT
Subject: CN=AF9533C34B1FA9BEB99BA6D9AFA55B7C50BCAA34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c2:22:7a:88:72:82:39:d3:64:e7:84:28:53:
f4:b1:e9:63:e0:ff:1f:3d:08:d1:84:93:65:53:30:
63:64:53:43:39:54:88:0c:39:bc:40:4b:23:ca:8c:
b9:91:c4:78:e7:a1:34:96:5f:45:6c:41:07:73:3e:
d2:db:3d:17:17:93:65:1e:05:75:bf:25:d6:15:a5:
4e:c8:f7:d8:5a:34:12:d4:27:7e:d9:2b:b9:17:16:
86:96:8e:09:f1:dd:e2:93:7a:32:99:c1:6f:4c:af:
ae:8a:1d:57:2b:7d:86:a6:74:b6:57:e1:92:86:0f:
f7:45:1b:63:65:6f:25:99:0a:a2:70:f9:eb:3d:82:
ad:c8:0c:a2:f8:f2:10:ff:9f:89:4a:84:86:bc:88:
8e:79:df:43:96:6b:8e:ce:1c:a9:92:90:33:db:b1:
e6:b8:04:d0:d6:f5:23:b4:bb:ef:26:62:b6:c1:97:
31:49:3e:dd:c0:f9:c3:5c:5c:62:86:ef:40:d4:54:
e2:0f:92:ef:31:93:b9:29:1d:46:a2:87:da:d9:ac:
92:27:b5:8b:f0:d6:e2:33:97:28:f4:4a:00:c4:b9:
46:e2:17:0e:cb:cc:4b:6a:6a:d5:f8:3a:4f:00:cf:
ac:cd:33:00:b0:cf:46:4e:35:87:31:f9:cb:19:5d:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:95:33:C3:4B:1F:A9:BE:B9:9B:A6:D9:AF:A5:5B:7C:50:BC:AA:34
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.218.26.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6c:0e:ad:f5:ff:81:03:5a:e1:dc:fc:ad:ed:d5:ad:c6:1f:
36:ce:d9:f7:46:22:03:ea:74:30:15:2b:1b:dc:41:73:73:5d:
96:f2:8f:c0:ed:6f:47:34:8b:15:f9:c1:e6:8e:31:52:0d:33:
39:67:f7:32:05:00:5e:c1:db:c7:66:59:7f:2f:a8:84:94:fa:
a3:8a:0c:9d:92:0e:4b:fa:59:d5:26:ce:e2:6b:b7:84:70:fa:
f9:c1:23:08:38:cd:67:df:53:d7:06:07:3d:3f:30:74:62:25:
a1:66:35:ca:0b:3b:31:a0:0b:57:54:0a:7a:26:4d:2a:16:36:
8a:3b:09:b7:f3:3b:3c:6b:4c:cb:66:00:a6:2c:10:db:f6:2f:
e3:fe:9d:53:f8:ae:2c:9e:e2:66:ef:da:a8:ab:d9:2b:17:78:
8f:11:69:c8:61:31:f4:81:79:23:81:66:60:73:e7:33:93:72:
48:31:9c:dc:f6:c6:ce:13:29:aa:69:60:f9:bd:20:86:69:18:
94:f9:d2:65:fd:3c:37:44:d8:87:de:06:74:ec:92:5b:82:42:
4c:94:77:78:19:e7:c4:78:16:19:93:3b:e8:fa:cc:01:f4:c4:
a6:00:97:88:ca:db:9b:2a:2f:a4:50:ab:89:0a:68:4e:af:21:
97:b0:13:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:55 2025 by rpki-client