Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32372e302f32342d3234203d3e203633303233.roa
File: 3136322e3231382e32372e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier: IyGU4a88rG8edzhSMt+rOw1b2avUm536IBQmyO1DjF4=
Subject key identifier: 6B:B7:EF:19:50:4B:97:FF:C9:C4:5F:4E:F3:4F:CC:E7:45:32:19:14
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 028C6D2E2D53F6D0490522FA09025B5DD055E927
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32372e302f32342d3234203d3e203633303233.roa
Signing time: Fri 29 Nov 2024 21:35:22 +0000
ROA not before: Fri 29 Nov 2024 21:30:22 +0000
ROA not after: Fri 28 Nov 2025 21:35:22 +0000
asID: 63023
IP address blocks: 162.218.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:8c:6d:2e:2d:53:f6:d0:49:05:22:fa:09:02:5b:5d:d0:55:e9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Nov 29 21:30:22 2024 GMT
Not After : Nov 28 21:35:22 2025 GMT
Subject: CN=6BB7EF19504B97FFC9C45F4EF34FCCE745321914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:5c:51:d1:ea:04:c3:2b:27:6f:7c:65:5e:
9f:1a:e6:99:01:0c:1d:f3:42:26:04:51:6a:e6:e1:
41:35:d3:02:17:dd:be:f9:35:06:93:25:2f:28:44:
1d:9e:0e:c7:97:1a:e9:ac:96:14:68:e7:c0:e2:9b:
ba:3f:2c:42:3e:96:1e:ef:de:c8:8f:7f:02:12:25:
bf:14:0b:a1:cd:9c:68:2e:3b:7e:0b:b5:3d:9a:96:
1e:bb:78:62:4f:e6:99:51:ba:fb:2d:eb:9f:ea:7c:
e8:4a:98:b2:69:1a:8c:43:ba:e0:7a:01:86:7b:fc:
d7:f6:ba:28:eb:77:e7:23:8a:b0:bd:fe:63:04:8d:
ee:bd:4b:ff:a3:1c:ce:c9:65:1a:2d:62:84:d7:85:
3f:e1:dd:bd:3e:5a:9e:12:30:7a:50:f9:c9:19:0f:
b0:76:da:67:66:5b:24:a4:1c:5c:78:b0:ae:00:29:
14:b7:98:a6:d4:8b:c8:a2:cd:1d:d8:4d:51:21:bb:
dd:de:a0:9e:3a:0e:0b:65:97:fd:dc:6d:33:e4:08:
5f:bf:a2:05:3e:24:db:ae:52:d1:ec:1b:54:98:e9:
43:2d:89:ca:a6:52:47:86:a0:20:0c:d0:3c:6b:12:
c3:bc:be:80:7a:0b:bd:55:f4:14:04:24:4f:e5:8b:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B7:EF:19:50:4B:97:FF:C9:C4:5F:4E:F3:4F:CC:E7:45:32:19:14
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32372e302f32342d3234203d3e203633303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.218.27.0/24
Signature Algorithm: sha256WithRSAEncryption
06:6c:18:1b:33:38:fa:0a:74:27:fc:7e:2d:2b:f4:42:38:1c:
c0:82:db:10:01:c9:ce:22:c8:7d:3b:5a:8b:f1:04:d5:32:41:
38:93:b0:a7:88:6f:b1:fd:84:ed:0c:14:dd:f9:f6:60:04:46:
9b:2f:5d:35:ed:34:17:c4:f8:91:f7:f7:02:8d:7f:86:e6:b1:
3f:84:73:9e:42:5c:b0:ce:15:28:0f:d5:84:01:0f:be:7e:40:
a3:95:9d:95:68:d2:bd:1f:06:c6:40:8f:0f:96:c3:30:f8:1b:
29:fa:95:25:c0:14:0e:fb:34:4a:f4:b3:50:b1:d6:9e:30:ee:
48:17:a7:f9:9b:46:25:00:3c:76:00:b7:1b:2c:26:e8:52:a9:
c3:96:ba:a2:9a:81:0c:27:c7:56:6f:af:f9:d9:b1:1d:19:b6:
58:04:25:16:38:73:1c:c8:66:d7:63:25:1a:12:7a:f9:2c:88:
0a:3e:6b:fd:51:2c:42:6f:cc:b1:16:c6:0a:f1:15:e5:f8:7e:
3a:91:fc:b8:74:3b:a7:35:ce:eb:0d:eb:08:b8:e8:94:5c:4d:
a1:d7:fa:9b:4b:05:18:a0:9d:d0:3a:99:05:2c:30:df:a5:71:
b7:5a:b2:83:8f:54:12:d1:66:8d:cf:9d:b6:a9:09:52:6a:5b:
7a:ed:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:14 2025 by rpki-client