Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135362e302f32342d3234203d3e203233343730.roa
File: 3231362e37332e3135362e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: 7pv0L8oHvGf6hxpFZqCaCwh61o6Y6JpMO5fpXiOAhzA=
Subject key identifier: 94:54:35:69:42:1F:EC:4F:55:22:F8:71:15:95:DC:8B:57:E6:CD:23
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 13C24FF9FA6D38DA407035D9122E0941A30E2F58
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135362e302f32342d3234203d3e203233343730.roa
Signing time: Wed 27 Nov 2024 06:40:12 +0000
ROA not before: Wed 27 Nov 2024 06:35:12 +0000
ROA not after: Wed 26 Nov 2025 06:40:12 +0000
asID: 23470
IP address blocks: 216.73.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c2:4f:f9:fa:6d:38:da:40:70:35:d9:12:2e:09:41:a3:0e:2f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Nov 27 06:35:12 2024 GMT
Not After : Nov 26 06:40:12 2025 GMT
Subject: CN=94543569421FEC4F5522F8711595DC8B57E6CD23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:00:65:4a:bb:ed:37:9a:27:d7:1d:0b:81:
fb:ea:47:cd:2a:13:34:05:96:6e:eb:f6:e1:7e:9f:
dd:03:d6:f6:bd:58:68:a4:6a:be:d3:b6:07:4c:a9:
b5:fc:90:0f:bb:77:68:65:45:dc:b4:90:8c:f0:c0:
1b:6c:bf:36:76:00:05:12:2c:56:b7:be:35:07:0d:
d1:49:ee:4c:39:22:1b:90:e0:97:de:54:10:0f:ff:
2c:c3:4b:f5:18:2d:96:81:b5:68:6e:46:27:47:23:
29:84:5a:21:9b:cb:d3:00:30:e9:bc:71:e2:d9:5f:
ac:e5:6f:72:45:cd:d9:aa:e8:76:6c:4b:a0:35:1d:
4a:d2:c2:1d:c6:56:bc:03:1a:70:1c:6d:dc:71:e0:
6b:58:15:51:c8:23:db:1b:29:18:78:e7:69:f6:27:
6e:f3:b3:88:fd:85:61:e2:0a:1a:3e:52:bf:13:60:
88:17:f3:13:48:b9:b7:6f:d6:a6:72:92:1a:a9:57:
4e:bc:d4:23:79:3e:d3:00:e2:5b:ec:1e:51:52:16:
72:f8:6c:5a:2a:88:d4:bd:18:0f:ea:ed:1b:19:5c:
a5:ec:50:c9:6a:e3:3e:8d:0a:81:1e:e4:15:33:f4:
3f:26:38:22:9f:d5:a1:d6:71:34:0c:df:9d:19:8c:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:54:35:69:42:1F:EC:4F:55:22:F8:71:15:95:DC:8B:57:E6:CD:23
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135362e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.73.156.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:49:8a:93:67:0a:02:87:4a:9a:65:4c:41:b3:ac:79:0d:2f:
96:92:69:be:46:73:c7:6b:33:a2:70:08:6d:80:da:f4:4c:7c:
3e:2a:17:73:df:95:d2:f9:46:5b:35:ab:12:ab:4c:b0:8a:b4:
50:f2:73:0b:4f:47:30:37:d4:f6:d8:c9:4c:ee:cf:ab:7d:98:
3f:d5:39:01:63:76:1f:a8:16:bf:8c:c0:9c:b6:e1:80:fd:35:
52:c4:26:cd:59:7f:65:69:ee:16:54:f1:1d:4b:40:cb:41:91:
d8:53:b7:a7:9d:66:04:ea:25:30:46:77:12:c7:61:6d:f0:53:
df:dc:74:05:62:0d:44:a2:a9:85:81:3c:2b:2a:29:47:aa:a7:
83:38:78:61:ff:a1:20:d6:77:54:4e:b3:c8:ec:5b:25:75:79:
24:af:d3:64:89:17:20:e2:d8:6b:fd:0a:c7:59:d1:22:ac:30:
80:e7:1b:16:1f:4e:4d:a2:d1:4c:a6:66:d9:e6:b0:57:4a:9a:
49:35:bc:b0:bc:80:1f:d8:d6:89:de:27:de:cf:8f:6c:1b:e1:
d5:2f:8e:ca:71:79:d4:44:74:57:d8:19:ce:f0:41:42:11:87:
f1:8e:97:76:32:2f:6a:57:fc:a1:35:bf:06:0f:54:a2:4a:a0:
06:97:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:21:59 2025 by rpki-client