Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136382e302f32322d3234203d3e20323131353835.roa
File: 36342e342e3136382e302f32322d3234203d3e20323131353835.roa (raw, json)
Hash identifier: 7loKyDIb/DyU1Vf/uZob85Kv/fRnzHZHQ7vXnY5yHek=
Subject key identifier: 05:6E:84:26:29:91:B8:7C:BF:BA:CD:7D:53:A7:49:C9:56:4F:A3:04
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 3A8FF7916DECB7925C382848C87F734A717CABC7
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136382e302f32322d3234203d3e20323131353835.roa
Signing time: Tue 28 Feb 2023 19:38:05 +0000
ROA not before: Tue 28 Feb 2023 19:33:05 +0000
ROA not after: Tue 27 Feb 2024 19:38:05 +0000
asID: 211585
IP address blocks: 64.4.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:8f:f7:91:6d:ec:b7:92:5c:38:28:48:c8:7f:73:4a:71:7c:ab:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Feb 28 19:33:05 2023 GMT
Not After : Feb 27 19:38:05 2024 GMT
Subject: CN=056E84262991B87CBFBACD7D53A749C9564FA304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a1:5e:e9:6f:c8:c9:fd:fd:17:fc:32:b5:25:
32:c7:bb:0f:95:14:08:f6:53:d2:9f:63:5f:ba:e9:
7c:97:8a:2f:f0:dc:12:9b:51:37:42:df:e2:1f:d6:
83:a0:4b:ab:50:a5:84:75:d3:0e:86:38:05:ff:a7:
79:60:ca:3e:06:66:ce:a5:ad:79:3c:14:0e:ca:0b:
40:6a:1d:4d:9e:03:51:55:ee:b3:48:c2:d4:b9:1d:
41:0c:e2:d6:1b:51:9d:11:1e:71:a5:f8:ee:94:28:
1a:eb:76:6b:ba:01:77:1f:2f:9e:67:93:bb:c6:3b:
f2:bf:fb:40:f3:61:20:f6:5f:2d:36:b5:48:9c:a8:
c4:b1:9d:03:ce:a4:e8:4c:15:d1:29:43:84:97:ca:
2a:ef:79:22:1c:e3:19:4d:31:50:de:cb:eb:76:1c:
7e:11:30:a3:81:e3:df:07:1b:09:85:2a:bd:4e:a1:
97:e9:96:a5:3c:b8:ae:87:d3:ab:22:17:c3:77:2f:
c7:ef:bd:da:23:88:6b:fd:b8:d7:2c:a8:fa:1d:ed:
7a:c4:92:e5:a9:2c:6a:37:75:11:4f:da:3a:4d:ea:
70:5d:44:cf:cd:02:77:bd:bc:c9:36:05:06:18:a9:
7d:cd:48:64:1e:61:b5:61:9e:3b:de:65:42:73:69:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6E:84:26:29:91:B8:7C:BF:BA:CD:7D:53:A7:49:C9:56:4F:A3:04
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136382e302f32322d3234203d3e20323131353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.4.168.0/22
Signature Algorithm: sha256WithRSAEncryption
83:ae:72:a7:11:a6:5c:46:b9:5f:73:e1:3b:f8:93:6a:bf:9e:
43:60:f0:c4:09:df:61:3d:c2:7e:86:f0:2c:0e:ad:96:3e:55:
13:8f:94:61:33:dd:6a:56:8d:3f:ac:5c:97:7a:5a:db:ab:22:
0f:0c:5f:ea:33:51:88:da:23:46:7d:9b:e1:cb:4b:a6:86:a7:
c4:cd:b0:23:c7:f9:3d:43:23:3e:28:1f:b0:69:42:31:40:51:
40:60:85:d2:c4:65:05:32:34:97:32:67:98:46:46:16:b9:5f:
5a:8c:ee:7c:6d:8d:0e:18:02:eb:ca:7c:25:49:ca:25:90:67:
04:74:31:2b:5b:8e:be:00:77:4a:f9:9c:03:b1:10:3a:4f:92:
48:4c:22:a1:8d:d8:3b:05:7b:53:8b:fe:c7:43:ef:e8:0c:fa:
b0:06:28:d6:86:be:da:00:46:4f:e9:78:92:d7:b5:e1:b4:0a:
48:1c:20:f9:49:11:9e:4c:6b:f9:d4:dd:aa:76:ee:bb:43:50:
aa:0b:8b:94:08:2b:72:70:00:8b:5d:03:0f:f8:a6:9b:be:7c:
6e:6d:9c:ee:f3:3b:81:9a:13:cd:d3:c1:fb:ee:58:4d:ad:12:
20:76:c7:7d:e8:61:9b:52:7e:7d:e5:a6:e8:4f:de:95:3f:27:
59:d8:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:11:45 2025 by rpki-client