Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136382e302f32342d3234203d3e20313339343832.roa
File: 36342e342e3136382e302f32342d3234203d3e20313339343832.roa (raw, json)
Hash identifier: IiP/d+cfTFvi40xR7s9C56AgYJ0nqYAYpWxMKSBv21U=
Subject key identifier: B0:1F:5A:4D:03:64:83:B8:EE:A8:05:D8:C9:A2:D7:2A:07:27:B1:4F
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 68D67A1A9D56317FF662EE078B7FDA31DA02DD8D
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136382e302f32342d3234203d3e20313339343832.roa
Signing time: Sat 30 Sep 2023 08:05:42 +0000
ROA not before: Sat 30 Sep 2023 08:00:42 +0000
ROA not after: Sat 28 Sep 2024 08:05:42 +0000
asID: 139482
IP address blocks: 64.4.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d6:7a:1a:9d:56:31:7f:f6:62:ee:07:8b:7f:da:31:da:02:dd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Sep 30 08:00:42 2023 GMT
Not After : Sep 28 08:05:42 2024 GMT
Subject: CN=B01F5A4D036483B8EEA805D8C9A2D72A0727B14F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:92:28:db:d6:5d:f4:01:5c:49:f2:75:8e:
c6:43:85:83:24:eb:39:ee:d6:e6:76:6e:6a:23:ca:
cc:aa:0c:2a:d5:06:a4:0a:c9:b8:d6:00:35:17:dc:
a4:4a:00:39:36:a8:0a:59:f7:b5:59:74:39:b6:4d:
9a:c1:30:6d:a3:98:ee:72:7d:f5:38:f2:d6:24:4a:
d4:93:aa:d6:fd:1d:1a:18:50:02:d4:4b:da:eb:01:
36:4f:a9:39:e8:68:d9:1c:e1:0b:76:0b:41:b9:26:
b8:9a:91:c4:56:15:e2:af:20:db:04:4c:10:c0:92:
80:f4:a1:c5:04:4f:67:29:aa:35:e2:45:13:78:27:
f7:90:76:09:85:93:3d:bb:67:2d:94:8f:f8:96:d9:
50:a9:1d:f4:e7:f8:d1:8d:af:fa:a6:32:70:5e:42:
33:00:75:fd:9a:ce:e4:06:03:4d:4f:ff:02:79:56:
9b:f9:62:cb:69:ab:a4:fe:98:eb:e5:ee:4b:e3:90:
0e:88:23:66:64:4b:5d:6f:6a:03:17:a8:7d:ff:de:
39:29:5e:43:10:63:68:9e:6a:cc:9d:ff:70:57:f9:
ab:07:79:e0:e4:34:bf:c3:fc:9f:87:2f:4e:6e:62:
28:f3:15:aa:c7:6f:52:3d:c3:2d:10:59:bc:31:81:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1F:5A:4D:03:64:83:B8:EE:A8:05:D8:C9:A2:D7:2A:07:27:B1:4F
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136382e302f32342d3234203d3e20313339343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.4.168.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2f:55:57:33:ae:2a:e6:a2:c9:c7:d4:57:a0:bb:d5:80:6c:
40:c4:94:d8:5e:4d:ce:5d:b3:23:72:e6:40:cd:50:d8:97:eb:
32:19:4b:f9:ad:e7:2e:6c:48:59:59:80:28:df:70:47:11:02:
3e:93:e6:4c:b3:2a:ff:83:f5:01:d8:7d:8f:9f:5a:25:b9:ac:
34:6c:04:52:bb:1c:e4:71:51:79:38:f6:4e:1f:74:c5:af:de:
98:7b:2f:74:af:e2:d7:48:25:a3:d4:e4:ea:31:8f:cc:54:8d:
37:45:21:cf:27:27:95:8e:9f:b2:28:93:4e:75:f7:6e:cb:9b:
86:d2:43:6f:58:3c:67:6d:ba:6a:b6:9b:73:e2:22:63:98:79:
05:a0:89:a9:47:91:63:f2:cd:10:81:36:8a:bf:33:04:bf:8d:
2e:0d:23:76:f0:be:28:d8:4e:44:38:4d:a6:a5:f6:91:4d:ab:
2f:fd:c2:ee:75:88:4c:27:d5:04:ca:9e:bf:54:72:32:6d:40:
37:72:97:c1:f9:70:03:00:6f:75:dd:5f:2c:fd:a4:c2:91:02:
fb:44:89:79:b2:14:fb:27:1b:ed:1e:ca:54:c6:e9:01:31:13:
44:18:2d:2d:bc:e3:f3:4a:6b:50:88:ca:19:e2:68:a2:4b:5d:
91:c6:e8:45
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUaNZ6Gp1WMX/2Yu4Hi3/aMdoC3Y0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNThmNzIxNzRhMGE5ZTNkMDdhMzdjYWQ4N2MyMjM1YTc2
MmVmYTZhOWI2MjAzNzI4NDUwHhcNMjMwOTMwMDgwMDQyWhcNMjQwOTI4MDgwNTQy
WjAzMTEwLwYDVQQDEyhCMDFGNUE0RDAzNjQ4M0I4RUVBODA1RDhDOUEyRDcyQTA3
MjdCMTRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVGSKNvWXfQB
XEnydY7GQ4WDJOs57tbmdm5qI8rMqgwq1QakCsm41gA1F9ykSgA5NqgKWfe1WXQ5
tk2awTBto5jucn31OPLWJErUk6rW/R0aGFAC1Eva6wE2T6k56GjZHOELdgtBuSa4
mpHEVhXiryDbBEwQwJKA9KHFBE9nKao14kUTeCf3kHYJhZM9u2ctlI/4ltlQqR30
5/jRja/6pjJwXkIzAHX9ms7kBgNNT/8CeVab+WLLaauk/pjr5e5L45AOiCNmZEtd
b2oDF6h9/945KV5DEGNonmrMnf9wV/mrB3ng5DS/w/yfhy9ObmIo8xWqx29SPcMt
EFm8MYEH7QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFLAfWk0DZIO47qgF2Mmi1yoH
J7FPMB8GA1UdIwQYMBaAFOmrgtTZv0wW6m58+vPuFM/sWkqKMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2OTk4NjYzZDgwNzAyLzAv
RTlBQjgyRDREOUJGNEMxNkVBNkU3Q0ZBRjNFRTE0Q0ZFQzVBNEE4QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2FlODVkMjRhLTc3ZDQtNGNmNy04MGFhLWMwNzExOTljMjg4OS81OGY3
MjE3NGEwYTllM2QwN2EzN2NhZDg3YzIyMzVhNzYyZWZhNmE5YjYyMDM3Mjg0NS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg2OTQxZDVjMDE4Njk5
ODY2M2Q4MDcwMi8wLzM2MzQyZTM0MmUzMTM2MzgyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzMTMzMzkzNDM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABABKgwDQYJKoZIhvcNAQELBQAD
ggEBAEAvVVczrirmosnH1Fegu9WAbEDElNheTc5dsyNy5kDNUNiX6zIZS/mt5y5s
SFlZgCjfcEcRAj6T5kyzKv+D9QHYfY+fWiW5rDRsBFK7HORxUXk49k4fdMWv3ph7
L3Sv4tdIJaPU5Ooxj8xUjTdFIc8nJ5WOn7Iok051927Lm4bSQ29YPGdtumq2m3Pi
ImOYeQWgialHkWPyzRCBNoq/MwS/jS4NI3bwvijYTkQ4Taal9pFNqy/9wu51iEwn
1QTKnr9UcjJtQDdyl8H5cAMAb3XdXyz9pMKRAvtEiXmyFPsnG+0eylTG6QExE0QY
LS284/NKa1CIyhniaKJLXZHG6EU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:09 2025 by rpki-client