Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136392e302f32342d3234203d3e20383334.roa
File: 36342e342e3136392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mHlRC3jQoowNitVPZ+aMTcdFkhW1VXJ7iP23vAtW3SM=
Subject key identifier: 17:B9:B4:D7:F3:59:4E:4E:50:05:39:D3:B7:3C:F7:4F:06:B1:C2:F0
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 78B075C341349240C216D95415E25EF7A7E529E0
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136392e302f32342d3234203d3e20383334.roa
Signing time: Sun 16 Jul 2023 00:00:11 +0000
ROA not before: Sat 15 Jul 2023 23:55:11 +0000
ROA not after: Sun 14 Jul 2024 00:00:11 +0000
asID: 834
IP address blocks: 64.4.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b0:75:c3:41:34:92:40:c2:16:d9:54:15:e2:5e:f7:a7:e5:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Jul 15 23:55:11 2023 GMT
Not After : Jul 14 00:00:11 2024 GMT
Subject: CN=17B9B4D7F3594E4E500539D3B73CF74F06B1C2F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:d5:27:dd:17:ef:93:c0:4c:e8:3c:99:2a:
18:7e:c7:c5:61:2a:16:9a:0f:37:56:a0:99:53:31:
5e:30:9b:e1:ea:01:7c:34:a1:d2:45:9f:92:d1:9b:
e0:8a:46:8e:9a:2f:18:46:d3:c2:40:0e:25:c6:fa:
fa:11:36:6a:d6:15:13:46:b2:f0:d1:f2:97:a5:a1:
de:f0:b9:bd:4c:aa:ac:e3:2c:d5:72:2f:80:a0:d2:
b2:92:4a:63:53:e8:7a:8d:27:75:5a:5d:f2:8c:57:
6e:57:0e:29:e1:81:65:aa:69:a6:fd:31:97:d1:7e:
b6:99:d4:13:81:f8:36:d2:28:f9:3b:1c:a0:01:a1:
c8:8b:04:b6:49:31:45:1e:6d:1c:2a:93:68:40:fb:
ab:ad:ad:7c:19:9a:fd:7d:35:a3:30:0f:45:fc:b5:
88:4e:79:a0:74:ff:46:38:8c:2e:20:78:4f:05:0d:
33:eb:a7:17:e7:d8:78:b8:b3:f0:ac:fb:aa:a0:30:
8d:51:a5:1b:a8:c6:08:a9:14:1b:41:59:92:8f:44:
c4:fe:ca:1c:10:61:41:f3:32:ad:dd:01:db:fe:cf:
5c:47:49:93:1d:55:b9:18:ca:75:40:3f:f2:d0:00:
0f:d6:f9:0a:ac:1d:5d:05:fd:7d:32:ee:05:54:ed:
c5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B9:B4:D7:F3:59:4E:4E:50:05:39:D3:B7:3C:F7:4F:06:B1:C2:F0
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.4.169.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d0:8e:87:02:74:92:32:c3:ff:eb:89:5d:9a:c2:f8:4f:0d:
0b:e1:19:e5:5a:f8:c0:1a:49:b0:f0:9c:e3:32:cb:4b:34:51:
84:57:f2:af:bd:a7:88:c6:df:5e:64:e3:42:18:64:73:99:2f:
24:fa:ac:5c:99:84:74:e6:36:c3:97:72:c8:f5:7c:a9:15:12:
9a:85:61:e4:43:3a:27:60:3a:e7:f5:a9:09:3d:31:c2:d5:78:
6e:c7:89:5a:8e:84:99:c8:93:d6:b3:92:09:7a:cb:10:2b:f7:
e8:29:35:63:f7:41:b4:2d:64:f1:e7:76:02:ba:71:24:6e:6e:
42:a3:c7:26:3d:1d:25:f3:1b:64:92:4f:15:eb:54:2c:ed:8a:
e3:14:4b:95:34:12:d0:41:c8:2b:7a:00:2a:d3:c8:1b:85:08:
ce:89:c8:7f:47:fd:81:07:fd:f2:cf:17:9e:e1:d1:85:5a:1c:
3c:63:10:01:1f:6b:cb:11:bb:19:02:7f:7d:b5:cc:f9:b2:b1:
05:eb:c1:fe:ac:a5:60:85:25:0f:bb:4a:e6:77:c8:f5:90:a9:
12:03:a6:6b:3c:55:f6:cf:8b:03:c2:7b:a0:ca:67:dc:a8:71:
a0:0f:ea:dc:1f:04:35:34:48:34:0a:96:3a:fa:5b:c1:47:82:
1e:89:95:b7
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUeLB1w0E0kkDCFtlUFeJe96flKeAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNThmNzIxNzRhMGE5ZTNkMDdhMzdjYWQ4N2MyMjM1YTc2
MmVmYTZhOWI2MjAzNzI4NDUwHhcNMjMwNzE1MjM1NTExWhcNMjQwNzE0MDAwMDEx
WjAzMTEwLwYDVQQDEygxN0I5QjREN0YzNTk0RTRFNTAwNTM5RDNCNzNDRjc0RjA2
QjFDMkYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6rVJ90X75PA
TOg8mSoYfsfFYSoWmg83VqCZUzFeMJvh6gF8NKHSRZ+S0ZvgikaOmi8YRtPCQA4l
xvr6ETZq1hUTRrLw0fKXpaHe8Lm9TKqs4yzVci+AoNKykkpjU+h6jSd1Wl3yjFdu
Vw4p4YFlqmmm/TGX0X62mdQTgfg20ij5OxygAaHIiwS2STFFHm0cKpNoQPurra18
GZr9fTWjMA9F/LWITnmgdP9GOIwuIHhPBQ0z66cX59h4uLPwrPuqoDCNUaUbqMYI
qRQbQVmSj0TE/socEGFB8zKt3QHb/s9cR0mTHVW5GMp1QD/y0AAP1vkKrB1dBf19
Mu4FVO3FswIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFBe5tNfzWU5OUAU507c8908G
scLwMB8GA1UdIwQYMBaAFOmrgtTZv0wW6m58+vPuFM/sWkqKMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2OTk4NjYzZDgwNzAyLzAv
RTlBQjgyRDREOUJGNEMxNkVBNkU3Q0ZBRjNFRTE0Q0ZFQzVBNEE4QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2FlODVkMjRhLTc3ZDQtNGNmNy04MGFhLWMwNzExOTljMjg4OS81OGY3
MjE3NGEwYTllM2QwN2EzN2NhZDg3YzIyMzVhNzYyZWZhNmE5YjYyMDM3Mjg0NS5j
ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2OTk4
NjYzZDgwNzAyLzAvMzYzNDJlMzQyZTMxMzYzOTJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAEAEqTANBgkqhkiG9w0BAQsFAAOCAQEAINCO
hwJ0kjLD/+uJXZrC+E8NC+EZ5Vr4wBpJsPCc4zLLSzRRhFfyr72niMbfXmTjQhhk
c5kvJPqsXJmEdOY2w5dyyPV8qRUSmoVh5EM6J2A65/WpCT0xwtV4bseJWo6EmciT
1rOSCXrLECv36Ck1Y/dBtC1k8ed2ArpxJG5uQqPHJj0dJfMbZJJPFetULO2K4xRL
lTQS0EHIK3oAKtPIG4UIzonIf0f9gQf98s8XnuHRhVocPGMQAR9ryxG7GQJ/fbXM
+bKxBevB/qylYIUlD7tK5nfI9ZCpEgOmazxV9s+LA8J7oMpn3KhxoA/q3B8ENTRI
NAqWOvpbwUeCHomVtw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:42:46 2025 by rpki-client