Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137302e302f32332d3234203d3e20323131353835.roa
File: 36342e342e3137302e302f32332d3234203d3e20323131353835.roa (raw, json)
Hash identifier: dGuD9Nbh30mCKo7+EUdPbO0/07NN/xycykJ14bTt/mI=
Subject key identifier: C9:4D:C4:BE:9F:A5:4A:A6:53:5C:DB:0C:DD:C9:19:F2:F1:20:77:9F
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 29A0FC0764EE0C5A879BB053122D1282BD7D3BFA
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137302e302f32332d3234203d3e20323131353835.roa
Signing time: Mon 22 May 2023 11:38:46 +0000
ROA not before: Mon 22 May 2023 11:33:46 +0000
ROA not after: Mon 20 May 2024 11:38:46 +0000
asID: 211585
IP address blocks: 64.4.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a0:fc:07:64:ee:0c:5a:87:9b:b0:53:12:2d:12:82:bd:7d:3b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: May 22 11:33:46 2023 GMT
Not After : May 20 11:38:46 2024 GMT
Subject: CN=C94DC4BE9FA54AA6535CDB0CDDC919F2F120779F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:01:62:ef:0e:96:47:86:2f:53:dc:6e:61:
b9:bd:fb:10:b5:84:74:88:76:7a:e4:ec:14:43:52:
b4:59:d0:1b:74:b5:9a:e7:7d:61:3b:08:98:a3:71:
97:94:1f:92:e8:28:f3:f7:89:fe:e3:ac:86:b1:7c:
40:e5:56:73:c1:59:fc:cf:69:6b:94:ad:e5:f2:b2:
5e:87:1b:83:b1:73:eb:48:47:db:01:c3:28:a3:f3:
8b:8e:a4:d3:65:45:82:0a:97:01:ff:91:48:a3:a6:
46:55:fd:0f:1b:78:21:43:46:cd:e8:23:b5:d0:dd:
fc:4e:27:56:51:1f:e3:02:02:d4:20:11:ab:b5:d5:
62:f8:15:75:76:df:05:00:eb:fd:65:5c:52:db:5a:
b4:a6:98:92:c0:2a:73:be:ea:81:43:70:ae:64:24:
db:92:c1:9f:9b:7f:6d:b9:f7:19:e2:8c:90:da:a6:
c8:3a:bb:0f:fa:21:9f:32:86:45:4c:6d:22:f1:53:
c3:4d:10:57:68:3d:11:fd:d0:f4:6f:a1:6e:1f:75:
db:0c:4b:7d:4f:a1:5a:d7:8c:6b:93:52:81:4b:bc:
70:58:a6:54:f3:0f:99:d1:08:80:cf:50:d4:a5:84:
98:ef:73:19:57:e2:8f:b0:96:da:43:8e:34:ac:0a:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4D:C4:BE:9F:A5:4A:A6:53:5C:DB:0C:DD:C9:19:F2:F1:20:77:9F
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137302e302f32332d3234203d3e20323131353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.4.170.0/23
Signature Algorithm: sha256WithRSAEncryption
67:16:00:94:7c:36:58:63:79:4a:16:6c:e3:7e:0b:d6:bd:e0:
08:be:02:c8:14:2d:f2:d4:7d:50:43:11:03:fc:83:1a:f6:ce:
ae:e8:54:c2:4b:5c:6e:3f:53:27:b7:39:28:b2:0e:fa:f7:23:
7c:52:de:78:d8:ee:2a:41:cc:80:b5:3d:8f:d0:ca:6b:43:8e:
b6:9c:24:c8:6b:f4:b0:43:df:34:3d:f0:d6:e5:08:5b:11:fa:
5f:2c:25:6b:c9:f3:a0:63:3a:4d:eb:b9:ab:2b:b6:7b:b4:e6:
44:b7:ca:e7:cb:4a:91:55:67:93:da:39:5e:af:4b:09:f6:7e:
61:ca:99:73:74:76:b0:cc:04:4c:52:89:6c:a9:ad:22:0a:38:
b0:73:1c:34:16:5a:42:a8:c6:db:5a:5c:88:f6:50:8a:cc:a5:
17:e4:7c:2b:10:e6:a4:a4:48:4c:b0:c8:f0:af:c1:37:fd:b4:
ec:71:dd:77:1c:7e:d0:65:45:90:66:34:66:bd:f3:1c:1a:66:
c0:34:3a:56:bf:f3:91:50:de:4b:25:04:86:30:66:08:fa:ab:
70:f6:51:09:b8:b6:0f:6a:a2:5f:9b:36:f3:a2:66:1c:3c:a5:
48:43:44:c0:20:f7:5c:ac:0b:e0:7c:cb:9c:e5:64:e9:d9:aa:
a4:51:7c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:38 2025 by rpki-client