Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137312e302f32342d3234203d3e20383334.roa
File: 36342e342e3137312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 22CVZXBEUq0YGxUQpTwMkKr20iPqn87Punmcn7zt3sM=
Subject key identifier: 2D:C0:74:58:FC:15:12:EC:8A:C8:39:6A:34:CB:4B:24:A3:56:05:12
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 7241210DEB9691984EC5A22A44E2558DBB6D83F6
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137312e302f32342d3234203d3e20383334.roa
Signing time: Sun 16 Apr 2023 00:00:13 +0000
ROA not before: Sat 15 Apr 2023 23:55:13 +0000
ROA not after: Sun 14 Apr 2024 00:00:13 +0000
asID: 834
IP address blocks: 64.4.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:41:21:0d:eb:96:91:98:4e:c5:a2:2a:44:e2:55:8d:bb:6d:83:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Apr 15 23:55:13 2023 GMT
Not After : Apr 14 00:00:13 2024 GMT
Subject: CN=2DC07458FC1512EC8AC8396A34CB4B24A3560512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bf:2e:81:6a:6d:4a:93:c4:d0:79:ad:be:e8:
ff:10:d2:47:15:47:1f:46:e1:8f:5e:26:2a:95:74:
ac:dc:b8:1d:77:9a:64:21:db:3b:e6:a2:98:e2:6e:
61:39:b8:64:8d:a7:92:80:99:49:c2:b4:28:74:ef:
b4:f3:f4:57:0d:e9:68:47:42:1a:22:ac:70:40:f8:
81:ce:ca:09:07:90:8d:ec:d5:71:4a:d3:a1:f2:69:
d6:29:cf:d4:59:60:b0:94:bd:1b:6e:52:dc:6c:4f:
c4:4a:9a:b1:99:7e:af:96:ec:a4:34:1c:c5:54:13:
f3:16:15:d3:3e:b9:ed:f4:c9:21:99:7d:9b:6d:c1:
94:20:dc:a5:8e:35:8a:5e:e4:1c:49:67:ab:4a:08:
44:15:bf:2c:3a:b0:07:da:d2:43:84:cc:27:d7:b7:
bf:a8:97:a2:c1:02:6a:64:6d:e7:1f:fd:19:1e:72:
80:23:be:32:ef:9d:92:7f:92:a8:6f:94:96:ca:dd:
83:96:21:91:31:82:18:76:6d:d2:68:b5:4c:d9:26:
61:6b:1d:fa:64:ef:6c:8d:91:23:02:3c:55:89:5a:
9c:5b:93:67:60:a5:b4:ec:3b:60:a4:64:6e:46:a1:
12:d2:72:2e:80:44:73:b6:f4:00:3f:13:e9:73:47:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C0:74:58:FC:15:12:EC:8A:C8:39:6A:34:CB:4B:24:A3:56:05:12
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.4.171.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:35:87:a9:70:e6:64:e7:09:10:8c:ae:f5:06:7a:20:e0:e0:
ff:ea:c8:ac:d3:0f:dc:25:e6:ad:bf:00:5c:5b:06:aa:bb:d6:
c4:16:8b:cf:df:18:d8:b4:0e:f2:1d:af:2d:04:b9:6f:3c:70:
0e:b1:e6:90:7f:d5:d9:dd:46:21:3b:3d:f9:bf:c7:85:16:c2:
e7:d8:ba:01:ff:62:71:b3:bd:57:6e:c7:df:c2:bf:e4:25:bb:
20:14:5e:74:61:33:6d:94:88:7e:32:00:6d:63:65:df:11:ff:
d2:cd:47:79:b8:f4:56:3d:44:9d:e2:3f:97:d5:fa:cb:8a:a2:
f1:98:40:92:c5:62:6d:19:42:34:2f:9f:36:5e:8f:5f:cf:1c:
13:48:af:d4:41:2f:b6:c9:13:b0:53:71:02:4d:ed:08:7b:e4:
d7:96:92:82:7f:31:f2:4b:3e:19:40:64:32:8e:df:13:cb:13:
7d:b5:71:46:5e:9f:fd:74:c0:0d:65:df:46:1b:72:60:88:fa:
74:9f:2f:c6:3f:ff:33:bc:ab:07:e8:d6:a5:44:8f:e3:2c:6c:
39:5c:f9:f4:eb:c1:93:43:64:ca:c1:09:83:75:d8:df:7f:ee:
49:65:b0:32:e9:94:b8:72:f4:8c:d0:38:37:c2:cc:90:2f:29:
41:c0:aa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:36:59 2025 by rpki-client