Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234322e302f32342d3234203d3e20383334.roa
File: 36362e3232352e3234322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: sNd7yYAtjZYWI3OE9nqFnWJWz+3Bc7AfzB5hHmTyiK8=
Subject key identifier: BF:2E:3C:80:80:30:6E:0A:DF:0B:4D:BD:D4:5D:EB:BA:99:83:30:D4
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 49C8C05CAC1937E83AE5E886B9ACD2539E28844C
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234322e302f32342d3234203d3e20383334.roa
Signing time: Mon 22 May 2023 00:00:05 +0000
ROA not before: Sun 21 May 2023 23:55:05 +0000
ROA not after: Mon 20 May 2024 00:00:05 +0000
asID: 834
IP address blocks: 66.225.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c8:c0:5c:ac:19:37:e8:3a:e5:e8:86:b9:ac:d2:53:9e:28:84:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 21 23:55:05 2023 GMT
Not After : May 20 00:00:05 2024 GMT
Subject: CN=BF2E3C8080306E0ADF0B4DBDD45DEBBA998330D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:8d:8c:6c:4c:d9:87:f5:aa:87:1e:c0:78:
eb:ea:5e:ec:60:2d:b3:5e:35:6e:7b:64:59:33:83:
26:96:60:d8:15:2d:be:1d:02:04:e1:d1:8b:82:8a:
d3:6f:75:22:06:a6:58:c5:10:88:2f:c9:be:bd:b5:
03:1b:2d:5f:90:53:52:94:f8:c5:87:ea:1c:1a:ce:
98:ea:1a:75:af:2a:1f:31:5d:c1:02:a6:97:c4:61:
de:bd:c4:c8:a0:0f:12:ba:d5:b0:6e:fe:93:eb:f9:
88:6e:16:45:30:b0:9f:44:49:67:bb:f9:29:5e:d6:
a6:18:51:09:9c:cb:81:1b:78:09:2b:fb:8b:89:e6:
13:f0:63:52:75:32:4e:28:f4:85:6f:42:39:49:80:
57:97:50:59:0a:d6:3e:ed:aa:e3:29:6a:89:19:29:
74:65:88:5d:d0:d8:92:31:41:df:ee:77:a2:82:85:
75:50:9c:34:1c:a7:25:66:dc:71:e7:8c:e4:6b:aa:
4a:73:ca:95:f9:f1:c5:d7:7b:93:dd:d9:f6:0a:25:
0b:9b:42:09:b1:a6:71:2c:39:27:e3:84:77:79:c2:
b3:28:9a:89:52:d1:5e:d5:e6:16:28:00:ca:84:af:
7f:5d:eb:57:82:1f:9a:2d:6a:83:8e:62:c5:a6:62:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2E:3C:80:80:30:6E:0A:DF:0B:4D:BD:D4:5D:EB:BA:99:83:30:D4
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3234322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.242.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ad:dc:b7:37:cc:e5:8f:c9:c4:e9:66:3f:86:d6:a0:a0:52:
d7:ef:90:b9:51:07:b7:6c:39:a4:9d:70:35:6d:ae:64:20:4f:
a0:dc:f9:6b:a1:d1:0b:cd:c6:a5:65:f6:15:b7:06:52:5f:56:
cc:79:9a:5c:c3:e9:2a:0a:3b:53:79:33:b4:78:e2:6e:bd:c3:
42:6d:66:09:e2:e3:b4:17:0c:de:80:63:ac:be:cc:6c:13:ff:
f6:4e:ba:b8:74:5e:46:43:90:80:ec:01:d2:99:9b:63:bc:d2:
9b:70:db:ed:c2:80:a6:9a:41:9d:e4:d9:54:bb:18:5e:bc:e3:
a3:9b:35:0c:1e:af:aa:64:a2:1d:0c:46:25:b5:a6:0d:af:93:
04:53:31:13:e6:60:f9:0c:80:11:58:84:79:7b:28:9a:4a:2b:
e7:20:60:be:81:d9:1b:48:57:1a:87:0b:f9:c2:b9:c9:e1:df:
84:92:aa:55:e8:4e:22:aa:86:1b:52:76:b0:fe:4b:94:af:65:
74:17:ed:f0:2e:1a:d6:89:95:0a:d0:97:1a:ca:42:65:65:05:
a0:67:f4:46:e6:2f:4f:18:43:4b:f4:2b:87:c3:e0:ba:11:16:
98:dc:a3:be:b9:f3:d1:1a:00:40:78:e7:8f:3b:94:2c:ca:c6:
9e:f4:0a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:24:30 2025 by rpki-client