Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS36139.roa
File: AS36139.roa (raw, json)
Hash identifier: TK6jom8nyUF6kWGX/HyS2gIuMQHIlgAPnZHnnhdgtIw=
Subject key identifier: 45:4D:14:DD:23:0F:E2:17:90:12:F0:32:A4:4D:7E:13:CC:78:93:13
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 7CA0F8E8144003A8733F2F3F8434D6FFCE7E785C
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS36139.roa
Signing time: Wed 18 Dec 2024 05:55:08 +0000
ROA not before: Wed 18 Dec 2024 05:50:08 +0000
ROA not after: Wed 17 Dec 2025 05:55:08 +0000
asID: 36139
IP address blocks: 74.43.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a0:f8:e8:14:40:03:a8:73:3f:2f:3f:84:34:d6:ff:ce:7e:78:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Dec 18 05:50:08 2024 GMT
Not After : Dec 17 05:55:08 2025 GMT
Subject: CN=454D14DD230FE2179012F032A44D7E13CC789313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:a0:48:39:cf:31:5e:81:87:5b:b3:d2:dc:
ae:72:ec:d9:66:7d:b3:c8:20:fd:38:9a:5a:4b:52:
93:b3:08:9d:86:6c:99:bd:5f:99:3d:fc:e2:b7:e9:
d5:ff:70:38:ca:e8:e5:db:89:31:f5:d2:1d:3d:81:
51:62:7d:b2:52:e1:b4:42:fc:0c:79:41:d5:75:08:
d5:a4:5e:17:39:6d:a2:88:8d:6e:fc:4a:96:3f:cf:
ba:58:b9:bb:f5:a6:1f:c3:a7:bd:e6:65:2c:a4:d0:
4e:51:fc:86:99:ce:6a:17:97:56:07:6d:16:9a:14:
da:69:38:6b:15:fd:76:7e:63:e6:21:a8:b7:95:79:
15:19:c0:40:5a:42:68:96:6d:a2:66:c2:0a:e0:5a:
b4:b6:77:7c:48:f1:52:31:f3:75:b4:13:3a:0f:0b:
9d:62:f2:dd:17:36:23:d0:18:c6:bc:a7:98:57:5f:
47:e5:11:31:82:fc:11:0f:f0:bb:3d:2f:be:56:1a:
e2:5e:fd:30:78:67:e7:37:5f:cf:8e:be:bf:21:65:
4e:a7:81:c0:2a:20:fe:b7:a2:6f:7f:6e:f1:c5:77:
d7:f1:b8:46:33:dd:80:cd:63:db:df:23:83:ce:67:
07:af:78:1b:aa:d6:8c:7c:d3:e0:aa:1f:4c:18:aa:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4D:14:DD:23:0F:E2:17:90:12:F0:32:A4:4D:7E:13:CC:78:93:13
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS36139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.43.22.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:bf:3a:ba:73:f8:66:7c:90:f7:12:cb:aa:30:ab:21:a1:62:
0e:0b:1b:89:f3:d2:b8:4e:40:87:f4:f9:b6:42:2c:5d:89:cb:
86:f5:29:f1:a7:9b:e8:a9:ee:5d:66:71:0b:de:7b:9f:2b:a4:
73:30:9a:ca:ee:70:5e:86:97:5f:1a:a8:b4:39:5e:56:d0:fa:
b9:73:1f:28:d0:cd:48:c1:d2:cf:80:32:01:9c:4a:ec:b5:52:
b9:e4:23:87:a0:44:99:e9:e3:bd:86:76:16:4b:5f:d4:81:14:
2b:94:1a:8f:ea:18:c6:88:5e:14:92:46:03:08:00:b0:1e:70:
bc:6c:dc:12:5d:9e:27:e9:78:06:5b:9e:aa:92:54:41:8e:2c:
c5:d1:88:05:c2:37:c5:6a:07:1f:d8:32:ab:21:a8:80:6c:69:
6f:a4:eb:f8:1e:ac:24:3a:31:80:98:ec:7b:7b:b6:76:36:26:
db:b5:0e:f8:7d:b6:72:c3:a1:18:43:da:fa:1c:c4:05:24:a8:
cf:a2:4c:55:43:c6:7e:98:26:c8:3e:28:c7:05:fb:10:c5:ee:
2b:6d:ea:4f:60:85:35:db:a2:27:df:be:63:fa:47:91:b7:f4:
a6:9e:92:28:5e:ea:5f:91:9a:9f:62:46:36:64:64:af:12:1f:
6c:1f:da:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net