Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39352e302f32342d3234203d3e20313430393032.roa
File: 36342e3235332e39352e302f32342d3234203d3e20313430393032.roa (raw, json)
Hash identifier: QySd2kjxuHCWmqVCTuAenzQcLsT3ygJKNZ1dsMisF18=
Subject key identifier: 91:16:D8:24:8F:EB:E6:BA:8C:49:2A:FD:C3:D6:AD:5A:E7:43:59:37
Certificate issuer: /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial: 75528BBFD914CED08C173FE019E44D26AF4C207B
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39352e302f32342d3234203d3e20313430393032.roa
Signing time: Fri 25 Oct 2024 15:49:02 +0000
ROA not before: Fri 25 Oct 2024 15:44:02 +0000
ROA not after: Fri 24 Oct 2025 15:49:02 +0000
asID: 140902
IP address blocks: 64.253.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:52:8b:bf:d9:14:ce:d0:8c:17:3f:e0:19:e4:4d:26:af:4c:20:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Validity
Not Before: Oct 25 15:44:02 2024 GMT
Not After : Oct 24 15:49:02 2025 GMT
Subject: CN=9116D8248FEBE6BA8C492AFDC3D6AD5AE7435937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:ba:21:a2:c6:e5:11:3f:dd:f4:56:a5:9a:
97:22:67:86:5d:c5:fe:7d:76:aa:be:9c:a4:62:a8:
fa:e3:e1:0f:57:a6:97:6a:56:9b:50:3f:d9:a1:26:
bc:98:76:a4:76:42:08:95:74:d5:47:65:d7:d4:0a:
52:e1:d5:22:ed:f2:0d:f3:5a:fa:b4:b3:ff:02:91:
5e:bb:a9:d9:72:26:2d:db:2c:da:4c:a7:d5:de:83:
c1:11:03:00:9f:cb:ff:ca:69:71:1a:8a:73:8c:6a:
51:75:17:b2:42:f7:ef:5d:b2:40:3f:e5:4c:1f:5d:
b6:c7:9c:79:5f:88:3d:da:eb:fc:89:1d:a7:0d:ee:
1e:20:f9:a0:50:e1:d4:c6:c6:a7:8c:b3:46:ad:dd:
c7:1e:90:80:d1:d6:5c:90:a8:38:cc:3a:b4:2b:04:
4c:9a:5a:93:3b:e9:98:ee:44:9c:00:ec:0a:7a:ce:
24:e3:34:68:d4:ec:bc:a0:79:cf:a0:c3:23:9c:14:
d2:a8:97:ca:12:9c:72:86:94:13:c4:88:ee:96:fa:
1a:6f:d5:ad:5e:44:59:2b:ab:c1:5e:5f:fb:f6:e9:
e7:e4:8d:53:05:4b:49:69:69:31:ed:fe:93:ae:cf:
10:ec:58:2d:e1:16:8f:df:b2:db:84:4f:76:0d:9e:
3b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:16:D8:24:8F:EB:E6:BA:8C:49:2A:FD:C3:D6:AD:5A:E7:43:59:37
X509v3 Authority Key Identifier:
keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39352e302f32342d3234203d3e20313430393032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.253.95.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ee:9f:9b:19:d9:43:4f:ae:05:c4:f3:e7:dc:1b:7e:83:89:
8c:46:a4:da:dc:a5:9d:53:92:24:1e:66:64:05:8a:50:c6:ec:
98:94:9f:59:e7:8e:18:99:83:4b:4c:97:81:ed:6a:7d:55:8d:
75:2e:bb:6c:66:27:93:3c:d7:6b:37:a0:49:fe:cc:c5:c6:19:
79:30:18:38:4d:7d:aa:33:60:a8:39:5f:30:66:38:a1:69:4d:
ad:82:8d:5e:1a:e3:97:2e:85:62:7e:df:f0:dd:af:83:d9:3c:
29:e1:19:a4:2c:8a:3a:96:5a:47:d7:f2:76:c3:81:57:48:3b:
26:d7:23:4e:29:9a:55:cd:66:9c:b9:24:cc:68:54:a1:37:e5:
be:1c:9b:f1:8e:e3:07:d2:fd:0e:f8:02:07:1e:1b:15:19:28:
09:31:ed:56:a8:01:79:56:1d:9f:aa:9c:8b:79:5e:a0:27:49:
20:8d:0c:10:c2:54:06:61:34:be:ee:59:2c:96:cb:e7:7c:d7:
32:5c:b5:84:71:32:61:b5:38:80:ab:f4:f2:a7:ca:b0:22:09:
6f:74:73:14:c4:29:09:f5:33:29:6d:07:6b:b0:86:0c:b8:a3:
3a:fa:5a:ae:a6:99:14:42:a1:4b:30:f2:6b:b7:4e:60:4e:e4:
86:18:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:21 2024 by rpki-client on console.sobornost.net