Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: CXPjFImZLem2FchM1u+lr5vCqXnt4zpREWuchQOV9a0=
Subject key identifier: 08:DC:16:66:09:A9:9E:FC:69:59:CC:57:A8:18:B4:7A:EA:A9:32:63
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 4B95CBE8D570F6D0CE8374B23819C47C0F73627A
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36530.roa
Signing time: Thu 28 Nov 2024 12:00:50 +0000
ROA not before: Thu 28 Nov 2024 11:55:50 +0000
ROA not after: Thu 27 Nov 2025 12:00:50 +0000
asID: 36530
IP address blocks: 140.99.43.0/24 maxlen: 24
140.99.45.0/24 maxlen: 24
140.99.47.0/24 maxlen: 24
140.99.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:95:cb:e8:d5:70:f6:d0:ce:83:74:b2:38:19:c4:7c:0f:73:62:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Nov 28 11:55:50 2024 GMT
Not After : Nov 27 12:00:50 2025 GMT
Subject: CN=08DC166609A99EFC6959CC57A818B47AEAA93263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:c1:49:21:75:55:0d:80:4a:89:3c:9e:7d:
f9:ca:73:59:ed:31:32:99:ca:22:f7:71:c5:ae:da:
2e:57:ba:d9:70:30:d9:fd:aa:a1:58:36:34:87:3b:
e4:81:75:34:0a:62:26:bd:13:1b:e0:71:48:e5:56:
08:96:30:33:0a:d7:7a:29:f6:85:d0:20:41:b6:9f:
ba:15:d9:b8:7d:49:4c:e0:78:50:42:70:a0:a0:87:
3e:0a:99:e9:0e:b5:c2:eb:af:94:34:c5:c4:42:02:
48:52:76:f1:b7:5c:4a:01:4e:7e:0d:d5:6d:90:c2:
bb:25:15:f7:5d:60:8a:e7:56:c8:ae:6d:93:7f:29:
e9:01:c0:62:d9:36:8f:b4:1e:2c:08:e8:ad:68:98:
92:87:5e:63:44:a8:eb:3f:3c:d4:91:6a:36:b1:b7:
d8:39:56:96:b3:23:26:19:b4:89:06:5e:13:9a:70:
1c:0c:8e:eb:71:5e:e4:95:1f:d2:00:14:2e:19:91:
24:81:61:cf:a7:f1:d9:f9:a9:e9:6a:ad:72:35:61:
2c:30:ce:3c:06:92:4a:e8:4a:3c:05:ad:11:c8:e4:
b1:00:6f:87:77:04:bc:59:66:17:33:8d:a4:29:f0:
55:7f:e2:8a:5c:48:e1:0e:c6:19:a6:27:3f:14:02:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DC:16:66:09:A9:9E:FC:69:59:CC:57:A8:18:B4:7A:EA:A9:32:63
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.43.0/24
140.99.45.0/24
140.99.47.0-140.99.48.255
Signature Algorithm: sha256WithRSAEncryption
96:83:c8:ed:90:1e:b1:60:f9:5a:a5:b1:d9:f6:12:ef:c7:8b:
55:ed:1a:3c:90:dc:73:81:75:39:b5:89:58:c2:dd:fa:7f:bf:
dc:ea:5f:96:97:6d:ff:22:cb:d5:fb:a9:c5:05:1b:d1:05:1f:
82:32:06:90:b7:3c:b0:c8:66:6a:3c:4a:0a:93:be:02:93:4e:
49:2a:7e:24:74:48:ee:a6:fb:8b:17:68:00:0d:5d:52:b0:d4:
d4:07:da:e2:45:1d:d1:3c:c1:8f:cc:f9:80:43:59:f6:1a:d3:
9d:b6:c6:82:cc:9b:0a:48:d9:e5:7c:6b:1a:6d:5a:68:06:be:
5a:f2:ec:2b:d2:37:4f:5b:f2:9c:47:23:e6:28:28:82:9f:df:
d6:57:7b:5f:a2:4c:15:04:8e:12:f4:66:cf:ff:16:56:eb:a1:
d3:f1:8f:50:8c:04:89:41:5f:32:9f:f2:9a:86:b3:0c:25:d2:
e0:b6:b7:b1:fd:14:44:12:27:0e:99:ba:f5:53:87:06:a5:c2:
2f:08:f5:c5:37:9a:17:1e:8b:da:54:0d:20:d8:18:07:04:89:
0e:20:0a:db:af:bd:55:e9:52:6c:4b:b4:1c:d2:6e:4f:75:f6:
0f:c1:0b:84:1f:a5:37:61:d6:1a:60:33:86:2e:e3:a3:7e:3c:
de:b3:64:03
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIUS5XL6NVw9tDOg3SyOBnEfA9zYnowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQxMTI4MTE1NTUwWhcNMjUxMTI3MTIwMDUw
WjAzMTEwLwYDVQQDEygwOERDMTY2NjA5QTk5RUZDNjk1OUNDNTdBODE4QjQ3QUVB
QTkzMjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2nBSSF1VQ2A
Sok8nn35ynNZ7TEymcoi93HFrtouV7rZcDDZ/aqhWDY0hzvkgXU0CmImvRMb4HFI
5VYIljAzCtd6KfaF0CBBtp+6Fdm4fUlM4HhQQnCgoIc+CpnpDrXC66+UNMXEQgJI
Unbxt1xKAU5+DdVtkMK7JRX3XWCK51bIrm2TfynpAcBi2TaPtB4sCOitaJiSh15j
RKjrPzzUkWo2sbfYOVaWsyMmGbSJBl4TmnAcDI7rcV7klR/SABQuGZEkgWHPp/HZ
+anpaq1yNWEsMM48BpJK6Eo8Ba0RyOSxAG+HdwS8WWYXM42kKfBVf+KKXEjhDsYZ
pic/FALRvQIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFAjcFmYJqZ78aVnMV6gYtHrq
qTJjMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzM2NTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMG
CCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAjGMrAwQAjGMtMAwDBACMYy8DBACM
YzAwDQYJKoZIhvcNAQELBQADggEBAJaDyO2QHrFg+Vqlsdn2Eu/Hi1XtGjyQ3HOB
dTm1iVjC3fp/v9zqX5aXbf8iy9X7qcUFG9EFH4IyBpC3PLDIZmo8SgqTvgKTTkkq
fiR0SO6m+4sXaAANXVKw1NQH2uJFHdE8wY/M+YBDWfYa0522xoLMmwpI2eV8axpt
WmgGvlry7CvSN09b8pxHI+YoKIKf39ZXe1+iTBUEjhL0Zs//FlbrodPxj1CMBIlB
XzKf8pqGswwl0uC2t7H9FEQSJw6ZuvVThwalwi8I9cU3mhcei9pUDSDYGAcEiQ4g
CtuvvVXpUmxLtBzSbk919g/BC4QfpTdh1hpgM4Yu46N+PN6zZAM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:29:18 2025 by rpki-client