Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36352.roa
File:                     AS36352.roa (raw, json)
Hash identifier:          O4NCwRGNPl85BQxUs4sJ9j4/Opx2e4sdX0axlJp4spc=
Subject key identifier:   89:B7:CD:D4:6A:8F:BC:42:FA:FF:CE:A5:86:B5:8C:87:31:91:75:05
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4B105EA5A87E7343B3A79A19E6E2353262B55F1D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36352.roa
Signing time:             Mon 06 Jan 2025 20:41:13 +0000
ROA not before:           Mon 06 Jan 2025 20:36:13 +0000
ROA not after:            Mon 05 Jan 2026 20:41:13 +0000
asID:                     36352
IP address blocks:        66.212.28.0/24 maxlen: 24
                          67.215.233.0/24 maxlen: 24
                          67.215.234.0/23 maxlen: 24
                          67.215.236.0/22 maxlen: 24
                          69.12.64.0/23 maxlen: 24
                          69.12.66.0/24 maxlen: 24
                          69.12.68.0/24 maxlen: 24
                          69.12.71.0/24 maxlen: 24
                          69.12.72.0/23 maxlen: 24
                          69.12.75.0/24 maxlen: 24
                          69.12.76.0/23 maxlen: 24
                          69.12.78.0/24 maxlen: 24
                          69.12.80.0/23 maxlen: 24
                          69.12.82.0/24 maxlen: 24
                          69.12.84.0/24 maxlen: 24
                          69.12.86.0/23 maxlen: 24
                          69.12.88.0/24 maxlen: 24
                          69.12.90.0/23 maxlen: 24
                          72.11.135.0/24 maxlen: 24
                          96.44.128.0/21 maxlen: 24
                          96.44.162.0/23 maxlen: 24
                          96.44.174.0/23 maxlen: 24
                          98.143.145.0/24 maxlen: 24
                          98.143.146.0/23 maxlen: 24
                          98.143.159.0/24 maxlen: 24
                          104.129.0.0/24 maxlen: 24
                          104.129.3.0/24 maxlen: 24
                          104.129.4.0/24 maxlen: 24
                          104.129.9.0/24 maxlen: 24
                          104.129.10.0/24 maxlen: 24
                          104.129.14.0/23 maxlen: 24
                          104.129.17.0/24 maxlen: 24
                          104.223.54.0/24 maxlen: 24
                          104.223.58.0/24 maxlen: 24
                          107.161.80.0/23 maxlen: 24
                          107.161.82.0/24 maxlen: 24
                          107.172.187.0/24 maxlen: 24
                          173.254.192.0/24 maxlen: 24
                          173.254.194.0/23 maxlen: 24
                          173.254.204.0/23 maxlen: 24
                          173.254.208.0/24 maxlen: 24
                          173.254.212.0/24 maxlen: 24
                          173.254.218.0/23 maxlen: 24
                          173.254.222.0/23 maxlen: 24
                          173.254.232.0/24 maxlen: 24
                          173.254.234.0/23 maxlen: 24
                          173.254.236.0/22 maxlen: 24
                          173.254.240.0/24 maxlen: 24
                          173.254.242.0/23 maxlen: 24
                          192.161.49.0/24 maxlen: 24
                          192.161.172.0/24 maxlen: 24
                          204.152.206.0/23 maxlen: 24
                          204.152.214.0/23 maxlen: 24
                          204.152.217.0/24 maxlen: 24
                          216.144.236.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:10:5e:a5:a8:7e:73:43:b3:a7:9a:19:e6:e2:35:32:62:b5:5f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jan  6 20:36:13 2025 GMT
            Not After : Jan  5 20:41:13 2026 GMT
        Subject: CN=89B7CDD46A8FBC42FAFFCEA586B58C8731917505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:ef:40:96:99:6d:bb:a7:6c:a1:63:0b:73:
                    6a:90:22:c4:c9:7e:e0:e7:af:ee:ab:60:24:c8:81:
                    12:bf:b4:eb:b4:bd:1f:92:55:ba:6c:d5:11:39:af:
                    44:93:bb:23:9c:60:52:88:b8:64:6e:9f:2c:c5:05:
                    50:55:18:71:bf:1e:4c:6d:91:24:40:eb:99:d2:e7:
                    85:ac:d6:fc:b5:b8:42:f9:bb:1f:50:37:e1:ad:52:
                    44:08:ac:29:39:56:ca:20:6f:04:00:19:e9:77:e8:
                    44:27:a7:ab:dc:d8:4d:94:47:69:a4:e1:7d:51:b2:
                    26:ff:5e:39:af:7e:dd:d2:37:4c:ed:4d:36:93:24:
                    b6:02:bc:00:14:d9:25:7c:0a:20:62:1c:c5:72:39:
                    48:86:94:78:12:3e:23:32:ea:16:c4:4a:d9:16:e7:
                    28:a1:a0:10:5d:89:77:f6:18:bb:65:21:f9:7f:7f:
                    29:35:e7:fd:1e:7a:75:68:f8:67:51:d4:a6:5f:24:
                    a4:a3:3b:96:49:12:ca:ca:56:80:58:fa:f4:9c:a2:
                    6e:7c:43:df:c6:2f:33:9f:9f:98:d5:e2:b1:47:3f:
                    77:e1:39:ba:b7:e1:c5:1e:76:6e:f8:ae:12:8b:8a:
                    e6:f0:d7:8b:c9:33:43:ea:a7:60:71:b3:19:45:7c:
                    1a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B7:CD:D4:6A:8F:BC:42:FA:FF:CE:A5:86:B5:8C:87:31:91:75:05
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36352.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.212.28.0/24
                  67.215.233.0-67.215.239.255
                  69.12.64.0-69.12.66.255
                  69.12.68.0/24
                  69.12.71.0-69.12.73.255
                  69.12.75.0-69.12.78.255
                  69.12.80.0-69.12.82.255
                  69.12.84.0/24
                  69.12.86.0-69.12.88.255
                  69.12.90.0/23
                  72.11.135.0/24
                  96.44.128.0/21
                  96.44.162.0/23
                  96.44.174.0/23
                  98.143.145.0-98.143.147.255
                  98.143.159.0/24
                  104.129.0.0/24
                  104.129.3.0-104.129.4.255
                  104.129.9.0-104.129.10.255
                  104.129.14.0/23
                  104.129.17.0/24
                  104.223.54.0/24
                  104.223.58.0/24
                  107.161.80.0-107.161.82.255
                  107.172.187.0/24
                  173.254.192.0/24
                  173.254.194.0/23
                  173.254.204.0/23
                  173.254.208.0/24
                  173.254.212.0/24
                  173.254.218.0/23
                  173.254.222.0/23
                  173.254.232.0/24
                  173.254.234.0-173.254.240.255
                  173.254.242.0/23
                  192.161.49.0/24
                  192.161.172.0/24
                  204.152.206.0/23
                  204.152.214.0/23
                  204.152.217.0/24
                  216.144.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:10:aa:91:34:39:85:46:b5:14:c1:bf:c4:e3:e8:62:6d:ee:
         4a:87:f7:80:4e:0c:31:dd:52:31:10:79:f5:e0:4f:34:ff:70:
         50:0e:8e:a5:08:82:1d:5e:0c:bd:0f:ab:71:48:e8:0a:be:08:
         33:c4:86:46:0f:5d:98:d7:1f:9d:fb:19:b8:56:f7:97:c4:0a:
         ba:ad:b0:16:57:cd:c6:7f:af:91:1b:20:1e:52:46:e5:61:df:
         ce:84:9d:8c:c0:ab:20:cb:d6:07:3b:f6:80:b9:e0:6a:7a:86:
         4d:15:91:82:2b:17:e1:97:4f:13:80:ed:36:9b:b7:15:f3:cb:
         a9:a7:19:46:b9:28:01:ce:fc:22:28:6c:88:e9:88:89:4e:bb:
         b4:85:da:62:24:dc:44:2e:78:74:71:4b:a3:16:81:f4:93:8b:
         7b:dd:a7:83:45:30:5f:0b:bf:5f:28:28:99:53:8c:1c:b4:9f:
         e1:ef:0b:b6:1e:07:1b:3d:79:3f:a2:4b:cf:25:c7:ca:22:2c:
         cf:7d:7a:8f:5c:7c:0b:47:16:27:64:6f:7f:4c:0d:37:37:9d:
         87:dd:27:b6:15:69:b3:79:c6:38:80:93:03:ee:83:22:c2:43:
         a0:6d:d2:ce:43:62:5a:fa:ce:84:63:53:84:2e:1e:b8:d1:53:
         e7:0a:03:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:54 2025 by rpki-client