Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS36832.roa
File: AS36832.roa (raw, json)
Hash identifier: 5PIf0CcnGexBva2qKBJtZ2Ui4J1mnSrAR5Z7/W/8WiI=
Subject key identifier: 8F:9E:E0:0E:3C:7F:1A:CF:3B:AD:B4:F3:04:9A:D3:C9:76:03:1B:EE
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0B62AD952CCF68FA8CAA647951AF73AC4D8C403F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS36832.roa
Signing time: Wed 27 Nov 2024 08:37:45 +0000
ROA not before: Wed 27 Nov 2024 08:32:45 +0000
ROA not after: Wed 26 Nov 2025 08:37:45 +0000
asID: 36832
IP address blocks: 2a06:9f40::/32 maxlen: 48
2a09:54c0::/32 maxlen: 48
2a0a:6047::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:62:ad:95:2c:cf:68:fa:8c:aa:64:79:51:af:73:ac:4d:8c:40:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 27 08:32:45 2024 GMT
Not After : Nov 26 08:37:45 2025 GMT
Subject: CN=8F9EE00E3C7F1ACF3BADB4F3049AD3C976031BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:27:7b:f8:13:28:ab:74:96:35:85:1b:d8:
98:dc:3b:d7:d3:b4:b0:85:98:e0:d7:e7:96:52:0f:
12:f6:5a:70:80:e5:1c:eb:bf:fd:9e:1c:74:8e:4b:
02:7e:0f:06:02:82:8a:59:2c:0a:f3:77:4c:d2:18:
01:c9:f6:1a:ae:75:76:d0:56:59:b2:ad:20:f9:10:
1d:7d:e2:11:12:10:3a:04:1e:4b:6c:2c:24:2b:39:
73:bd:5b:f7:9d:0f:86:da:52:e6:ef:f7:ce:59:09:
20:bb:8b:1d:26:40:35:c3:ce:ab:a7:9c:93:54:d5:
2a:5b:69:65:88:f6:77:e5:d8:97:25:84:52:cc:b2:
a4:95:19:e8:de:3f:2c:5f:ba:4a:ea:f2:f1:ce:0b:
e8:be:71:6b:e4:b7:7e:e6:6a:ad:3e:da:a2:87:f9:
e3:65:00:98:04:3d:3a:ce:7f:f4:0c:55:a7:c4:5a:
dc:e6:36:70:48:06:ef:2b:d9:cc:f4:27:75:80:a2:
a2:6d:1c:27:4a:3a:49:a1:27:36:9f:b1:95:38:08:
f0:f8:40:82:d5:ee:87:5f:b0:61:cb:3a:4b:7e:1f:
80:b9:16:56:81:e2:91:49:09:5d:32:0e:04:0b:8e:
e3:e7:c1:54:ff:8a:fd:89:1b:64:a1:d4:79:b5:b0:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9E:E0:0E:3C:7F:1A:CF:3B:AD:B4:F3:04:9A:D3:C9:76:03:1B:EE
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS36832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f40::/32
2a09:54c0::/32
2a0a:6047::/32
Signature Algorithm: sha256WithRSAEncryption
01:7a:79:74:3f:10:bf:dd:8c:ec:82:b6:30:3f:4a:5e:c0:6d:
6d:eb:8d:55:86:0e:47:a8:97:60:17:86:8e:f9:27:37:77:4e:
01:22:67:4b:1d:89:f3:9f:38:a7:96:d7:0f:d4:62:7e:71:4d:
df:de:9b:14:da:87:a4:01:56:c5:64:ff:3d:e5:00:3e:c1:52:
da:08:a2:27:75:a2:97:cf:90:cb:29:af:08:ce:40:25:49:62:
02:0e:77:e3:36:d8:76:cb:48:ed:ab:67:9f:2b:13:9a:a5:f5:
55:dc:62:92:e8:e8:f5:35:a1:67:e2:64:60:f8:a2:86:9f:f3:
0b:d2:a9:0a:b0:d7:21:62:0e:a7:7a:60:54:2f:6b:08:d1:37:
6e:c8:96:ca:02:1b:34:b3:5b:38:53:34:40:a9:5c:59:2e:59:
83:fa:93:ef:ee:25:64:75:25:fb:77:d9:ff:58:4c:ab:40:91:
1d:08:bc:f6:72:d9:8d:52:f1:b3:22:95:75:4d:7b:46:89:49:
ca:c7:36:c5:2a:49:e6:0f:3c:46:8e:e3:dd:97:d3:52:b5:7a:
4e:fa:e8:1d:0e:d6:e9:a0:8b:45:01:1d:c9:c4:10:16:fa:40:
bb:99:c9:92:bf:af:a3:a7:5f:9d:a8:f9:00:6f:97:e5:ad:9d:
83:5e:71:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:40 2025 by rpki-client