Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: R97UIfgoEVAMkiyWHd6wBrYwG4l7kNjwT8+zaGLpMBo=
Subject key identifier: 71:9E:25:8B:FC:0B:7C:FB:93:AA:80:64:00:D9:F6:80:FC:69:C4:A4
Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial: 330EC3B5ACAA27D8019F2BFD64C66FA685E1953F
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa
Signing time: Sat 16 Nov 2024 06:15:25 +0000
ROA not before: Sat 16 Nov 2024 06:10:25 +0000
ROA not after: Sat 15 Nov 2025 06:15:25 +0000
asID: 14618
IP address blocks: 64.202.96.0/24 maxlen: 24
205.234.204.0/24 maxlen: 24
216.246.3.0/24 maxlen: 24
216.246.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0e:c3:b5:ac:aa:27:d8:01:9f:2b:fd:64:c6:6f:a6:85:e1:95:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Validity
Not Before: Nov 16 06:10:25 2024 GMT
Not After : Nov 15 06:15:25 2025 GMT
Subject: CN=719E258BFC0B7CFB93AA806400D9F680FC69C4A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:a6:a6:f6:52:64:ac:ed:a9:60:27:79:14:
8c:a1:ae:d2:c8:d4:ed:89:9e:50:8d:22:5a:a1:8a:
ed:6f:9d:cb:78:3a:b8:d1:4f:cb:ed:49:c8:95:5d:
6c:6c:e3:35:6a:32:4b:23:41:b7:13:21:20:09:58:
fb:cc:21:fd:00:56:37:c4:d1:ee:f4:73:21:9d:ac:
02:f9:4b:9b:d3:c0:62:35:1e:39:bb:7a:92:7b:b4:
7d:b7:4a:78:17:b2:50:d0:b8:48:80:d7:9c:c7:1b:
e4:8e:9c:cd:49:29:20:de:3e:5b:0f:8d:a9:70:02:
37:a3:77:2b:d0:e3:e6:9f:a2:b2:56:75:07:c0:ea:
01:de:d7:34:87:d9:f4:a6:47:ee:96:b4:52:50:c1:
bb:4c:84:5d:9d:17:43:ae:5d:56:f2:c4:9b:2f:af:
be:b1:a4:80:fd:27:a3:ba:35:24:3f:ff:b9:97:e1:
2e:c1:d8:49:50:e2:b6:59:61:2f:6a:db:00:e5:03:
58:25:36:a7:48:9e:d7:9f:a9:82:9f:e7:de:13:c1:
fa:3c:23:4d:91:bc:a0:b0:76:08:54:0e:ed:b7:91:
e8:78:c2:ee:2f:c1:ff:51:3e:8b:ef:fc:5c:01:c3:
b0:4d:84:74:32:71:0c:d4:9c:16:e3:3a:b3:ea:9d:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9E:25:8B:FC:0B:7C:FB:93:AA:80:64:00:D9:F6:80:FC:69:C4:A4
X509v3 Authority Key Identifier:
keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.202.96.0/24
205.234.204.0/24
216.246.3.0/24
216.246.99.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d7:5d:c4:40:c5:06:dc:f4:95:f0:23:5d:49:78:3e:5c:36:
41:a9:09:de:9e:04:70:0d:16:ec:42:fe:02:eb:3e:74:9f:6f:
b5:7c:3b:32:3b:7a:f2:cf:cd:ea:4e:70:3e:48:34:9d:c3:9c:
1f:a4:73:5a:39:df:43:67:0d:89:d8:71:f8:ff:7b:09:47:ab:
f6:c5:e4:44:22:3f:56:01:a5:e2:12:08:24:fa:3d:e1:ee:e0:
b1:4c:00:1f:82:ad:8d:df:e2:71:dd:eb:bb:ea:d3:f6:19:54:
cd:04:e7:7e:92:f8:84:90:12:51:31:bf:7b:27:9d:1b:19:7f:
7b:b6:16:ff:af:31:58:30:1f:cd:d5:5a:5f:78:6f:eb:7e:0d:
a3:f5:10:0a:01:34:cd:60:55:75:a0:78:19:04:55:64:55:35:
d6:90:2d:30:5b:f4:61:60:0d:a2:05:fb:79:1e:c9:91:eb:0c:
66:5f:ec:c9:84:8e:5d:ca:71:49:d7:4a:13:01:9e:b0:c6:88:
d8:75:ae:cb:2b:b8:f7:88:7f:aa:95:42:7b:2e:a8:44:72:1f:
72:ea:ea:9a:77:02:52:24:a6:a3:3b:ad:51:a6:3a:1a:eb:f9:
b8:b4:f8:25:df:e6:23:d9:84:b2:80:28:60:f5:ba:d3:f0:cc:
de:dd:a9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:41 2025 by rpki-client