Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31333a3a2f36342d3634203d3e20333939313634.roa
File: 323430333a323530303a383030303a31333a3a2f36342d3634203d3e20333939313634.roa (raw, json)
Hash identifier: YYzJ6SqMds+Ts+oTzS30Zamg1H5FZkCukAWuoYZU5mQ=
Subject key identifier: B3:54:2A:53:14:D7:40:F4:EA:A3:2D:F1:EE:50:41:E5:53:A9:E8:37
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 4A9123DC062C848739E3DAEA0177BE266BB5ED07
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31333a3a2f36342d3634203d3e20333939313634.roa
Signing time: Sat 07 Dec 2024 12:13:27 +0000
ROA not before: Sat 07 Dec 2024 12:08:27 +0000
ROA not after: Sat 06 Dec 2025 12:13:27 +0000
asID: 399164
IP address blocks: 2403:2500:8000:13::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:91:23:dc:06:2c:84:87:39:e3:da:ea:01:77:be:26:6b:b5:ed:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000
Validity
Not Before: Dec 7 12:08:27 2024 GMT
Not After : Dec 6 12:13:27 2025 GMT
Subject: CN=B3542A5314D740F4EAA32DF1EE5041E553A9E837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:16:be:fb:23:3b:d6:d5:64:09:0d:3e:24:
22:5f:9e:af:6b:3d:71:ec:c7:51:75:f2:02:b7:96:
eb:f2:63:ee:0d:2c:e6:71:91:71:69:6e:7f:40:97:
50:c9:ba:86:56:03:48:97:8c:48:ec:66:a7:d9:bc:
67:0f:2b:6c:99:9a:2b:7b:46:8d:cf:4a:30:41:ea:
0e:23:95:6e:c0:6b:c9:fd:7f:9d:38:1a:96:3e:30:
4d:79:17:e6:d4:7f:61:d3:e6:7e:03:c6:2b:ed:9c:
64:e9:71:1a:74:df:fd:33:97:4a:9e:bd:12:a0:05:
b4:73:77:5c:3f:a7:41:05:a1:d4:cf:71:6a:c9:f3:
23:25:60:64:a6:86:9e:b7:06:45:a4:bf:e0:c0:55:
86:43:23:1f:d8:5c:53:01:44:46:79:d4:da:d3:34:
67:0d:97:0d:82:5a:49:aa:6d:2a:79:86:7b:4c:83:
b9:77:c2:61:65:69:92:96:6c:59:04:eb:ff:44:67:
a5:a6:cd:70:a3:b9:29:d5:f0:d4:d3:95:20:74:60:
9b:4d:0d:e4:6e:9a:96:9a:3b:f3:7d:43:7f:dd:dc:
33:37:6e:97:f7:c1:d3:0a:40:eb:b5:d7:98:97:70:
3b:95:c7:9b:f4:dd:1d:f0:9b:b7:cb:e5:9f:bc:e4:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:54:2A:53:14:D7:40:F4:EA:A3:2D:F1:EE:50:41:E5:53:A9:E8:37
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31333a3a2f36342d3634203d3e20333939313634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2500:8000:13::/64
Signature Algorithm: sha256WithRSAEncryption
db:e4:ca:41:08:57:53:31:53:07:52:b5:d9:89:bb:85:74:a7:
2d:00:4e:4c:62:1c:3b:6c:10:0b:14:0f:55:11:25:d4:41:54:
09:1e:79:e7:05:49:ea:91:80:ba:c2:95:19:f0:6b:d2:4e:15:
ea:19:c1:a5:5a:3b:50:f5:c5:97:54:0b:42:ab:bd:aa:ed:6d:
0b:8f:12:d8:41:f8:96:e3:65:81:f1:b2:91:ac:d9:b2:ef:03:
91:c1:42:41:4c:3b:6c:69:ed:e5:1f:3b:00:d4:5a:40:f8:35:
7d:7c:1d:f4:3a:ab:bb:2d:b3:76:96:bc:de:fc:a9:f1:b6:96:
12:11:7e:14:76:7e:41:24:94:48:f5:74:db:fd:db:20:50:5e:
1a:93:78:96:0e:5f:ba:b2:58:7d:07:7f:3e:b0:59:c6:47:71:
83:76:fd:73:3b:76:5a:a4:5c:a1:f2:8c:c0:fc:f3:b3:44:37:
32:ee:c8:7d:2d:df:af:e6:e9:2a:a7:83:63:a5:af:2a:da:a4:
75:03:04:ae:dc:cf:48:d4:be:bc:55:a4:7e:2e:ed:46:d0:76:
f2:e2:d4:2c:df:a0:76:51:2d:e6:a5:03:9d:6e:8b:b2:01:ec:
c9:80:97:58:4f:23:7a:78:9c:3e:e5:83:73:aa:ed:b0:37:c8:
d9:a8:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:37:25 2025 by rpki-client