Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa
File: 323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa (raw, json)
Hash identifier: 0cYuANW+wAdJW+ewvALnQxscNpRx7sOJb/wKl/oYNic=
Subject key identifier: 1B:C5:A1:DC:11:09:80:0B:85:A8:00:51:2E:4A:20:FC:E4:C5:03:B2
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 6E7E78BAA11DC41D9EB971AA1B54AADD301FE0EA
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa
Signing time: Sat 07 Dec 2024 13:13:28 +0000
ROA not before: Sat 07 Dec 2024 13:08:28 +0000
ROA not after: Sat 06 Dec 2025 13:13:28 +0000
asID: 399170
IP address blocks: 2403:2500:9000:129::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:7e:78:ba:a1:1d:c4:1d:9e:b9:71:aa:1b:54:aa:dd:30:1f:e0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000
Validity
Not Before: Dec 7 13:08:28 2024 GMT
Not After : Dec 6 13:13:28 2025 GMT
Subject: CN=1BC5A1DC1109800B85A800512E4A20FCE4C503B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:aa:ea:7c:d3:e6:2a:a0:d6:4f:ad:b0:8b:
72:38:29:f2:6b:ea:71:1a:96:15:8e:0d:c3:9c:72:
69:ba:8a:5f:1e:2b:dd:44:0d:1e:dc:55:7e:90:08:
49:8c:05:e1:88:d8:4c:61:fc:5a:0c:96:70:32:ed:
aa:49:f7:b2:b0:fb:97:a8:f6:05:fc:55:a5:d2:45:
9e:e6:e7:a6:da:15:e8:6f:21:53:d2:98:dd:48:4e:
31:d0:2b:c2:1a:47:6a:af:1a:db:ba:23:b7:5a:ce:
77:ce:1b:36:e7:af:7f:dd:1e:93:53:40:25:77:e2:
b2:da:b1:4e:71:20:9e:95:79:a7:51:d1:8d:1d:1b:
7e:3e:64:68:09:50:be:bc:9f:43:ab:97:b3:2a:de:
f3:e8:06:87:64:45:cf:1e:52:af:c8:78:60:ba:56:
e5:11:b5:0e:4f:c8:d4:02:7a:bf:09:62:72:27:61:
26:62:32:70:70:eb:8a:34:b8:86:2f:09:6a:fe:94:
23:8e:a9:2b:c4:97:95:4c:fc:10:8b:70:b3:60:f0:
b0:80:dc:70:73:05:0e:27:76:6a:66:16:d1:e9:a6:
95:5b:59:2d:c4:1c:fa:8f:68:0f:f3:2c:d6:0c:b6:
0e:47:83:72:59:d1:71:2f:6c:d6:71:27:62:d9:33:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C5:A1:DC:11:09:80:0B:85:A8:00:51:2E:4A:20:FC:E4:C5:03:B2
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2500:9000:129::/64
Signature Algorithm: sha256WithRSAEncryption
09:69:1e:8a:7e:12:be:54:36:e6:a4:f4:e5:20:74:81:df:43:
5f:be:ef:21:d9:7a:a4:85:be:8e:ad:82:67:ee:33:82:97:31:
7a:91:9a:08:5f:40:0a:b8:18:ef:1a:8c:ed:b4:aa:97:c6:f0:
fc:81:d9:bd:a0:6d:4b:00:02:89:d5:bd:73:06:da:97:e5:06:
9b:a7:0c:ed:98:db:5d:fa:a3:cd:30:a3:65:95:d9:9a:d6:5b:
ea:a6:be:2b:96:52:62:80:18:b4:4c:53:d5:9a:c8:89:8c:d8:
2c:62:f4:77:6b:1a:14:1e:12:8c:3e:ce:43:db:1d:e1:88:f4:
03:39:f5:2e:e4:ec:f8:c3:5d:c5:08:fd:51:7f:6e:f6:a9:89:
79:89:ce:4e:0b:5d:11:85:5e:ed:96:b6:eb:e5:d4:95:02:66:
21:6d:05:28:e7:6b:2e:ca:56:bc:02:f4:fd:de:d9:72:24:cb:
22:4b:05:94:42:2d:4b:b8:54:1a:70:8a:80:6d:e7:b3:97:45:
d7:cf:48:28:54:c1:f6:58:fd:96:6b:91:d0:f2:56:e1:7a:5d:
11:22:c1:ee:eb:bd:1a:99:24:c1:b2:1f:e8:0c:59:41:f4:6d:
60:56:8a:06:72:1c:ea:ab:5a:97:0e:32:6a:e8:fc:f4:45:cf:
f6:fa:5f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:34:59 2025 by rpki-client