Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa
File: 323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa (raw, json)
Hash identifier: nV9Upw6tCGJf0Zf6EhNqVGQs6lJdA0I3cbRD7oi+hJA=
Subject key identifier: D2:9B:EC:DF:11:06:C2:5B:A6:F6:0F:0B:6A:BB:D5:8A:46:6D:CC:04
Certificate issuer: /CN=15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd
Certificate serial: 3924D02816B66AFCF8A0532C4E0A118200C9B603
Authority key identifier: 2A:33:6D:BE:E8:C9:0A:3D:94:70:5F:D3:F3:0E:AB:62:D6:58:DC:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0dd8489b-dbf7-4ec2-9f46-5f1498cad40c/15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa
Signing time: Fri 11 Feb 2022 23:45:35 +0000
ROA not before: Fri 11 Feb 2022 23:40:35 +0000
ROA not after: Fri 25 Feb 2022 23:45:35 +0000
asID: 16787
IP address blocks: 2605:1c00:ff0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:24:d0:28:16:b6:6a:fc:f8:a0:53:2c:4e:0a:11:82:00:c9:b6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd
Validity
Not Before: Feb 11 23:40:35 2022 GMT
Not After : Feb 25 23:45:35 2022 GMT
Subject: CN=D29BECDF1106C25BA6F60F0B6ABBD58A466DCC04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:12:b9:13:95:ea:56:fd:4e:f8:c3:30:2c:b4:
8a:e2:e3:4a:e2:1f:02:df:ce:64:f7:b6:69:90:d6:
86:27:ca:21:e6:9b:27:ba:96:44:17:e5:9e:5f:70:
8c:53:b6:13:c3:9b:a4:4b:70:c1:7f:08:6b:f1:7e:
89:d0:c7:45:13:2c:e2:c8:4a:e2:f1:2e:db:78:2c:
41:e1:38:bc:58:42:6a:9a:b3:67:1b:85:23:c0:e1:
a3:74:54:b0:c1:65:af:55:5f:e4:54:be:10:13:6a:
79:87:da:71:7a:15:95:4c:1b:31:9e:78:f4:0f:53:
ea:ac:3c:85:e0:6c:b4:bb:59:a9:00:0c:69:b3:ac:
25:75:70:30:1b:d9:63:11:7f:b9:63:c6:bb:88:f5:
c6:8c:68:8e:4d:bd:5f:0e:3a:8c:48:cc:b4:7b:8c:
e6:bf:ca:1d:95:c0:c4:cb:7c:da:1c:aa:43:a8:f0:
05:c5:53:e3:27:82:31:a0:cc:0b:c3:45:02:9f:6e:
ea:39:8a:69:0d:e3:ff:81:7e:4f:d5:e3:da:93:e5:
d8:e3:20:03:7b:3c:c4:48:1b:20:5b:1f:8f:42:b5:
05:9f:9c:e1:6b:1e:bf:1e:a1:bd:c3:1e:01:8c:37:
f5:3d:9c:98:25:77:0b:a0:9a:93:d9:77:7f:f1:af:
29:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9B:EC:DF:11:06:C2:5B:A6:F6:0F:0B:6A:BB:D5:8A:46:6D:CC:04
X509v3 Authority Key Identifier:
keyid:2A:33:6D:BE:E8:C9:0A:3D:94:70:5F:D3:F3:0E:AB:62:D6:58:DC:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/2A336DBEE8C90A3D94705FD3F30EAB62D658DC52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0dd8489b-dbf7-4ec2-9f46-5f1498cad40c/15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:1c00:ff0::/44
Signature Algorithm: sha256WithRSAEncryption
1b:20:e6:d4:e2:db:e1:7d:3c:d8:55:e8:8d:bd:52:8e:4c:6f:
c8:85:0e:09:4e:67:9e:54:38:50:29:b7:63:8d:ae:bd:87:43:
fb:f3:a9:29:58:2a:2e:25:68:3e:c3:e1:0f:60:98:bb:3f:53:
29:22:f4:85:ce:f6:bd:8d:b1:be:3d:f8:73:ac:0c:92:3f:37:
5c:39:59:c7:5c:7d:28:cc:e2:a0:e0:26:a6:90:e1:02:17:13:
da:94:08:7a:bb:35:82:1a:9d:5d:fe:e2:06:9c:63:d2:4f:7f:
41:4c:d1:3f:71:7b:d6:2a:21:9d:88:dd:a8:1b:68:2c:90:16:
03:71:56:f8:1e:42:8b:11:ee:07:93:b7:c0:6f:35:e1:2b:b8:
de:c6:35:75:3f:41:34:18:3d:63:28:59:be:55:ea:21:b8:e5:
a3:55:4a:80:bd:9b:1f:b1:e3:40:89:9a:00:23:cf:fd:fe:1e:
48:95:49:75:5b:8d:22:63:65:e0:fb:63:96:bc:73:b4:33:ba:
6c:c2:61:e8:e5:3b:4f:56:c3:6e:dc:08:1f:35:a9:0d:76:f4:
87:50:09:1d:be:e1:1f:d5:57:f9:42:7b:ef:08:6a:3b:f7:97:
e4:05:f0:5b:c0:4c:ab:f3:a8:95:86:88:64:e9:ec:19:68:0f:
90:e4:15:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:08:36 2025 by rpki-client