Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231623a3a2f34382d3438203d3e2039303039.roa
File: 323630323a666636323a3231623a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: e33ntQKNlpZMBXN51P5kofkCG0gAPnlFAoTA/fjJ/Co=
Subject key identifier: 78:C2:EA:46:F7:5A:1B:C1:6D:91:4D:22:5D:5B:98:B1:14:87:98:7B
Certificate issuer: /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial: 1DA3A69ACF3327495891DAC264440919EFF6D55A
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231623a3a2f34382d3438203d3e2039303039.roa
Signing time: Tue 04 Jun 2024 11:58:25 +0000
ROA not before: Tue 04 Jun 2024 11:53:25 +0000
ROA not after: Tue 03 Jun 2025 11:58:25 +0000
asID: 9009
IP address blocks: 2602:ff62:21b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a3:a6:9a:cf:33:27:49:58:91:da:c2:64:44:09:19:ef:f6:d5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Validity
Not Before: Jun 4 11:53:25 2024 GMT
Not After : Jun 3 11:58:25 2025 GMT
Subject: CN=78C2EA46F75A1BC16D914D225D5B98B11487987B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:9c:e8:4c:aa:c7:15:23:6b:39:03:90:74:
1e:49:58:37:9a:c0:aa:e1:2f:59:f3:17:37:9c:67:
b8:9f:09:48:4c:1e:bf:f6:78:44:f7:7c:3b:b2:c8:
77:2c:c9:25:96:4b:ba:69:8b:a8:e6:b1:ed:1a:bf:
d1:a7:b6:b4:80:07:1a:44:62:40:b4:1c:7f:00:19:
c3:74:49:2e:2c:7b:89:b0:c1:99:b6:03:90:fe:87:
90:d9:60:eb:21:bc:53:a1:ce:49:00:dc:39:e8:ca:
46:57:c8:9f:7f:0c:ee:3f:93:57:8d:54:8a:fe:44:
f5:d9:e6:41:4b:1e:26:c2:63:5a:c4:1e:f2:0a:a6:
69:22:78:7e:ca:71:98:d8:b8:25:ae:a1:4f:d0:25:
d2:23:79:5b:02:69:ca:19:d8:94:f1:d3:a5:26:bf:
d0:e6:7c:a0:94:29:92:2b:5e:9b:b7:64:35:99:8b:
0e:ca:2a:14:46:ef:8f:db:9c:a0:c9:22:97:31:56:
08:2a:34:48:05:4e:3b:8a:63:16:9d:e7:d8:cb:9d:
78:3d:37:7f:f1:bd:b0:7f:e5:43:4c:82:58:ea:c6:
dd:0d:df:10:1f:c6:ec:b8:a1:f4:9f:95:bd:d4:66:
af:bd:59:2d:63:62:f0:e0:13:1d:41:c9:f4:06:25:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C2:EA:46:F7:5A:1B:C1:6D:91:4D:22:5D:5B:98:B1:14:87:98:7B
X509v3 Authority Key Identifier:
keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231623a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:ff62:21b::/48
Signature Algorithm: sha256WithRSAEncryption
47:9f:07:e6:31:34:b8:45:a3:7a:93:19:8e:f8:23:4b:2c:12:
a4:37:c2:3b:a3:58:9c:ab:7a:aa:c9:34:5d:77:a9:ef:89:bc:
1f:f4:f1:85:01:6f:2b:4b:40:a2:8b:96:a6:16:a5:2e:4d:cf:
63:f0:46:ac:58:cc:82:ce:5e:d9:cf:4c:59:0d:0c:8b:ef:ad:
f3:a9:54:8b:9c:7d:d5:b6:ee:aa:d4:f7:1d:be:9c:2d:45:52:
c7:41:2d:44:98:2d:4c:39:47:b3:70:68:26:e9:95:82:27:f4:
05:cf:23:12:6d:3b:12:6d:bc:b6:59:fd:d5:6f:cb:05:fc:d0:
e2:cb:90:63:f9:5a:cb:f5:2b:12:02:e1:d6:ac:c8:00:04:a2:
75:44:b8:55:68:5a:b3:b1:68:a4:84:40:c3:2c:70:67:11:79:
da:c9:fa:01:88:3b:a1:a9:0a:e2:a5:74:e4:cb:64:51:93:b4:
a8:e7:50:80:fd:19:66:f6:80:3d:55:9d:06:6a:5c:e8:dd:a6:
aa:38:23:f1:62:05:8b:08:00:eb:0b:35:a5:00:09:c0:d3:11:
b9:17:21:bc:0b:98:67:4c:56:b9:08:2e:55:9f:41:b1:0c:6f:
9e:bf:fd:e8:e9:78:ba:3f:e2:8a:9c:e1:d3:50:89:87:85:17:
20:ed:94:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:52 2025 by rpki-client