Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323033363139.roa
File: 323630323a666139623a63303a3a2f34382d3438203d3e20323033363139.roa (raw, json)
Hash identifier: luMgLXfPtWlzKoQKWsUZWkAn3XHDiqOmCzH3JgUVCtM=
Subject key identifier: 3A:96:4F:6A:75:30:A6:C0:2F:31:0E:18:73:70:C7:4B:10:8A:9A:C2
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 1C55A62AA2EC6D42661AF4A715B1DB6EC27524F9
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323033363139.roa
Signing time: Mon 27 Jan 2025 12:14:12 +0000
ROA not before: Mon 27 Jan 2025 12:09:12 +0000
ROA not after: Mon 26 Jan 2026 12:14:12 +0000
asID: 203619
IP address blocks: 2602:fa9b:c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:55:a6:2a:a2:ec:6d:42:66:1a:f4:a7:15:b1:db:6e:c2:75:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: Jan 27 12:09:12 2025 GMT
Not After : Jan 26 12:14:12 2026 GMT
Subject: CN=3A964F6A7530A6C02F310E187370C74B108A9AC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:e6:f4:c6:5d:33:f1:31:76:c7:a0:c2:46:
69:26:b8:55:05:b2:e9:76:0e:ad:ce:1e:78:f9:c1:
2a:39:05:62:bc:8a:73:df:47:2e:8c:e8:18:af:50:
70:34:fe:da:02:65:a3:5a:e4:31:66:58:d2:88:ec:
f6:2e:8d:2b:b5:f3:18:13:67:5c:72:cc:ba:f3:3c:
9e:ef:1d:a1:11:b0:0b:8e:5b:60:04:6f:fe:5a:84:
7e:6c:b5:00:d8:cd:85:08:92:c9:91:83:e0:0c:79:
42:93:99:3b:d6:fd:0f:b7:d1:bf:17:b8:28:f3:dd:
57:f3:aa:41:45:b4:54:f9:a4:2d:f0:fd:c6:37:bb:
ec:9b:9d:cd:4b:6f:b6:64:71:72:50:ef:23:f2:d3:
fe:35:6c:cf:16:a5:22:c0:96:4a:e0:9a:21:87:85:
69:b0:fc:45:bd:24:11:e1:22:e3:ee:d7:ed:b5:98:
ba:93:22:0d:72:bd:47:2e:af:6a:cb:d1:38:49:28:
31:e5:2f:54:16:35:b1:ad:4a:13:77:be:b3:78:2e:
41:74:e3:e8:b7:9a:85:25:23:b9:f4:e5:bd:4e:d8:
9a:d8:6a:e4:db:9e:86:3f:1e:f3:3a:f8:7b:36:dd:
c8:ac:b6:55:41:41:d7:dd:1b:e8:35:88:3f:f0:2c:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:96:4F:6A:75:30:A6:C0:2F:31:0E:18:73:70:C7:4B:10:8A:9A:C2
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323033363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa9b:c0::/48
Signature Algorithm: sha256WithRSAEncryption
12:74:70:d5:0c:ff:93:d1:bd:28:d0:85:d1:20:af:b1:4e:22:
86:29:f6:08:39:bf:87:2f:65:27:c5:2d:17:a7:12:13:e8:cf:
4e:35:79:43:43:06:16:88:22:98:b5:a6:eb:37:c5:9b:13:ab:
49:6b:50:32:bd:2a:da:97:65:9f:dd:4d:f9:d1:91:30:55:4f:
57:7d:08:e6:ac:57:9d:57:d2:a2:41:70:bf:3d:f7:3a:8a:37:
1f:cf:ff:98:4a:c7:86:39:48:72:0e:57:2b:eb:34:09:2c:5b:
ea:1d:15:8a:0a:a1:93:ac:6f:f3:fa:c5:68:6b:52:8c:91:79:
cb:99:6a:81:f2:cd:9b:9a:a2:86:05:34:28:fc:d7:01:73:85:
f4:2b:dd:3b:1f:df:50:0e:43:66:2e:28:f9:0b:7c:1f:b7:50:
2e:b9:31:00:73:aa:5a:2e:2e:ee:a2:bf:23:d9:1a:1a:3e:67:
e5:90:d8:5f:a8:ce:64:53:95:7d:93:fc:13:85:83:97:a6:f6:
63:e8:70:94:7b:97:e2:6b:6b:5d:7d:ad:d0:d9:c4:09:04:3d:
36:c7:2c:3e:c1:e4:fe:75:54:a6:51:65:92:ac:08:7c:f4:52:
0e:e6:cb:de:6b:48:d7:9e:83:00:c8:8a:71:98:2f:73:ce:25:
12:75:a5:26
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUHFWmKqLsbUJmGvSnFbHbbsJ1JPkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzI0MTM5ZWYyYjEyYjgzMDA5Nzk3YjhkNmMwYjQzMDY1
MDdiZDdkNjM4Y2U5NDE4MDUwHhcNMjUwMTI3MTIwOTEyWhcNMjYwMTI2MTIxNDEy
WjAzMTEwLwYDVQQDEygzQTk2NEY2QTc1MzBBNkMwMkYzMTBFMTg3MzcwQzc0QjEw
OEE5QUMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9nm9MZdM/Ex
dsegwkZpJrhVBbLpdg6tzh54+cEqOQVivIpz30cujOgYr1BwNP7aAmWjWuQxZljS
iOz2Lo0rtfMYE2dccsy68zye7x2hEbALjltgBG/+WoR+bLUA2M2FCJLJkYPgDHlC
k5k71v0Pt9G/F7go891X86pBRbRU+aQt8P3GN7vsm53NS2+2ZHFyUO8j8tP+NWzP
FqUiwJZK4Johh4VpsPxFvSQR4SLj7tfttZi6kyINcr1HLq9qy9E4SSgx5S9UFjWx
rUoTd76zeC5BdOPot5qFJSO59OW9Ttia2Grk256GPx7zOvh7Nt3IrLZVQUHX3Rvo
NYg/8CxSzQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFDqWT2p1MKbALzEOGHNwx0sQ
iprCMB8GA1UdIwQYMBaAFNDmx2ut7KXL2pLJGLl8f0WZ77bPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MGM5ZmVlYzEyNDllLzEv
RDBFNkM3NkJBREVDQTVDQkRBOTJDOTE4Qjk3QzdGNDU5OUVGQjZDRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2JjOTQyZjY4LWNiMzMtNGEwNS1hNzI3LTNmOTNlNjEwMzkzZS83MjQx
MzllZjJiMTJiODMwMDk3OTdiOGQ2YzBiNDMwNjUwN2JkN2Q2MzhjZTk0MTgwNS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBj
OWZlZWMxMjQ5ZS8xLzMyMzYzMDMyM2E2NjYxMzk2MjNhNjMzMDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMyMzAzMzM2MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+psAwDANBgkq
hkiG9w0BAQsFAAOCAQEAEnRw1Qz/k9G9KNCF0SCvsU4ihin2CDm/hy9lJ8UtF6cS
E+jPTjV5Q0MGFogimLWm6zfFmxOrSWtQMr0q2pdln91N+dGRMFVPV30I5qxXnVfS
okFwvz33Ooo3H8//mErHhjlIcg5XK+s0CSxb6h0Vigqhk6xv8/rFaGtSjJF5y5lq
gfLNm5qihgU0KPzXAXOF9CvdOx/fUA5DZi4o+Qt8H7dQLrkxAHOqWi4u7qK/I9ka
Gj5n5ZDYX6jOZFOVfZP8E4WDl6b2Y+hwlHuX4mtrXX2t0NnECQQ9NscsPsHk/nVU
plFlkqwIfPRSDubL3mtI156DAMiKcZgvc84lEnWlJg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:13:46 2025 by rpki-client