Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323130363637.roa
File: 323630323a666139623a63303a3a2f34382d3438203d3e20323130363637.roa (raw, json)
Hash identifier: cRUpJE0jnT472vJ0/Ga1lo5v2B6veSdgmVPpyJp0g10=
Subject key identifier: F4:A0:62:03:CC:C1:5D:AB:32:A3:71:8D:3E:84:65:56:D7:4B:B4:D6
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 23989C35CF6029B13F758FC34A5FC7A6B9253A99
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323130363637.roa
Signing time: Mon 27 Jan 2025 12:14:11 +0000
ROA not before: Mon 27 Jan 2025 12:09:11 +0000
ROA not after: Mon 26 Jan 2026 12:14:11 +0000
asID: 210667
IP address blocks: 2602:fa9b:c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:98:9c:35:cf:60:29:b1:3f:75:8f:c3:4a:5f:c7:a6:b9:25:3a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: Jan 27 12:09:11 2025 GMT
Not After : Jan 26 12:14:11 2026 GMT
Subject: CN=F4A06203CCC15DAB32A3718D3E846556D74BB4D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:56:7e:0a:f3:ba:23:71:10:d1:c2:e1:e3:19:
98:e5:c4:ae:1f:f0:39:54:3c:26:25:87:2f:c2:92:
67:f8:f3:b8:be:6d:d0:fd:d1:99:dd:43:1d:de:fa:
ed:35:f9:04:76:c3:cd:ac:b8:63:39:8a:96:26:d2:
1d:bd:85:a4:86:b1:03:23:bc:2c:23:72:ae:5a:8d:
a3:e7:0b:cb:d8:3b:67:ee:2b:f0:c8:dc:d3:11:76:
5c:ef:15:36:57:d3:33:85:63:2e:2e:5c:93:a4:26:
c6:0e:99:70:7a:00:c5:f3:ea:67:b9:a0:b7:df:c0:
37:cc:8a:32:eb:dc:bc:d3:12:61:db:d8:df:5f:06:
13:26:9c:93:21:56:9d:37:19:55:c4:bb:f9:e7:51:
e2:13:ae:1b:6f:06:92:a0:8d:f3:ae:d2:71:49:e7:
2b:30:aa:2b:48:ca:dd:28:8b:cd:af:0b:e1:5c:d9:
48:1d:aa:62:f1:8e:b8:54:18:92:7c:04:6e:2a:8d:
7c:cf:2e:c8:0a:e7:2e:9f:0f:b7:4e:12:0b:40:7c:
d6:ec:ab:13:fd:67:8a:4c:6f:7d:5d:f2:26:61:fb:
03:c9:24:3f:7b:90:a8:5c:4d:11:9f:43:58:51:c2:
1a:b3:74:cd:35:d1:fb:5c:0c:31:2f:b1:ea:a1:ce:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A0:62:03:CC:C1:5D:AB:32:A3:71:8D:3E:84:65:56:D7:4B:B4:D6
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323130363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa9b:c0::/48
Signature Algorithm: sha256WithRSAEncryption
a5:02:ad:a0:77:49:6e:b5:e4:14:88:f1:fa:18:cd:05:09:7d:
ae:14:13:6e:56:39:fa:0c:25:cc:a3:3d:bb:e3:b9:44:c5:e9:
2c:4c:56:6d:55:3e:dd:d3:31:a7:de:c7:3f:70:8f:92:7a:58:
7a:38:f1:02:f9:85:90:ca:4c:70:aa:b2:f9:f1:c9:8a:41:03:
2d:13:20:e4:cd:f2:02:ef:39:17:6d:cc:cb:09:fd:a3:08:91:
79:50:63:71:53:a7:bd:55:d3:a7:1c:ed:5a:6e:bd:bb:0f:c6:
fc:8c:2d:2a:a1:4b:a7:60:cc:fc:52:3b:29:7a:ff:5a:3d:68:
50:c9:b9:d7:ef:ca:cc:d7:8a:25:be:05:94:e0:dc:69:16:a8:
ed:8b:eb:81:f2:1f:7e:80:03:71:33:25:a0:83:c9:47:94:f4:
88:ee:b7:b2:6b:53:f0:33:a3:e5:6e:c7:72:d7:f7:db:ee:c8:
3f:0a:c7:c8:03:c8:f9:5a:c4:7d:0b:31:e0:3d:97:c7:44:b1:
90:04:2b:c8:33:b8:da:9d:58:c1:9e:73:eb:1d:d9:64:f7:62:
56:30:5b:f7:71:66:e5:92:56:ae:31:58:65:35:13:9f:51:1c:
ad:cf:01:7f:a6:e5:65:1e:f8:ab:95:9a:15:8e:87:42:9b:45:
a8:0f:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:26:29 2025 by rpki-client