Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323131333830.roa
File: 323630323a666139623a63303a3a2f34382d3438203d3e20323131333830.roa (raw, json)
Hash identifier: CQbSKWOsgs1YkeIL4J1sagxT2Low3/RhjshmvcqWuwU=
Subject key identifier: 77:5A:7C:2D:89:16:CB:99:E0:47:29:8A:DB:F7:5C:37:E5:B1:2F:AB
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 681C4993E0CA289648DB5CD8980F230B6610F198
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323131333830.roa
Signing time: Mon 27 Jan 2025 12:14:12 +0000
ROA not before: Mon 27 Jan 2025 12:09:12 +0000
ROA not after: Mon 26 Jan 2026 12:14:12 +0000
asID: 211380
IP address blocks: 2602:fa9b:c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1c:49:93:e0:ca:28:96:48:db:5c:d8:98:0f:23:0b:66:10:f1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: Jan 27 12:09:12 2025 GMT
Not After : Jan 26 12:14:12 2026 GMT
Subject: CN=775A7C2D8916CB99E047298ADBF75C37E5B12FAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:f7:32:53:06:cb:37:9b:0d:f3:2e:04:2b:
6a:e0:ce:33:f1:99:c6:51:4b:53:ac:24:07:ce:d6:
d0:42:67:d9:5f:a2:c9:f6:bd:fa:8d:2c:3c:2d:2a:
8f:2b:af:f6:c9:51:0b:09:4a:c4:fd:e3:39:81:cf:
41:1d:5a:28:fe:32:d1:23:72:f4:6d:7e:c5:af:96:
8c:70:f7:6f:4e:ae:cb:da:70:c6:d3:23:fd:3a:77:
7d:5d:f6:88:67:c6:31:00:02:c3:e2:d5:8a:a5:0c:
9a:f7:c1:50:2b:9c:3c:b8:3f:d5:20:cc:80:83:9b:
d8:2e:1c:47:d9:d0:7e:1f:2f:c4:9d:00:29:69:78:
94:44:50:f4:1f:ff:17:ef:22:c5:40:6b:e0:46:1d:
7d:f6:a1:6c:a9:ee:a1:e5:bf:0b:da:1c:49:3f:8a:
59:cd:8c:1a:01:74:e3:7e:06:de:a8:40:87:0c:65:
88:4d:cc:cd:61:45:02:ae:fc:6b:21:72:b0:04:d4:
55:4e:b5:12:1e:80:3e:a7:38:99:e2:eb:66:71:1c:
72:22:cd:13:e8:47:87:97:15:6c:ab:11:b2:a4:71:
a3:a3:c2:8d:ed:4e:04:15:e3:46:0e:d7:e2:9e:4e:
89:3e:18:08:83:76:a3:00:3b:e2:28:de:dc:28:a3:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5A:7C:2D:89:16:CB:99:E0:47:29:8A:DB:F7:5C:37:E5:B1:2F:AB
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323131333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa9b:c0::/48
Signature Algorithm: sha256WithRSAEncryption
35:b2:17:b2:25:5c:af:eb:dc:5f:ee:a1:a6:ba:e4:8a:f3:b0:
3e:5c:00:0b:d8:cc:30:62:96:9f:ae:92:af:e4:81:50:a8:04:
25:d6:76:81:17:b7:02:d0:b5:38:3c:8a:e4:55:24:8f:71:a6:
00:3e:a9:49:8d:81:3a:db:e4:f3:29:49:0e:c8:56:37:8f:a9:
1d:32:12:60:a0:5e:f9:7a:f6:1b:dc:3e:21:2b:5b:54:01:f6:
f1:7d:c8:88:5a:dd:f3:00:60:21:28:cd:6a:d0:cf:71:17:c5:
28:62:bb:69:70:34:03:35:2b:e1:92:80:07:ed:33:59:27:28:
8e:ca:bc:73:ca:91:c5:64:fd:57:24:f1:de:dc:21:34:18:db:
4d:83:ee:ca:5f:17:b1:e8:2c:2f:49:26:eb:2c:67:e1:8b:56:
e2:80:18:9f:fd:86:14:ee:6f:c5:ac:a9:ce:f2:4a:95:6e:1d:
8a:d0:9a:a0:2e:4e:14:db:af:b5:42:dd:5a:62:c9:b3:14:47:
16:5a:10:9b:01:01:4b:d2:89:6b:fe:ca:14:f7:13:ce:85:77:
df:79:b6:fb:eb:9d:76:e2:04:55:86:72:cc:64:40:a6:fb:9c:
65:17:6b:dd:ce:21:64:bb:af:6f:a8:20:07:f4:58:51:05:c4:
0d:c0:8a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:15:01 2025 by rpki-client