Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323133313633.roa
File: 323630323a666139623a63303a3a2f34382d3438203d3e20323133313633.roa (raw, json)
Hash identifier: T7pcpENPL2X6s5P3RbDix6PM9LIDoR9MXYK3lxa4V28=
Subject key identifier: D5:DD:DC:0A:08:7D:0A:4F:CD:0E:00:D5:94:FD:72:50:4B:5D:09:F3
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 33680166E0DEF88EEC8C840559A6DA3129222CC3
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323133313633.roa
Signing time: Mon 27 Jan 2025 12:14:11 +0000
ROA not before: Mon 27 Jan 2025 12:09:11 +0000
ROA not after: Mon 26 Jan 2026 12:14:11 +0000
asID: 213163
IP address blocks: 2602:fa9b:c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:68:01:66:e0:de:f8:8e:ec:8c:84:05:59:a6:da:31:29:22:2c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: Jan 27 12:09:11 2025 GMT
Not After : Jan 26 12:14:11 2026 GMT
Subject: CN=D5DDDC0A087D0A4FCD0E00D594FD72504B5D09F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:f2:10:2f:0a:43:e7:d0:d8:7a:8b:19:c3:
42:70:2e:56:76:6b:cb:82:c3:89:58:66:f0:54:d5:
85:b8:21:35:2d:9b:24:b6:1f:63:e5:1b:57:9e:6a:
11:3d:31:1f:22:2d:a3:62:f6:5a:b8:c9:ec:88:b0:
6d:bd:87:ea:5d:c9:04:86:54:0c:63:61:6f:1b:74:
2c:66:3d:fe:e0:be:4b:ca:5c:83:0e:76:ed:77:bd:
39:6d:d5:a9:29:79:d3:0d:13:93:0d:89:57:83:8e:
8b:7b:95:a9:99:ae:94:80:1d:c1:0a:72:a4:02:bc:
a3:a8:12:06:ff:05:f9:e6:71:6a:30:5f:63:49:1f:
40:b7:46:1f:93:1b:2f:df:3b:13:6c:97:a7:2f:9a:
13:36:df:2f:9a:0a:8c:d1:f1:2d:e4:47:dc:6f:be:
fa:1d:44:35:e8:7a:61:77:32:d2:c0:3f:b6:82:86:
b8:50:f7:d6:58:cf:17:06:50:79:d5:45:52:35:4d:
43:5f:b7:bb:25:72:85:10:94:a9:cc:c6:eb:f8:24:
64:a5:78:2a:2f:83:63:a0:0b:62:bc:c9:7b:b5:d2:
a5:35:84:3b:02:9c:0a:db:c9:17:55:ce:e8:f1:0f:
69:01:35:db:c0:0c:f0:1e:61:14:96:af:42:90:e7:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DD:DC:0A:08:7D:0A:4F:CD:0E:00:D5:94:FD:72:50:4B:5D:09:F3
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323133313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa9b:c0::/48
Signature Algorithm: sha256WithRSAEncryption
6a:62:79:47:c2:6a:cf:85:05:9d:74:c2:ac:a7:c5:3a:53:dd:
28:ff:22:a7:17:cf:6f:f3:cd:93:8a:81:d6:ee:61:bb:25:d0:
72:21:7a:db:a6:78:cf:0c:ca:b6:63:c0:b5:20:03:bb:da:08:
1b:01:e0:55:4e:05:fc:00:0e:9b:45:77:36:0a:37:cd:a5:c0:
02:37:04:5f:34:1d:70:32:b9:27:a7:f7:b9:44:7b:43:14:19:
16:f5:86:9e:31:82:cd:5e:a6:9b:4f:13:ac:a7:39:4c:7a:b4:
5a:55:1c:d2:de:57:1f:60:29:8a:fd:29:43:b1:bc:fb:32:69:
2f:b7:15:cd:4f:b0:fb:f4:ff:5a:b1:f1:92:49:57:35:ea:3c:
c0:ff:a8:04:14:85:6a:2a:ce:9a:db:ce:6f:d5:f2:60:18:13:
08:d3:6c:bf:62:54:40:8b:5a:79:3f:7f:fc:76:7b:ad:c1:36:
5c:f1:00:ab:0b:08:99:8c:d1:92:00:ea:2f:a2:e7:d0:29:5e:
c7:91:60:87:27:50:84:b1:95:b6:a0:fa:57:5e:81:a9:5e:7a:
0e:c5:96:0b:c2:dd:81:d3:69:58:02:86:18:e6:d1:0a:65:46:
82:18:7e:85:3c:7d:d7:0c:de:f4:4a:07:55:3e:da:54:cb:4e:
dd:01:51:dc
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUM2gBZuDe+I7sjIQFWabaMSkiLMMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzI0MTM5ZWYyYjEyYjgzMDA5Nzk3YjhkNmMwYjQzMDY1
MDdiZDdkNjM4Y2U5NDE4MDUwHhcNMjUwMTI3MTIwOTExWhcNMjYwMTI2MTIxNDEx
WjAzMTEwLwYDVQQDEyhENUREREMwQTA4N0QwQTRGQ0QwRTAwRDU5NEZENzI1MDRC
NUQwOUYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3DyEC8KQ+fQ
2HqLGcNCcC5WdmvLgsOJWGbwVNWFuCE1LZskth9j5RtXnmoRPTEfIi2jYvZauMns
iLBtvYfqXckEhlQMY2FvG3QsZj3+4L5LylyDDnbtd705bdWpKXnTDROTDYlXg46L
e5Wpma6UgB3BCnKkAryjqBIG/wX55nFqMF9jSR9At0Yfkxsv3zsTbJenL5oTNt8v
mgqM0fEt5Efcb776HUQ16HphdzLSwD+2goa4UPfWWM8XBlB51UVSNU1DX7e7JXKF
EJSpzMbr+CRkpXgqL4NjoAtivMl7tdKlNYQ7ApwK28kXVc7o8Q9pATXbwAzwHmEU
lq9CkOeumQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFNXd3AoIfQpPzQ4A1ZT9clBL
XQnzMB8GA1UdIwQYMBaAFNDmx2ut7KXL2pLJGLl8f0WZ77bPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MGM5ZmVlYzEyNDllLzEv
RDBFNkM3NkJBREVDQTVDQkRBOTJDOTE4Qjk3QzdGNDU5OUVGQjZDRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2JjOTQyZjY4LWNiMzMtNGEwNS1hNzI3LTNmOTNlNjEwMzkzZS83MjQx
MzllZjJiMTJiODMwMDk3OTdiOGQ2YzBiNDMwNjUwN2JkN2Q2MzhjZTk0MTgwNS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBj
OWZlZWMxMjQ5ZS8xLzMyMzYzMDMyM2E2NjYxMzk2MjNhNjMzMDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMyMzEzMzMxMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+psAwDANBgkq
hkiG9w0BAQsFAAOCAQEAamJ5R8Jqz4UFnXTCrKfFOlPdKP8ipxfPb/PNk4qB1u5h
uyXQciF626Z4zwzKtmPAtSADu9oIGwHgVU4F/AAOm0V3Ngo3zaXAAjcEXzQdcDK5
J6f3uUR7QxQZFvWGnjGCzV6mm08TrKc5THq0WlUc0t5XH2Apiv0pQ7G8+zJpL7cV
zU+w+/T/WrHxkklXNeo8wP+oBBSFairOmtvOb9XyYBgTCNNsv2JUQItaeT9//HZ7
rcE2XPEAqwsImYzRkgDqL6Ln0Clex5FghydQhLGVtqD6V16BqV56DsWWC8LdgdNp
WAKGGObRCmVGghh+hTx91wze9EoHVT7aVMtO3QFR3A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:11:11 2025 by rpki-client