Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203537383730.roa
File: 323630323a666139623a63303a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier: 5WKM8df1F7qQ9hqMAwlqzoZCrOb267RUEzd1rL8A6u4=
Subject key identifier: DC:FB:3A:4B:C9:2A:EC:2A:B1:B9:B0:CB:05:7F:04:3E:68:FB:7A:88
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 31A9BD84E02E0D1A274E9F6A3EDD8D4788A30BFC
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203537383730.roa
Signing time: Mon 27 Jan 2025 12:14:12 +0000
ROA not before: Mon 27 Jan 2025 12:09:12 +0000
ROA not after: Mon 26 Jan 2026 12:14:12 +0000
asID: 57870
IP address blocks: 2602:fa9b:c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a9:bd:84:e0:2e:0d:1a:27:4e:9f:6a:3e:dd:8d:47:88:a3:0b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: Jan 27 12:09:12 2025 GMT
Not After : Jan 26 12:14:12 2026 GMT
Subject: CN=DCFB3A4BC92AEC2AB1B9B0CB057F043E68FB7A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:f1:59:21:af:59:21:84:95:14:a6:66:1b:
f9:28:51:5d:d9:18:be:c4:7c:81:37:95:05:cf:3d:
e7:64:0e:6e:c6:6c:0f:6e:b9:1d:16:d8:12:e3:51:
35:06:fc:a1:5d:59:a4:89:76:00:90:dc:12:70:f2:
42:c1:e7:3f:6d:18:a8:60:26:41:74:3d:c3:0d:cb:
e2:9a:28:3f:11:d9:47:6d:5f:fb:63:7b:38:e0:82:
d6:da:b7:08:94:07:5f:07:cd:88:70:98:a2:96:50:
75:41:2e:a8:4c:98:23:7e:b9:5b:c6:3d:7c:89:6b:
0b:59:56:e1:e6:31:f4:92:6b:af:c8:6b:35:c4:a0:
65:25:58:b9:23:58:56:ae:e6:cc:d3:38:38:55:00:
44:84:3c:41:ee:71:de:e2:5a:f4:ae:ae:9b:24:39:
6f:4e:93:b0:2e:48:57:5e:7d:6e:59:bc:b1:43:63:
d1:25:d7:0c:ae:09:c1:3c:05:3b:e1:af:98:0b:e9:
d2:29:4e:97:32:eb:6d:27:26:c2:70:b3:a4:c4:01:
c4:4a:b6:cb:d7:f0:21:2e:2e:95:c4:52:86:d4:4c:
1a:bc:51:64:1e:a7:6a:b1:01:d4:2a:fa:7d:a6:86:
50:72:75:2e:40:62:64:c0:57:77:8e:20:13:bf:b9:
2b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:3A:4B:C9:2A:EC:2A:B1:B9:B0:CB:05:7F:04:3E:68:FB:7A:88
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203537383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa9b:c0::/48
Signature Algorithm: sha256WithRSAEncryption
36:f3:41:7b:3d:89:8c:d7:55:26:53:b2:b1:6c:b9:3f:f4:02:
23:1b:81:10:b0:c2:96:14:3a:0f:eb:5b:71:19:d6:fe:4f:a0:
54:0c:da:2d:61:5a:f3:51:30:0c:33:87:e5:0d:b0:cc:e1:67:
ba:4c:d9:60:dc:c7:4d:af:d6:7e:8c:f2:ff:22:e5:0e:4d:c7:
89:be:f6:50:8b:5b:1e:30:01:4a:24:b5:ca:73:57:72:c3:37:
77:b8:f6:e6:84:07:31:e1:c9:75:b8:b3:c1:c9:30:65:4e:65:
58:96:b3:0a:cd:04:8f:7c:e3:41:13:30:0d:b9:99:41:1d:89:
b4:18:84:e2:49:58:77:75:eb:f3:11:2c:bb:0e:e6:ee:8b:cb:
7b:1d:79:cf:cb:1d:78:78:85:26:2a:4c:ee:5c:07:dd:04:a4:
1f:f2:bf:90:da:f6:0f:ec:43:ea:57:4a:1c:11:8a:5e:e7:de:
cc:62:df:db:ac:57:12:58:0d:97:20:43:d2:c4:1b:8b:0c:b6:
93:19:bc:e7:4c:85:19:0a:dd:61:7f:55:5f:c3:03:97:31:d4:
ef:ac:03:44:15:42:33:89:4e:48:04:56:2c:6b:9f:89:4c:2c:
c4:1c:7c:14:c6:8d:20:2f:68:51:e7:6f:ff:29:e0:e6:be:e5:
f6:41:31:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:13:47 2025 by rpki-client