Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203539363738.roa
File: 323630323a666139623a63303a3a2f34382d3438203d3e203539363738.roa (raw, json)
Hash identifier: zvmfIh5/+ObSMdRs22dFLcL0101PlKhg+wlK3RKbFpk=
Subject key identifier: AF:72:FB:CB:0E:43:C8:FE:70:03:BA:0D:C6:C9:58:DD:39:48:29:2E
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 558BD7D54FFF77E98F7A87C380A0BFBBC7674938
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203539363738.roa
Signing time: Mon 27 Jan 2025 12:14:11 +0000
ROA not before: Mon 27 Jan 2025 12:09:11 +0000
ROA not after: Mon 26 Jan 2026 12:14:11 +0000
asID: 59678
IP address blocks: 2602:fa9b:c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:8b:d7:d5:4f:ff:77:e9:8f:7a:87:c3:80:a0:bf:bb:c7:67:49:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: Jan 27 12:09:11 2025 GMT
Not After : Jan 26 12:14:11 2026 GMT
Subject: CN=AF72FBCB0E43C8FE7003BA0DC6C958DD3948292E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:f9:11:1a:f3:08:24:3a:35:d2:39:51:e2:
74:86:35:52:cb:1e:34:9c:d1:56:cc:2b:fb:ae:ba:
92:da:23:e8:50:84:8d:53:8f:6e:75:44:09:e7:dc:
e9:51:c1:14:1a:21:24:e0:09:32:54:58:7e:02:0c:
0d:43:af:4e:99:14:9a:61:03:3a:e7:4b:66:a3:d0:
69:6f:87:b2:f7:b6:63:4f:ac:cc:69:ae:4c:07:73:
7f:8e:bc:f6:b4:50:5d:55:54:b9:59:b6:03:1d:42:
7d:4c:7a:66:a5:ef:c3:ac:78:68:fa:d6:aa:2c:df:
ba:d7:23:16:b6:9f:f5:1d:44:64:ed:9b:ef:3e:61:
0e:a2:11:cc:35:3f:ba:f5:5f:d3:a9:c8:92:b0:34:
61:90:e0:ca:3b:fb:86:fe:ea:c1:54:00:19:b1:a2:
8e:8e:6b:3a:2b:53:5a:49:3d:da:5a:5d:22:8f:7e:
45:5d:b6:8b:d5:4c:4a:4f:33:22:e3:f8:5a:98:67:
71:ef:d5:ec:a8:d2:7d:d5:3c:ad:70:2e:8d:fb:70:
40:aa:18:84:34:91:53:75:02:64:83:3b:9f:44:61:
ef:a1:2e:fd:55:db:17:e6:21:4d:09:7d:e1:57:f3:
cf:77:0d:0f:82:fe:3f:c9:46:c5:56:54:ad:53:11:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:72:FB:CB:0E:43:C8:FE:70:03:BA:0D:C6:C9:58:DD:39:48:29:2E
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203539363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa9b:c0::/48
Signature Algorithm: sha256WithRSAEncryption
e6:4b:75:7e:c1:27:ab:3a:8c:06:f6:6f:80:03:ae:c7:7c:ec:
e8:d8:0c:44:b4:de:57:c4:a8:5e:b3:b9:f5:dc:23:b6:fd:e5:
cf:28:4d:d1:c3:1c:72:ce:ce:d0:a3:02:81:45:57:3f:4b:04:
2b:a5:18:68:10:db:98:d0:f5:d6:f6:cc:d5:a6:20:d6:3e:bc:
3f:db:52:dd:54:47:94:9f:6b:58:f3:e2:c1:cb:53:2c:ea:7e:
34:3e:54:70:51:9f:78:81:87:73:b0:e9:a3:02:97:64:e0:8c:
f5:a1:b1:a5:20:fe:53:39:99:70:ea:93:24:3e:f5:ed:29:33:
14:61:ea:fb:d7:de:5a:51:56:55:0c:d7:f2:65:47:0d:be:40:
ae:91:fc:95:b8:5d:d5:bd:28:9f:96:b9:81:ba:25:57:4a:19:
77:97:34:13:25:38:e9:2c:a7:1c:34:2b:a3:f1:a6:62:33:a7:
f3:3a:bb:dd:88:9e:79:28:a3:ff:4b:54:fa:41:8e:55:d8:22:
28:77:4e:2d:1f:66:99:bd:12:6f:ee:b4:c0:e0:32:f5:e2:03:
4c:c2:c1:54:20:1a:84:89:b1:98:09:6e:3a:c0:56:1e:ed:cd:
bf:b2:9e:d3:87:7a:58:0a:6b:38:a9:fe:7b:31:d6:c1:89:07:
11:3d:75:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:10:25 2025 by rpki-client