Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203630373433.roa
File: 323630323a666139623a63303a3a2f34382d3438203d3e203630373433.roa (raw, json)
Hash identifier: PO6+dHE3bSQNyZWTouEvngYJRqDeNsAa1Gs3g1BJmDA=
Subject key identifier: 2D:78:31:2C:17:EC:93:D8:CA:6F:39:CE:EA:DA:EA:9B:73:EE:85:80
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 758C9FE7E1B603620B1AF38B33B699612D2960C6
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203630373433.roa
Signing time: Mon 27 Jan 2025 12:14:12 +0000
ROA not before: Mon 27 Jan 2025 12:09:12 +0000
ROA not after: Mon 26 Jan 2026 12:14:12 +0000
asID: 60743
IP address blocks: 2602:fa9b:c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:8c:9f:e7:e1:b6:03:62:0b:1a:f3:8b:33:b6:99:61:2d:29:60:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: Jan 27 12:09:12 2025 GMT
Not After : Jan 26 12:14:12 2026 GMT
Subject: CN=2D78312C17EC93D8CA6F39CEEADAEA9B73EE8580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:a9:4c:e3:37:7b:93:be:8d:34:81:fc:02:
1b:74:0a:23:9c:26:90:8a:f6:1f:15:35:aa:eb:30:
3a:32:d9:c2:74:56:07:f0:58:77:5e:fe:7f:9f:90:
58:22:22:e9:a4:c7:8f:13:ed:d4:dc:f9:ab:cb:ef:
75:30:40:78:e7:1d:d8:dc:3e:3e:ed:93:6b:cb:c8:
a3:cb:d7:5a:7c:c3:9a:15:46:68:ca:bd:46:fb:ae:
2c:80:7b:35:cc:40:e8:d4:da:45:26:f0:48:88:50:
69:a2:b9:17:11:92:fd:71:16:07:bf:bc:f5:c7:3a:
d7:d8:b1:ea:82:14:5b:8c:ec:ea:5b:e0:ad:fc:d0:
0c:b6:5b:a8:28:73:ec:b8:32:0a:76:a8:e4:99:e8:
a3:db:09:c6:00:9f:9f:59:0d:af:d2:41:df:34:df:
f2:ec:e8:26:1c:ad:2a:42:72:b2:9f:b4:bb:55:72:
a2:5f:21:e6:e9:f3:8e:80:29:41:7d:9e:b7:dc:e2:
28:51:f3:a7:f2:4b:25:ba:cd:85:ae:e2:c3:c9:66:
c3:87:d5:b4:13:4b:65:1b:2b:53:42:de:2f:e8:27:
46:c9:01:4d:4f:62:27:49:df:3e:7e:39:de:a0:b4:
d7:c4:84:35:d3:99:94:10:04:a6:99:54:68:1e:91:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:78:31:2C:17:EC:93:D8:CA:6F:39:CE:EA:DA:EA:9B:73:EE:85:80
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203630373433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa9b:c0::/48
Signature Algorithm: sha256WithRSAEncryption
03:6c:02:e6:65:48:76:f3:5c:e4:dc:82:e1:f2:71:67:e3:f5:
41:c5:f0:bf:16:bb:c9:a5:0c:93:71:29:16:9d:c0:3f:18:fb:
97:05:10:ff:74:95:34:18:0f:02:20:bc:47:c1:4e:ff:57:d5:
a2:8d:e0:16:cc:64:cb:ef:e5:8d:d3:c6:89:e9:53:fe:f6:8c:
ac:d0:26:c7:4a:ca:6e:e9:de:71:cf:f2:88:53:38:4f:24:fd:
bb:3f:20:78:0c:db:2d:c4:01:a7:f2:0f:90:aa:a0:91:81:3d:
4e:7e:d9:97:64:be:db:35:fe:d9:ec:3b:8a:ed:68:16:6d:cd:
9b:e5:23:15:16:9c:86:a8:4d:9b:da:50:6f:c4:08:88:2b:47:
c5:1c:9c:75:e5:64:a8:8b:6e:32:42:4a:a0:9c:2c:cd:ee:24:
ba:67:46:21:bb:f6:54:c5:e2:61:a6:61:22:0c:80:fd:04:80:
e8:5f:2a:b1:2e:97:8a:fc:32:5e:21:21:14:ee:a2:cb:fc:ce:
56:8a:a9:a4:8c:f8:f1:1c:5f:77:42:ec:fb:c2:d4:84:97:e5:
39:f1:05:f3:2b:9c:b9:c2:95:e3:61:39:f8:c4:0f:c2:54:48:
4a:78:18:38:14:f9:68:ec:53:4e:f9:cb:21:13:ca:29:5e:5a:
47:7b:b0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:12:24 2025 by rpki-client