Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203630333031.roa
File: 323630323a666134613a3a2f34302d3430203d3e203630333031.roa (raw, json)
Hash identifier: /Awcg6mr0bkHiqp99S7c0aTcHQbohuX+a5KKt2oFMlc=
Subject key identifier: 4E:D1:09:3B:47:28:3B:43:B3:86:A1:B9:E8:8A:ED:86:8E:8C:62:1A
Certificate issuer: /CN=589b794a16808ebce2d3d0a9f47db4b3d092a884358b1e26eb
Certificate serial: 6653B049C245460B63A1A8959313C82968A45E83
Authority key identifier: 7A:68:8C:C4:87:A6:49:F0:3F:F2:87:C5:01:E6:FA:9D:02:FE:67:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a16808ebce2d3d0a9f47db4b3d092a884358b1e26eb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203630333031.roa
Signing time: Sun 03 Dec 2023 00:12:06 +0000
ROA not before: Sun 03 Dec 2023 00:07:06 +0000
ROA not after: Sun 01 Dec 2024 00:12:06 +0000
asID: 60301
IP address blocks: 2602:fa4a::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:53:b0:49:c2:45:46:0b:63:a1:a8:95:93:13:c8:29:68:a4:5e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=589b794a16808ebce2d3d0a9f47db4b3d092a884358b1e26eb
Validity
Not Before: Dec 3 00:07:06 2023 GMT
Not After : Dec 1 00:12:06 2024 GMT
Subject: CN=4ED1093B47283B43B386A1B9E88AED868E8C621A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:b3:5f:02:c2:ef:c6:1e:00:ef:71:05:a3:
50:64:0b:26:8f:7d:48:75:34:46:8c:d0:6a:0e:7c:
ad:21:4e:42:8c:29:84:6e:bf:49:50:03:f5:d6:1d:
08:76:79:38:70:3e:4a:49:71:b6:56:93:83:cd:73:
dd:d8:52:46:2d:f9:14:7f:d1:8e:62:aa:e1:50:03:
2b:68:68:97:49:0e:19:26:d8:2e:86:30:71:b1:22:
13:aa:09:d8:e1:98:82:70:31:c2:de:e8:93:bb:ab:
07:a7:7e:c0:6c:28:05:b3:a5:e7:b3:3b:d4:54:04:
45:19:f4:b4:21:d9:a3:74:e8:ac:62:48:c2:41:36:
28:89:83:7e:fa:e3:d2:18:41:65:b0:71:65:21:10:
62:68:f0:f3:1d:5a:32:86:be:fc:87:6e:1a:7b:52:
ed:95:9b:14:c1:64:7b:7c:e0:7d:9e:c1:20:02:f9:
c5:d9:b9:2a:03:5a:48:ee:c4:67:ef:f4:03:f8:29:
a5:40:e3:12:d2:5a:cf:c2:46:eb:50:c7:cc:52:f0:
f7:d9:f7:00:5b:80:cb:2a:26:f1:54:dc:c8:90:24:
51:44:91:30:d8:4e:1d:68:e9:f5:6b:26:28:58:96:
6a:bc:82:71:49:c8:c0:c7:08:e3:7f:87:0d:59:20:
1d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D1:09:3B:47:28:3B:43:B3:86:A1:B9:E8:8A:ED:86:8E:8C:62:1A
X509v3 Authority Key Identifier:
keyid:7A:68:8C:C4:87:A6:49:F0:3F:F2:87:C5:01:E6:FA:9D:02:FE:67:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/7A688CC487A649F03FF287C501E6FA9D02FE672B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a16808ebce2d3d0a9f47db4b3d092a884358b1e26eb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203630333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa4a::/40
Signature Algorithm: sha256WithRSAEncryption
40:d4:01:b8:f7:5e:41:c0:85:1c:49:79:e1:33:a7:e8:0b:bf:
79:45:9a:a8:3a:ca:16:1e:3f:ed:f4:d8:e2:19:f9:67:a1:23:
43:38:79:db:65:51:1e:70:e8:db:3f:c8:ea:97:be:ea:1a:98:
41:9a:d6:17:06:88:2c:84:ee:bd:06:22:95:51:b8:23:d8:ed:
3f:63:d9:b9:93:72:9c:bc:87:2d:b9:c7:52:22:9b:0f:43:f8:
03:30:3f:96:c8:9b:06:c4:15:32:a7:09:57:53:24:0e:ab:de:
96:6f:b7:55:c9:cb:28:8c:0f:13:25:09:dd:00:be:83:3d:1c:
61:48:f3:56:a0:d6:de:8a:9c:be:37:10:8d:02:61:02:58:3e:
85:00:7f:d5:cb:c4:d6:06:d8:4b:ac:40:73:13:c5:e5:3f:39:
d4:c7:9c:3e:57:ae:75:df:48:b1:b3:8e:9a:bf:bf:d9:00:a2:
f6:66:37:e2:51:a1:d4:46:75:35:ff:fe:9d:02:72:4b:20:c5:
04:02:74:e0:a7:51:75:99:6b:3f:84:62:ab:9f:a4:0f:aa:c8:
f6:56:3c:49:4f:b1:8e:85:e2:81:3a:b1:d2:6b:43:87:b9:4e:
74:ce:41:39:ca:1f:9e:54:90:a0:86:1b:e1:48:6c:7d:de:b6:
f3:a0:59:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-ams.rpki-client.org