Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132323a3a2f34372d3437203d3e20323039313635.roa
File: 323630323a666131633a3132323a3a2f34372d3437203d3e20323039313635.roa (raw, json)
Hash identifier: LEZf5BLAuc0eC2w3R2AofQU+6LkclQRqBeZkfNlgz5g=
Subject key identifier: 4A:F8:2B:3A:B4:F6:E4:6D:F0:A3:87:BB:75:8D:21:19:7E:F4:46:D9
Certificate issuer: /CN=16904f79bad676f1c42300f199cbfa32c479c6e18c33884b26
Certificate serial: 0585D6C5EE89FE0E8D341FE7FAAA5D700D4855DD
Authority key identifier: 5D:9F:FF:8E:C1:F1:B6:C5:D5:2A:92:FD:7C:EE:28:1C:79:08:A1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79bad676f1c42300f199cbfa32c479c6e18c33884b26.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132323a3a2f34372d3437203d3e20323039313635.roa
Signing time: Thu 21 Sep 2023 15:53:56 +0000
ROA not before: Thu 21 Sep 2023 15:48:56 +0000
ROA not after: Thu 19 Sep 2024 15:53:56 +0000
asID: 209165
IP address blocks: 2602:fa1c:122::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:85:d6:c5:ee:89:fe:0e:8d:34:1f:e7:fa:aa:5d:70:0d:48:55:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16904f79bad676f1c42300f199cbfa32c479c6e18c33884b26
Validity
Not Before: Sep 21 15:48:56 2023 GMT
Not After : Sep 19 15:53:56 2024 GMT
Subject: CN=4AF82B3AB4F6E46DF0A387BB758D21197EF446D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:23:41:29:79:ce:99:4c:49:8b:45:24:07:
b1:1b:ab:86:cb:99:62:1d:81:49:a1:7f:a6:e3:92:
d3:31:76:ab:b5:80:f8:d1:d6:39:5d:49:f6:97:02:
b3:bf:cc:59:46:5d:b7:89:c8:51:75:b7:c2:73:c1:
9e:bb:4c:5b:eb:cb:46:53:91:91:02:53:3c:6a:87:
ee:73:37:42:80:d3:00:c2:d4:31:78:93:44:bb:ac:
e5:be:a0:e8:0d:58:33:4e:14:60:66:aa:14:f3:07:
73:9d:79:ed:a7:93:1f:8f:eb:99:92:35:de:2e:cc:
a3:27:6d:ba:72:60:fb:06:85:b0:e5:22:bf:e6:da:
7c:f9:55:46:9f:c6:63:99:8c:b5:9c:f3:10:34:58:
ff:52:65:cf:0e:83:ed:c7:d0:3e:01:97:94:54:f4:
9f:ba:59:80:e8:77:4f:80:80:99:b5:5e:67:bd:84:
ea:8f:75:23:5e:7f:08:19:6d:58:2d:43:11:88:38:
c2:a7:21:6a:0e:af:94:0e:2d:f1:81:64:14:16:4d:
6e:c7:32:d1:1d:ba:6d:df:0c:12:bd:76:0d:0d:b3:
7f:6b:99:30:a6:f3:ee:62:9c:ec:b7:c4:22:c8:10:
ab:1c:58:d5:57:ec:32:3f:ca:9f:fa:71:14:8e:5c:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:2B:3A:B4:F6:E4:6D:F0:A3:87:BB:75:8D:21:19:7E:F4:46:D9
X509v3 Authority Key Identifier:
keyid:5D:9F:FF:8E:C1:F1:B6:C5:D5:2A:92:FD:7C:EE:28:1C:79:08:A1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/5D9FFF8EC1F1B6C5D52A92FD7CEE281C7908A18E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79bad676f1c42300f199cbfa32c479c6e18c33884b26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132323a3a2f34372d3437203d3e20323039313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa1c:122::/47
Signature Algorithm: sha256WithRSAEncryption
41:2b:8b:27:d4:7a:b0:b3:fb:93:e6:7a:37:a1:48:9a:61:b3:
3c:9d:b2:19:f8:1c:22:a4:ed:96:df:4f:d4:32:73:35:78:3f:
eb:d2:30:4e:a0:db:fa:4f:0a:7c:81:0c:7a:c4:ee:cb:4d:3e:
51:d0:83:30:3c:4c:a6:00:3e:1b:77:a8:66:a1:6f:78:e2:6f:
e1:ce:57:0c:25:57:19:db:52:36:89:9d:b4:e7:d8:97:46:f7:
a0:4d:a1:66:d6:01:2e:ef:19:84:1f:4d:74:7f:e7:18:41:9d:
05:b4:c1:7f:fb:ca:d5:16:e5:9f:e1:b6:5e:39:36:62:e7:3e:
0d:80:f1:c2:2c:df:4a:85:ad:8a:c8:f4:88:f6:23:7c:ca:d1:
80:e4:4a:a0:ed:7e:9c:be:e5:6c:9e:9b:79:e5:2a:2a:6f:3d:
d7:71:2c:9e:cd:72:37:e5:cf:0f:26:9d:8c:76:14:fb:6f:0b:
b4:0f:9e:0f:1f:43:84:88:e8:a6:47:f9:4f:60:72:9a:52:ef:
d2:4c:b5:0f:7e:06:35:99:0b:80:58:40:86:ac:1c:ac:3a:93:
d5:e6:7a:ae:91:b6:69:03:17:5e:d1:ae:0b:e7:3f:a5:01:88:
4d:0a:35:9c:c2:94:fc:85:a0:7f:f1:91:9a:12:ac:93:f0:01:
8d:13:38:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:27 2025 by rpki-client