Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/0/323632303a3130663a663030303a3a2f34342d3434203d3e20333939393730.roa
File: 323632303a3130663a663030303a3a2f34342d3434203d3e20333939393730.roa (raw, json)
Hash identifier: 7DnFbdeGx+u+rSUOPRB3zWqbziJW4fSbdG8e9QZAHuU=
Subject key identifier: D0:7D:C1:D3:02:0A:D2:00:F5:6D:79:3E:CB:59:71:A1:0A:5A:C4:CA
Certificate issuer: /CN=62e8972cb6199bf6289052b2adc6d99909c39fd992ff5137f4
Certificate serial: 4CEFBDFD010C858C30CEF82809EFF35177E21FC3
Authority key identifier: 8A:C4:9D:E5:90:6A:14:A9:2D:8A:A5:A1:3F:74:94:00:11:C6:45:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0ec4ce3f-2e6b-4972-b293-553db240f905/62e8972cb6199bf6289052b2adc6d99909c39fd992ff5137f4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/0/323632303a3130663a663030303a3a2f34342d3434203d3e20333939393730.roa
Signing time: Fri 02 Aug 2024 20:09:56 +0000
ROA not before: Fri 02 Aug 2024 20:04:56 +0000
ROA not after: Fri 01 Aug 2025 20:09:56 +0000
asID: 399970
IP address blocks: 2620:10f:f000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ef:bd:fd:01:0c:85:8c:30:ce:f8:28:09:ef:f3:51:77:e2:1f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e8972cb6199bf6289052b2adc6d99909c39fd992ff5137f4
Validity
Not Before: Aug 2 20:04:56 2024 GMT
Not After : Aug 1 20:09:56 2025 GMT
Subject: CN=D07DC1D3020AD200F56D793ECB5971A10A5AC4CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3a:07:a3:29:05:20:c6:30:0c:16:61:82:fa:
e8:54:96:34:9f:87:1c:d7:81:38:dc:b6:65:a6:0f:
b4:42:dd:f2:16:b4:41:9b:9c:3a:af:7b:30:3d:ad:
de:73:f1:36:86:71:2a:84:69:4e:89:cf:ba:07:58:
af:c2:4c:02:bc:db:08:8f:43:f9:df:9d:66:9d:b0:
73:fb:fe:fc:27:cd:18:e6:35:34:6c:e3:6b:f3:5e:
0c:88:e4:89:f7:a2:e4:ad:ba:14:75:3d:b2:3d:49:
31:23:e7:2f:64:11:a5:fe:80:b4:2a:10:5f:5a:e1:
01:b4:b6:26:3a:77:f3:c5:b7:d8:56:d1:8c:a4:e6:
b6:5d:35:f7:7d:14:df:44:8f:ad:d0:e2:e8:9c:af:
8e:f0:dd:50:3f:c4:1e:05:35:ef:09:dc:40:d1:b5:
56:cc:67:db:3d:19:03:e4:18:ba:09:1f:b9:0d:8d:
59:3e:66:8a:9f:58:aa:a7:3e:08:14:06:b3:3d:62:
81:e2:86:e1:9a:f7:d7:67:19:57:74:28:d5:8f:b8:
ee:7a:92:50:33:48:ef:1d:e6:05:0f:1c:fe:7a:05:
b7:cf:6c:e8:1e:21:cd:db:4a:71:c7:30:3a:30:de:
f9:41:04:a3:c1:45:45:40:d0:cf:9d:d6:b6:0f:81:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7D:C1:D3:02:0A:D2:00:F5:6D:79:3E:CB:59:71:A1:0A:5A:C4:CA
X509v3 Authority Key Identifier:
keyid:8A:C4:9D:E5:90:6A:14:A9:2D:8A:A5:A1:3F:74:94:00:11:C6:45:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/0/8AC49DE5906A14A92D8AA5A13F74940011C645BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0ec4ce3f-2e6b-4972-b293-553db240f905/62e8972cb6199bf6289052b2adc6d99909c39fd992ff5137f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/0/323632303a3130663a663030303a3a2f34342d3434203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2620:10f:f000::/44
Signature Algorithm: sha256WithRSAEncryption
61:f8:11:05:90:ee:05:72:1e:e3:09:3d:dc:5e:35:72:a0:7c:
ed:30:14:19:5b:f4:f7:18:ed:79:16:87:78:1e:12:81:41:3e:
80:08:79:f0:10:4e:c7:45:dc:2c:c2:d3:b0:04:0c:5f:c9:d1:
b5:ab:a1:9c:d8:3a:f3:e6:51:85:24:c6:0f:9f:ae:5e:c4:31:
5e:8b:c9:35:78:76:17:92:4d:37:17:cd:60:39:c2:79:0d:a7:
96:a8:1e:59:d9:34:2c:db:88:49:73:fa:65:1f:93:b5:87:20:
38:18:ab:a4:dd:65:d3:f6:1b:e4:1b:d5:d2:4e:6d:d7:e0:75:
fa:1f:52:11:5f:51:81:39:c8:d8:40:0c:6d:0e:cb:98:22:d7:
dd:59:24:29:6d:dc:3c:52:66:7f:d7:39:20:81:60:16:71:9d:
de:ea:19:91:f0:a8:59:ae:d2:12:51:ac:8d:4a:1b:2e:cd:0a:
87:c6:a2:3c:1a:71:2a:de:05:b8:43:b0:72:72:77:4d:42:7f:
9e:26:22:a3:f6:bb:55:7d:1e:6b:6d:fa:53:7b:d5:0e:ea:59:
81:f6:19:a2:9c:16:65:0b:2b:5f:01:d6:a1:51:7f:89:34:7c:
35:56:39:70:e9:66:f9:08:81:83:be:24:2c:68:8d:39:56:6a:
3a:02:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 22:29:00 2024 by rpki-client on console-fra.rpki-client.org