Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/1/323632303a31303a363030303a3a2f34382d3438203d3e20333939393730.roa
File: 323632303a31303a363030303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier: Q12uhz6qdBCIRN1FwAg8+m7V8wYb93eREmUNBuRQIZk=
Subject key identifier: C1:EE:9E:71:9B:65:22:F4:B8:BA:26:71:A5:33:3B:61:4D:3C:BF:0E
Certificate issuer: /CN=c09ad5c4404490e24ad0ec400d6fd4ed69296e55cb53f6684f
Certificate serial: 6DC48AC3C9BC81861D491185D9CA21FAA061283D
Authority key identifier: 60:C6:FD:62:49:EA:87:A5:38:43:36:34:46:A0:04:3D:55:A2:FD:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/57c17bd2-6e1f-4d80-b76e-8c7ae850878e/c09ad5c4404490e24ad0ec400d6fd4ed69296e55cb53f6684f.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/1/323632303a31303a363030303a3a2f34382d3438203d3e20333939393730.roa
Signing time: Fri 02 Aug 2024 20:09:56 +0000
ROA not before: Fri 02 Aug 2024 20:04:56 +0000
ROA not after: Fri 01 Aug 2025 20:09:56 +0000
asID: 399970
IP address blocks: 2620:10:6000::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c4:8a:c3:c9:bc:81:86:1d:49:11:85:d9:ca:21:fa:a0:61:28:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09ad5c4404490e24ad0ec400d6fd4ed69296e55cb53f6684f
Validity
Not Before: Aug 2 20:04:56 2024 GMT
Not After : Aug 1 20:09:56 2025 GMT
Subject: CN=C1EE9E719B6522F4B8BA2671A5333B614D3CBF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:b6:a3:7a:b2:52:c8:83:b8:5d:3d:86:06:
d5:f5:13:f4:bd:de:8e:60:cd:59:ff:6c:2a:8e:4b:
1f:fe:bf:ec:3b:74:67:49:36:00:2c:16:91:a4:85:
65:8b:b9:28:d0:1a:e9:63:f3:c8:e7:c7:ff:33:fa:
6d:d9:db:17:78:b9:63:01:8f:b6:cc:a1:34:0a:3b:
a9:6b:e6:86:94:9c:a1:60:f9:72:f6:1e:fe:7e:35:
e3:06:3a:55:7b:0e:46:4d:fa:a9:cb:8e:38:02:4a:
e8:29:3d:a4:90:67:c5:c2:6f:a7:11:a4:ed:cc:6a:
52:06:51:c9:77:ff:19:d9:02:8e:a9:0d:4b:00:16:
36:94:95:cf:78:80:05:27:55:c0:6f:26:8a:35:79:
b0:0d:cd:5d:bb:22:26:d3:3b:92:30:78:93:9f:b2:
24:04:f9:30:c5:f1:d1:8d:75:bc:1a:f7:0c:0a:02:
b3:15:d2:f1:14:ed:74:9d:17:a4:33:2c:f9:ed:da:
11:64:d9:5f:04:2d:1f:89:2a:5a:88:2f:6d:7e:22:
cd:02:29:7f:0d:80:5e:24:d6:85:bc:d0:0e:29:bd:
50:2b:ec:73:10:8f:19:a8:da:c4:bf:d8:f7:29:10:
92:ab:32:72:f7:2e:b7:dd:ec:50:92:bb:62:b1:5f:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EE:9E:71:9B:65:22:F4:B8:BA:26:71:A5:33:3B:61:4D:3C:BF:0E
X509v3 Authority Key Identifier:
keyid:60:C6:FD:62:49:EA:87:A5:38:43:36:34:46:A0:04:3D:55:A2:FD:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/1/60C6FD6249EA87A53843363446A0043D55A2FD27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/57c17bd2-6e1f-4d80-b76e-8c7ae850878e/c09ad5c4404490e24ad0ec400d6fd4ed69296e55cb53f6684f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/1/323632303a31303a363030303a3a2f34382d3438203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2620:10:6000::/48
Signature Algorithm: sha256WithRSAEncryption
37:c0:58:00:40:fe:ec:91:c6:ca:54:02:d5:c2:8a:58:d0:70:
76:61:69:1c:b8:8f:54:3f:04:2d:da:08:5e:8f:aa:b3:49:1a:
fb:7b:f1:c3:40:30:bd:60:2b:13:3a:15:2c:59:58:bd:df:e6:
e2:1c:4b:78:c7:64:fb:90:70:f7:0f:11:15:a3:b8:31:4d:11:
45:e4:2b:62:7d:1f:6c:c4:0b:5c:3b:03:ce:1f:ae:a7:08:d7:
24:fe:c2:97:b7:6d:1a:aa:dc:3f:39:33:dd:6f:de:d1:ed:15:
62:1a:2a:74:f6:06:c3:41:76:45:d0:52:19:08:b0:69:f0:2b:
f1:60:3a:27:3f:84:cd:e7:49:71:0f:8f:a6:d8:11:ab:31:0a:
18:ae:27:cd:60:76:89:c7:51:b8:80:09:30:28:5d:5d:52:84:
02:7d:6b:47:02:0c:fb:4b:9a:77:be:54:54:83:3b:2a:77:5c:
5b:32:0f:a9:c0:53:fd:c1:12:36:99:0b:17:cf:18:ef:01:7c:
6e:6d:88:3b:38:57:26:52:25:c8:d4:b0:90:c8:ca:10:77:04:
a9:8c:e7:bf:60:f1:ac:d8:17:b9:c4:c3:d6:43:15:ca:e4:b5:
62:7f:9e:85:99:62:a0:d9:71:d2:97:78:39:78:b3:1b:b8:59:
04:66:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:46 2024 by rpki-client on console-fra.rpki-client.org