Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa
File: 323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier: TW1tbF/kAM9Ux1fEmj3Sy7WnDIjFCR6Q9zBZmbSnJ+c=
Subject key identifier: 40:61:B4:9D:63:F6:7A:F5:85:14:ED:45:0C:E1:74:02:6A:38:8B:A2
Certificate issuer: /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial: 308E8B6F59CC25CF3A1384C621920C3701EA5A0A
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa
Signing time: Thu 24 Oct 2024 21:03:27 +0000
ROA not before: Thu 24 Oct 2024 20:58:27 +0000
ROA not after: Thu 23 Oct 2025 21:03:27 +0000
asID: 54148
IP address blocks: 2602:fa43:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:8e:8b:6f:59:cc:25:cf:3a:13:84:c6:21:92:0c:37:01:ea:5a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Validity
Not Before: Oct 24 20:58:27 2024 GMT
Not After : Oct 23 21:03:27 2025 GMT
Subject: CN=4061B49D63F67AF58514ED450CE174026A388BA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:df:3a:02:34:72:78:01:a7:55:4f:e5:61:
ff:aa:b3:86:bd:35:31:56:e9:1a:16:d4:9c:88:96:
eb:c4:01:b6:c0:74:e8:5d:12:f4:cc:0a:d9:20:d3:
8b:f0:e2:93:8d:73:cc:5b:00:59:56:b0:66:4f:bb:
f0:de:47:e8:73:82:a7:8e:f7:ae:a0:83:bb:57:e8:
59:17:7d:f2:68:9d:db:35:d2:b4:0b:f7:14:db:3c:
84:43:f6:13:b1:45:b6:05:46:9a:87:2a:bf:8f:d0:
e8:b0:d2:8e:8f:3e:52:8b:a8:f7:b0:c7:9e:b0:6a:
79:33:ff:db:dd:91:74:d7:03:b8:84:6b:35:17:81:
44:e7:9c:8c:5e:66:8f:05:08:7a:a4:30:20:09:9d:
25:90:c7:6e:16:88:72:c4:a2:24:3a:74:90:fd:93:
b2:8f:06:cd:29:c7:1a:b2:a8:d3:c8:6f:da:04:e7:
76:f6:98:32:ff:99:ed:a4:8c:cc:6b:b6:28:56:b4:
39:77:aa:ae:a0:6a:4e:bc:e7:84:8f:92:c6:40:af:
95:c0:fc:2f:b3:c9:11:26:7f:34:8a:20:26:35:89:
34:ae:ec:39:d6:0c:1c:ff:02:fd:69:6c:85:39:64:
15:d6:08:5c:30:88:57:c2:3f:0c:81:e9:a3:f1:e9:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:61:B4:9D:63:F6:7A:F5:85:14:ED:45:0C:E1:74:02:6A:38:8B:A2
X509v3 Authority Key Identifier:
keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa43:1::/48
Signature Algorithm: sha256WithRSAEncryption
89:5a:e9:38:39:71:22:87:a6:9b:d1:ae:1c:24:26:da:42:e8:
d5:d9:d1:b8:dd:9c:ba:3d:0e:5a:20:ed:57:5c:f4:64:82:78:
32:55:1b:dc:96:4e:93:15:80:40:1b:46:33:19:c6:fe:01:7b:
04:9b:ba:1e:f9:14:0e:91:94:a3:ce:98:54:cc:d8:38:80:a1:
4e:05:d7:2f:ff:9f:60:5f:af:e7:a1:20:96:63:0e:39:3f:0f:
e4:1f:ed:f1:d1:3a:15:65:1a:1b:3f:37:6b:e2:36:63:0e:7b:
9c:65:3a:63:ab:6a:ed:3a:2d:08:d9:42:74:76:7c:8b:97:27:
cd:82:78:65:8e:a6:9b:48:33:df:c6:f1:77:e5:67:da:9b:17:
2b:c0:e3:fc:ca:40:76:fd:70:80:c7:58:d5:d7:1c:ce:db:bc:
6b:fb:dd:d5:b6:3c:88:b0:c7:16:bc:90:4e:3e:85:0d:49:dc:
0f:27:03:da:59:a6:8c:84:d9:e1:18:5d:a4:1f:b4:89:41:fa:
63:88:3c:0c:00:e1:fc:c6:60:ec:bb:3e:d9:75:fa:40:fb:3a:
cf:9e:f9:b6:79:19:15:83:2f:45:74:1f:83:96:93:4c:be:6e:
3f:35:f9:7c:3a:a7:4e:78:94:aa:5c:9a:7c:27:21:3c:15:53:
91:5f:b5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:11:06 2025 by rpki-client