Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS60391.roa
File: AS60391.roa (raw, json)
Hash identifier: 2c2NlvJPOwL4iv/sWdgSaOATqcBJisrSShhhR8TLaTU=
Subject key identifier: 4C:71:88:80:C7:B0:15:E3:9C:E2:E8:18:8E:76:65:AC:A7:A6:F3:4A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 46941FBA95D8DFEFB9485BD9AF3F6536C3D10F15
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS60391.roa
Signing time: Thu 16 Jan 2025 14:40:16 +0000
ROA not before: Thu 16 Jan 2025 14:35:16 +0000
ROA not after: Thu 15 Jan 2026 14:40:16 +0000
asID: 60391
IP address blocks: 2a06:a005:da0::/44 maxlen: 48
2a06:a005:2300::/44 maxlen: 48
2a06:a005:25d0::/44 maxlen: 48
2a06:a005:2f30::/44 maxlen: 48
2a06:a005:2f40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:94:1f:ba:95:d8:df:ef:b9:48:5b:d9:af:3f:65:36:c3:d1:0f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 16 14:35:16 2025 GMT
Not After : Jan 15 14:40:16 2026 GMT
Subject: CN=4C718880C7B015E39CE2E8188E7665ACA7A6F34A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:f3:19:db:5a:fd:0f:c2:63:da:e5:e1:90:
78:b3:0a:29:2e:3e:c2:87:9e:2b:c8:97:58:4c:71:
c9:18:bc:80:87:3d:e4:02:e1:8d:18:9d:3d:2a:89:
17:8d:f5:91:ce:36:7f:b3:bf:3f:e4:8b:15:64:0e:
91:fe:6d:f9:01:07:15:41:7d:30:58:e7:ec:8a:b7:
5d:91:ba:20:07:6a:39:2f:2d:9c:50:70:39:2f:6d:
c7:3b:36:b1:d9:1e:00:c6:54:18:b1:71:4e:3b:8a:
d5:8e:e9:fb:26:8c:5a:5a:d9:c8:84:3b:b0:bd:ee:
2e:80:37:cf:df:f1:5d:7e:98:a6:70:96:80:54:a0:
34:12:26:94:37:13:22:59:26:26:41:b9:a1:90:97:
84:a2:62:10:6f:fe:f0:dc:37:5c:ac:d9:c7:59:18:
da:46:5d:46:cc:96:33:ff:33:91:e2:37:88:ae:f4:
94:85:1d:82:3b:a7:39:03:dd:60:79:4e:54:c0:eb:
7f:6c:32:fd:d6:92:9d:42:05:4a:ca:61:49:7e:34:
6f:ed:17:21:3f:85:5c:35:9a:89:eb:aa:97:05:16:
e5:70:49:62:7e:2f:87:b4:d9:42:4d:1b:d6:64:3b:
00:55:47:71:3e:6d:17:47:4b:57:6b:13:47:d4:a0:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:71:88:80:C7:B0:15:E3:9C:E2:E8:18:8E:76:65:AC:A7:A6:F3:4A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS60391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:da0::/44
2a06:a005:2300::/44
2a06:a005:25d0::/44
2a06:a005:2f30::-2a06:a005:2f4f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:64:90:73:25:03:16:b2:d6:88:80:83:25:96:28:f6:f3:01:
f0:ca:0d:05:59:e1:28:45:7d:91:73:52:46:4b:14:22:ca:51:
f1:29:f0:3a:d8:c1:a7:69:3d:cd:d5:50:02:6a:76:c6:a4:07:
76:6c:5a:2b:0d:31:59:ae:85:73:15:68:e6:4e:94:88:29:4d:
91:20:b2:ea:60:a8:aa:05:00:60:0f:62:f8:14:65:c4:a1:cf:
c7:25:52:bd:48:ef:c1:7b:f7:df:4f:84:2e:16:ba:21:e8:ee:
c9:33:e0:b1:ac:60:f4:6a:1d:0f:10:5a:33:ca:6e:0a:74:85:
7c:e4:48:ee:b0:e2:f9:3c:15:43:bd:6d:75:39:e4:8d:37:ad:
b4:b9:0a:ca:80:94:b8:3a:0a:e7:ab:2e:79:6e:02:99:ad:67:
fa:3f:55:11:c4:8e:bb:60:61:80:d5:da:6c:07:b2:90:05:4c:
9d:5e:a8:aa:c0:8d:fd:a2:1e:ef:02:ff:bb:a6:3f:6e:5a:27:
08:11:f1:d4:d8:56:db:5a:ef:76:78:ba:c8:00:8c:70:40:43:
0b:52:bc:60:04:f5:73:38:bd:42:f5:99:89:e5:df:16:2e:1f:
64:82:a9:2c:17:d7:11:da:94:3c:cc:d0:7f:81:e6:f7:a4:6d:
7b:f9:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:05:11 2025 by rpki-client