Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3a2f34302d3430203d3e20323032343030.roa
File: 323630323a666161383a3a2f34302d3430203d3e20323032343030.roa (raw, json)
Hash identifier: pH1s4eo0ZYlzghU7dl5aCVBDjTUS5zwChnVDh+w6+DE=
Subject key identifier: FD:B9:D5:E8:1F:A1:59:05:19:D0:B6:0D:D7:3E:46:55:BB:C4:86:05
Certificate issuer: /CN=2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0
Certificate serial: 096B5575750A4F483EEFE61E01B94499BAE5E87E
Authority key identifier: E6:93:D1:C7:7F:F6:45:B5:C9:57:59:A0:D6:CE:A4:88:2D:05:9D:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3a2f34302d3430203d3e20323032343030.roa
Signing time: Sat 08 Apr 2023 09:20:15 +0000
ROA not before: Sat 08 Apr 2023 09:15:15 +0000
ROA not after: Sat 06 Apr 2024 09:20:15 +0000
asID: 202400
IP address blocks: 2602:faa8::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:6b:55:75:75:0a:4f:48:3e:ef:e6:1e:01:b9:44:99:ba:e5:e8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0
Validity
Not Before: Apr 8 09:15:15 2023 GMT
Not After : Apr 6 09:20:15 2024 GMT
Subject: CN=FDB9D5E81FA1590519D0B60DD73E4655BBC48605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:fc:96:53:32:90:f0:f2:6f:ad:5c:1b:6e:
62:f8:81:eb:49:dc:94:47:05:f3:02:d3:de:b2:57:
77:e3:23:fd:46:ff:57:da:62:95:17:a7:ab:d4:44:
3f:a9:66:5b:49:85:24:30:a0:9f:4d:66:b7:59:5e:
75:14:fb:81:6c:19:56:8e:83:a1:f5:73:7e:ba:87:
76:1c:28:31:31:91:bc:2f:46:db:43:d5:df:58:22:
4c:06:bb:6a:cc:59:12:60:65:ce:dd:41:93:8e:9b:
2d:75:a2:68:79:c1:39:4d:3b:58:69:d3:b2:29:45:
33:67:e3:e7:9d:35:1b:76:e8:92:86:4a:a1:cf:15:
73:27:dc:c3:1d:12:ed:24:39:0e:ab:3c:f8:4f:e9:
01:89:86:dd:be:80:9a:2e:71:8b:c4:a7:6f:be:8e:
ab:6a:9a:bb:54:de:ea:89:71:9f:ae:96:34:74:8f:
ae:1f:95:fb:fb:94:b9:30:e3:3c:2e:af:9d:07:08:
b8:68:4c:ea:fa:c0:cd:be:97:ad:bd:39:a8:af:4f:
55:46:bd:c2:fc:c3:67:31:43:75:95:10:50:84:69:
3b:c2:cd:ba:10:5d:07:f2:6e:3d:a1:73:24:bb:e0:
92:11:7d:63:30:03:8b:bd:b0:b8:aa:c0:1e:38:15:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B9:D5:E8:1F:A1:59:05:19:D0:B6:0D:D7:3E:46:55:BB:C4:86:05
X509v3 Authority Key Identifier:
keyid:E6:93:D1:C7:7F:F6:45:B5:C9:57:59:A0:D6:CE:A4:88:2D:05:9D:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/E693D1C77FF645B5C95759A0D6CEA4882D059D34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3a2f34302d3430203d3e20323032343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:faa8::/40
Signature Algorithm: sha256WithRSAEncryption
1a:79:91:71:c3:0d:4f:49:1d:90:62:2c:92:a1:61:e5:64:f1:
50:a0:c9:b4:6d:50:58:67:87:3c:2d:a0:07:05:13:35:08:7a:
e5:bc:b1:3d:14:7d:bd:f0:7c:c1:56:c4:9c:1a:d7:8e:5e:bd:
53:9f:f0:c6:d9:db:99:6b:c7:a4:79:c9:4b:b7:8e:0f:49:8e:
84:0a:7c:84:6d:3c:a2:81:63:06:b1:ab:38:50:ae:4c:85:28:
45:8e:54:24:19:ea:99:c8:7e:60:da:32:f2:4a:6c:8e:ca:be:
fc:37:b2:c9:2b:33:a6:a6:ca:6e:1c:0c:3b:df:0a:f9:b6:4f:
d8:e2:44:4c:22:7f:36:a8:c6:a5:5e:ff:18:7c:b1:51:1f:b7:
ed:36:ae:90:49:b8:79:6a:ce:4c:22:24:0c:36:f2:4c:bd:68:
d2:22:68:43:9f:77:7f:92:27:6f:28:d9:9e:34:b9:c7:e1:23:
87:3f:ab:10:7b:fa:f5:e3:22:77:ce:07:34:fe:25:71:0b:2a:
41:6b:fb:ee:de:4e:f1:41:19:67:18:b3:8a:06:9c:16:2c:74:
30:d8:74:36:7d:26:c7:13:ef:fc:77:25:17:f4:f0:29:6a:b1:
ab:c6:7f:5e:39:63:0e:f1:27:66:1e:05:40:65:e8:74:eb:47:
36:c7:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:24:25 2025 by rpki-client