Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a31303a3a2f34382d3438203d3e203131333538.roa
File: 323630323a663937653a31303a3a2f34382d3438203d3e203131333538.roa (raw, json)
Hash identifier: ehh381SZDE0JGouQWd01Vdi6eAQwTikTMfRhOq2TW5w=
Subject key identifier: 43:80:8D:88:25:EA:3E:C6:DA:CC:9C:0B:84:9B:AD:F1:8B:EC:E0:5D
Certificate issuer: /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial: 4B0F65659440F03047309E3233767D6A81A92B1A
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a31303a3a2f34382d3438203d3e203131333538.roa
Signing time: Sun 02 Mar 2025 11:20:16 +0000
ROA not before: Sun 02 Mar 2025 11:15:16 +0000
ROA not after: Sun 01 Mar 2026 11:20:16 +0000
asID: 11358
IP address blocks: 2602:f97e:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:0f:65:65:94:40:f0:30:47:30:9e:32:33:76:7d:6a:81:a9:2b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Validity
Not Before: Mar 2 11:15:16 2025 GMT
Not After : Mar 1 11:20:16 2026 GMT
Subject: CN=43808D8825EA3EC6DACC9C0B849BADF18BECE05D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:cf:5e:a9:3e:e3:28:b3:85:f6:97:32:36:
4d:e1:a8:67:d9:31:14:47:dc:68:e7:e4:45:0c:4e:
e3:55:57:24:e9:f6:76:bc:9e:e8:c8:ea:ee:62:78:
d7:b2:da:06:88:e6:16:63:d8:e7:68:df:e2:02:37:
1d:36:2a:be:51:18:18:45:d5:32:a8:f5:12:a6:32:
81:d2:c2:e1:ba:bc:5f:2e:ea:08:59:f0:44:4f:fd:
aa:29:58:f3:6c:59:4c:7d:d3:91:64:6d:60:95:df:
ff:3f:55:57:eb:03:2c:52:c4:f1:3f:a4:52:d4:29:
8d:e8:e3:4a:f2:9b:68:72:d8:16:a0:83:5f:3f:f7:
27:a8:be:d4:3a:e7:2a:d5:a6:7c:50:22:85:ed:64:
89:0e:f4:33:ea:f8:bb:dd:8b:ed:fb:be:80:37:a5:
21:ea:35:39:09:da:64:7f:5b:d4:41:b2:fe:e7:93:
8c:15:10:8a:12:24:98:2a:69:a9:9b:e8:83:43:14:
2a:6c:51:42:a6:9f:ef:2c:dd:16:42:66:5b:fd:d0:
bc:e3:3d:e7:2d:78:5d:23:a8:63:f3:af:3a:3c:88:
fc:e6:4c:2c:fb:f2:d8:1d:38:3b:d9:43:c8:1d:3e:
4d:b7:05:4a:2b:45:ff:37:71:07:35:b4:03:7f:92:
f7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:80:8D:88:25:EA:3E:C6:DA:CC:9C:0B:84:9B:AD:F1:8B:EC:E0:5D
X509v3 Authority Key Identifier:
keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a31303a3a2f34382d3438203d3e203131333538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f97e:10::/48
Signature Algorithm: sha256WithRSAEncryption
b8:2c:4c:ce:a6:a2:7f:cd:c7:c2:7a:0f:f0:2e:a6:ba:2a:ce:
10:83:ea:50:e5:3f:6c:9c:d8:13:28:0c:ad:d0:de:07:64:14:
2e:26:36:2b:70:22:7c:0c:b3:45:80:0c:ba:b6:7d:c6:26:b6:
8d:8f:a7:7f:24:45:da:ff:a8:e0:18:fc:f9:a5:a0:19:3b:6e:
d0:b9:82:7f:a6:2e:62:a2:32:41:eb:c5:1b:3a:ed:8e:f7:71:
14:aa:da:bd:39:ca:ab:07:40:22:a1:d6:05:2a:72:fb:ff:35:
a6:eb:be:73:a9:33:d0:b5:51:3a:2b:45:b0:ba:b4:a3:10:d7:
61:84:02:bf:87:c6:eb:35:38:64:b8:dc:b1:21:7f:00:54:a2:
f4:7c:ff:65:1e:98:96:85:f5:3d:ce:8f:ca:28:b4:3d:14:0b:
ca:ff:15:ac:33:22:9c:dd:ed:53:8b:24:f4:64:da:ec:f4:86:
99:d3:6a:cb:cd:db:51:74:df:49:1d:42:26:96:86:94:53:74:
e9:69:53:d9:ff:e5:c0:d2:d4:6a:e5:d1:65:ec:8a:d4:7f:f1:
1c:95:d8:e0:e3:a4:18:8c:b4:81:ee:c6:5b:48:23:97:e5:36:
18:c4:ad:3b:8d:49:4d:4b:3e:be:6b:ba:f8:c9:15:37:ae:a4:
16:11:90:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:08:50 2025 by rpki-client