Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f33362d3336203d3e203131333538.roa
File: 323630323a663937653a3a2f33362d3336203d3e203131333538.roa (raw, json)
Hash identifier: 89U5Lu5iuRwucNqGvtg79fohr1kgjn5vFqjOiuRkROc=
Subject key identifier: 58:5B:33:B7:ED:04:22:DB:41:C3:1D:5A:41:A8:BE:48:FE:FB:2B:53
Certificate issuer: /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial: 46CC37CF29FD3DC2D2134C92AAD5DB8B5D9728A6
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f33362d3336203d3e203131333538.roa
Signing time: Sun 17 Nov 2024 00:58:25 +0000
ROA not before: Sun 17 Nov 2024 00:53:25 +0000
ROA not after: Sun 16 Nov 2025 00:58:25 +0000
asID: 11358
IP address blocks: 2602:f97e::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:cc:37:cf:29:fd:3d:c2:d2:13:4c:92:aa:d5:db:8b:5d:97:28:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Validity
Not Before: Nov 17 00:53:25 2024 GMT
Not After : Nov 16 00:58:25 2025 GMT
Subject: CN=585B33B7ED0422DB41C31D5A41A8BE48FEFB2B53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:74:d6:11:6f:8c:0c:64:eb:72:a3:b2:63:6a:
d8:57:65:9b:ca:ca:f6:10:67:d0:75:68:a2:a3:ed:
41:c0:8b:0f:42:54:e7:bb:a1:a5:a6:16:0d:e3:63:
0a:aa:2c:ec:a8:b2:01:14:88:ac:51:9c:28:05:db:
bb:6a:62:ac:9c:1f:e3:a5:2c:b8:df:65:9b:30:45:
a8:ae:29:d0:34:3c:ab:a5:8c:2a:5b:87:fa:11:8a:
d4:2f:9b:22:6c:7a:ae:e3:56:74:3c:f6:44:6d:01:
ef:fc:ed:9a:89:22:f6:db:fa:f5:ea:e4:ab:06:26:
eb:97:86:22:7d:59:c8:eb:00:bc:61:f3:4f:02:10:
f9:b6:ba:88:2b:bf:46:57:56:a3:2b:0a:12:70:e8:
c8:3d:e1:1d:ee:a4:f6:26:a2:8c:fc:78:f8:d1:0d:
c2:81:fe:02:d4:65:85:85:09:18:ef:43:d8:58:d5:
ef:ba:54:4a:13:46:f9:c4:30:76:8c:b3:67:51:33:
e9:c3:10:e5:4e:c4:8f:f8:44:3c:d4:49:84:58:28:
d0:a0:e2:bc:f8:01:3e:62:fc:7c:c4:c2:7e:79:48:
0b:ac:ab:0f:f2:79:f7:64:fb:fc:43:84:be:99:0c:
fe:7b:44:52:6f:72:fd:4f:e9:f2:85:13:f7:38:5f:
5b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5B:33:B7:ED:04:22:DB:41:C3:1D:5A:41:A8:BE:48:FE:FB:2B:53
X509v3 Authority Key Identifier:
keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f33362d3336203d3e203131333538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f97e::/36
Signature Algorithm: sha256WithRSAEncryption
57:5d:58:20:7b:78:cd:be:6a:15:43:ba:54:20:57:57:4a:7f:
15:61:a3:f1:48:c1:82:80:56:84:c4:58:fb:1d:3a:79:24:6e:
40:89:17:b3:44:4f:a1:4c:cc:65:49:81:e9:2f:85:ca:ef:cc:
95:58:22:cc:6f:23:b5:84:4e:96:3d:7f:5f:33:12:5d:2a:08:
ca:91:86:0d:af:b3:f3:05:03:cb:f1:42:1d:33:6b:18:43:52:
26:4f:91:60:2d:d7:2a:e7:9a:82:45:de:d4:1b:09:89:21:df:
a8:b8:77:1a:3c:dc:f6:fe:f8:65:c7:d0:7f:53:af:2d:f1:32:
80:27:01:95:5f:bf:9d:17:2b:d7:73:e4:d3:da:79:67:78:1f:
4d:92:f4:a0:be:8f:c4:99:3c:59:5d:fb:23:5d:6e:70:c8:c0:
27:a4:ce:81:0f:aa:d6:38:fa:4b:55:86:7f:44:33:33:07:57:
e4:be:90:58:8c:68:00:30:c7:c7:58:59:1b:f1:e7:15:6c:fd:
8b:1d:12:a2:55:5a:9b:04:0c:6f:4e:a9:3d:c5:79:f9:7d:62:
8b:fa:e6:cf:98:7d:62:1c:1d:d1:26:c6:90:bf:33:1e:4d:1f:
ed:25:81:58:6f:62:be:6c:9f:79:85:30:ce:27:9c:4b:ed:12:
78:24:15:42
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIURsw3zyn9PcLSE0ySqtXbi12XKKYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmEyMTY0N2FhYzNkYzIxMzNiZDM2MThhNDE3ZjVhNDc5
YTU3MjBmYzM0MGY4ZTljYzAwHhcNMjQxMTE3MDA1MzI1WhcNMjUxMTE2MDA1ODI1
WjAzMTEwLwYDVQQDEyg1ODVCMzNCN0VEMDQyMkRCNDFDMzFENUE0MUE4QkU0OEZF
RkIyQjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXTWEW+MDGTr
cqOyY2rYV2Wbysr2EGfQdWiio+1BwIsPQlTnu6GlphYN42MKqizsqLIBFIisUZwo
Bdu7amKsnB/jpSy432WbMEWorinQNDyrpYwqW4f6EYrUL5sibHqu41Z0PPZEbQHv
/O2aiSL22/r16uSrBibrl4YifVnI6wC8YfNPAhD5trqIK79GV1ajKwoScOjIPeEd
7qT2JqKM/Hj40Q3Cgf4C1GWFhQkY70PYWNXvulRKE0b5xDB2jLNnUTPpwxDlTsSP
+EQ81EmEWCjQoOK8+AE+Yvx8xMJ+eUgLrKsP8nn3ZPv8Q4S+mQz+e0RSb3L9T+ny
hRP3OF9bOQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFFhbM7ftBCLbQcMdWkGovkj+
+ytTMB8GA1UdIwQYMBaAFNMnxgjB6Fb2wHiXblBVWZRaI9rYMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGVhOThiYWUwMThlYzE4MGFjYzExMWEyLzAv
RDMyN0M2MDhDMUU4NTZGNkMwNzg5NzZFNTA1NTU5OTQ1QTIzREFEOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzJjZDg1ODk2LWJlY2EtNGNjOS04ZTA5LTkzNjdiMGVhOWVhNC9iYTIx
NjQ3YWFjM2RjMjEzM2JkMzYxOGE0MTdmNWE0NzlhNTcyMGZjMzQwZjhlOWNjMC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlYTk4YmFlMDE4ZWMx
ODBhY2MxMTFhMi8wLzMyMzYzMDMyM2E2NjM5Mzc2NTNhM2EyZjMzMzYyZDMzMzYy
MDNkM2UyMDMxMzEzMzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQmAvl+ADANBgkqhkiG9w0BAQsF
AAOCAQEAV11YIHt4zb5qFUO6VCBXV0p/FWGj8UjBgoBWhMRY+x06eSRuQIkXs0RP
oUzMZUmB6S+Fyu/MlVgizG8jtYROlj1/XzMSXSoIypGGDa+z8wUDy/FCHTNrGENS
Jk+RYC3XKueagkXe1BsJiSHfqLh3Gjzc9v74ZcfQf1OvLfEygCcBlV+/nRcr13Pk
09p5Z3gfTZL0oL6PxJk8WV37I11ucMjAJ6TOgQ+q1jj6S1WGf0QzMwdX5L6QWIxo
ADDHx1hZG/HnFWz9ix0SolVamwQMb06pPcV5+X1ii/rmz5h9Yhwd0SbGkL8zHk0f
7SWBWG9ivmyfeYUwziecS+0SeCQVQg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:59:26 2025 by rpki-client