Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3530303a3a2f34302d3438203d3e20323133313234.roa
File: 323630323a663962613a3530303a3a2f34302d3438203d3e20323133313234.roa (raw, json)
Hash identifier: biY0oy68Fko4G2/EWe1yMuLrtdAVbQ0OOIhaa3i/NAg=
Subject key identifier: B2:3F:97:14:C4:52:80:C0:7D:9A:BC:A2:B5:58:62:40:7B:0C:A8:1D
Certificate issuer: /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial: 25B346F0EA6BC5AAB12968614FF3FEDBE3659847
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3530303a3a2f34302d3438203d3e20323133313234.roa
Signing time: Mon 24 Mar 2025 21:40:38 +0000
ROA not before: Mon 24 Mar 2025 21:35:38 +0000
ROA not after: Mon 23 Mar 2026 21:40:38 +0000
asID: 213124
IP address blocks: 2602:f9ba:500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b3:46:f0:ea:6b:c5:aa:b1:29:68:61:4f:f3:fe:db:e3:65:98:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Validity
Not Before: Mar 24 21:35:38 2025 GMT
Not After : Mar 23 21:40:38 2026 GMT
Subject: CN=B23F9714C45280C07D9ABCA2B55862407B0CA81D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c6:07:c5:b4:40:e6:df:d0:90:57:fa:14:b5:
91:84:65:42:50:8b:68:2e:9d:39:6b:ab:a3:1a:9a:
ce:8a:50:7b:83:e3:0b:62:eb:5b:9b:5c:63:01:5a:
39:df:b9:bc:20:a9:60:c2:df:03:6f:39:e9:08:07:
e0:bc:57:14:45:32:4e:9b:e4:66:bf:17:20:e9:55:
1c:1c:18:34:72:be:dc:a1:1c:1c:20:cf:f5:86:5b:
7e:a5:09:22:c7:43:8e:2a:43:c0:17:43:a6:d2:21:
8e:f2:5a:a5:5d:c7:61:0b:d1:9d:95:9c:aa:ad:73:
b5:cc:4f:40:57:5d:68:19:ff:1a:09:59:58:5f:f4:
8d:30:07:84:8d:43:92:17:c8:58:03:c6:4c:23:21:
c9:26:88:c4:90:4d:c8:b9:d9:7d:34:38:b1:be:d3:
1c:bd:75:eb:8b:7e:36:d1:da:ea:8d:7c:e2:58:40:
11:1b:6b:e9:56:af:5a:11:d3:3f:ad:76:2f:58:88:
a4:f5:7a:09:07:f0:68:8d:eb:7f:2e:ec:20:09:81:
97:04:e9:28:3d:08:b3:45:8f:23:8d:fb:69:d6:96:
51:75:fc:2e:bd:76:57:72:66:e8:0b:96:d1:5d:b3:
e6:d4:e3:b8:82:cc:24:b8:d4:71:9b:cf:a9:eb:0f:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3F:97:14:C4:52:80:C0:7D:9A:BC:A2:B5:58:62:40:7B:0C:A8:1D
X509v3 Authority Key Identifier:
keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3530303a3a2f34302d3438203d3e20323133313234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f9ba:500::/40
Signature Algorithm: sha256WithRSAEncryption
41:96:65:1f:f3:e9:50:97:ae:48:67:ab:fe:ba:77:b6:f3:d0:
b4:dd:92:05:b1:d0:d2:91:ef:8e:6d:59:00:02:dc:16:75:71:
f1:04:a6:1b:08:a6:97:8a:b9:97:5b:24:7a:33:4e:d1:d7:17:
b3:c4:1a:1f:50:f6:62:a3:f4:f5:22:0a:46:5e:4d:13:15:ed:
01:f4:ef:71:d2:39:0d:62:ea:4e:3f:f2:0a:8d:a8:d3:df:26:
46:c5:3d:83:48:43:ef:ae:43:f2:2e:d8:c9:47:ef:70:54:dd:
c2:c7:2c:1b:b6:65:2e:ed:79:f7:8e:ec:14:0f:d5:4a:5b:92:
4d:1d:76:11:7e:7b:c8:e2:3c:d9:cf:3e:8e:97:f6:96:56:6a:
8a:b9:66:5a:d6:c7:f2:ed:d9:c4:7d:3f:7a:4f:8b:dc:ff:5c:
f5:5c:2c:76:3f:33:c5:64:68:52:61:f8:a5:00:4e:82:62:bb:
29:ff:72:37:1d:92:d0:39:d8:30:27:05:ea:86:fc:5c:28:09:
5e:6d:2d:22:ce:cc:d0:39:d4:de:36:6e:de:30:40:fe:b6:b2:
84:0f:2a:0f:0b:d0:e0:d7:e4:5a:be:1d:c2:93:73:89:dd:71:
0d:85:7a:21:c1:4f:8e:85:dc:c1:b7:04:eb:ae:71:3f:6e:fb:
52:f1:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 05:55:29 2025 by rpki-client