Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa
File: 323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa (raw, json)
Hash identifier: L25nR0UvG/UldlBs2qd2H9CU3atxfpiEtcoKFt1JRRs=
Subject key identifier: DB:D5:73:7E:A1:6D:58:83:92:85:91:B2:EC:4E:DA:77:19:AC:FD:43
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 0AE0C90E065A18CD6E742E9808D5832C70D6AC96
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa
Signing time: Sat 07 Dec 2024 12:13:27 +0000
ROA not before: Sat 07 Dec 2024 12:08:27 +0000
ROA not after: Sat 06 Dec 2025 12:13:27 +0000
asID: 399164
IP address blocks: 2403:2500:8000:14::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e0:c9:0e:06:5a:18:cd:6e:74:2e:98:08:d5:83:2c:70:d6:ac:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Validity
Not Before: Dec 7 12:08:27 2024 GMT
Not After : Dec 6 12:13:27 2025 GMT
Subject: CN=DBD5737EA16D5883928591B2EC4EDA7719ACFD43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:89:54:24:52:7f:44:91:e2:d6:f0:d7:1d:
11:12:74:1d:3c:4d:d8:9e:85:1e:4a:70:9f:a9:44:
80:99:e4:2c:a8:57:d6:71:45:f3:88:db:ce:1d:9e:
d7:57:63:f1:a7:27:f8:d6:48:50:54:d4:3e:4d:aa:
58:c3:83:b1:d4:58:1d:c1:b5:3a:f7:11:a3:7c:19:
f7:78:76:34:b9:60:c9:73:45:ed:7a:3c:c2:a4:3b:
fc:c1:9a:b5:db:71:48:ad:27:12:23:84:4d:fc:b1:
85:b2:96:66:1f:80:4c:44:70:b0:e5:8b:7f:b4:67:
99:ea:88:3e:64:61:42:09:e4:7b:49:4a:c7:d7:f0:
66:1c:9c:28:6b:e6:b6:eb:79:9a:71:d7:81:1a:66:
79:0f:d8:ae:6e:15:4f:f7:48:57:a5:7f:67:fe:8f:
14:36:48:7b:06:32:4e:f9:7c:28:55:62:20:f3:85:
6f:f2:6c:90:2a:45:23:b8:ed:a9:52:d9:32:68:57:
0c:dc:96:8b:0b:94:95:a0:bd:6a:32:65:8d:78:10:
f9:d6:00:66:d9:d3:ec:0e:f9:05:9e:54:e5:67:e0:
48:ff:b2:44:e9:92:ea:71:77:31:aa:2f:e5:1a:db:
cf:b9:47:98:b4:6c:0b:01:0d:cf:9e:d3:cc:c6:3a:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:73:7E:A1:6D:58:83:92:85:91:B2:EC:4E:DA:77:19:AC:FD:43
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2500:8000:14::/64
Signature Algorithm: sha256WithRSAEncryption
af:c1:22:51:a0:e3:0f:31:f1:4c:80:e5:7d:99:8f:9a:9e:cd:
7a:26:43:20:5b:8e:24:ae:b9:93:ff:80:f5:f4:70:43:39:0f:
c2:c5:c1:67:5d:1b:84:8d:46:35:9b:b9:ee:d6:ec:da:bd:ac:
db:93:08:7b:d9:c8:33:99:0e:84:d6:78:98:d7:c0:79:ed:8f:
66:5c:df:52:be:15:cf:f6:93:8f:61:c5:a5:40:d2:5c:1a:4d:
07:7e:e2:c2:ac:89:a6:12:88:b4:e7:d4:7f:d7:bc:e4:7d:4e:
fe:c8:23:54:c5:33:ab:e9:43:70:fe:4f:88:61:d5:5f:f9:09:
46:43:29:07:cc:e8:e9:f3:1b:8c:6b:c7:0c:04:51:92:67:c8:
1f:1c:d3:a8:3f:fc:6c:8c:72:19:23:19:0b:f1:00:06:34:a9:
5d:36:3c:8c:12:0f:f3:74:0d:46:db:22:2a:85:fb:06:9a:43:
72:65:d4:9e:be:a5:62:80:32:45:d8:92:d6:8a:5d:88:96:d3:
45:96:4b:c2:1e:2f:0d:58:61:2e:f2:14:03:c5:b5:2d:11:37:
6e:89:55:16:e4:1a:be:b1:39:ce:1a:20:a1:3e:21:8f:c1:8d:
9c:68:2d:ab:5e:a1:62:21:9c:3b:b7:a7:63:50:60:b7:66:fe:
e4:bb:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:22 2025 by rpki-client