Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa
File: 323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa (raw, json)
Hash identifier: RUUCD3HSA9Uzxskxxfyxn2dEEI/DSTQyzXP7/k1V6Sk=
Subject key identifier: F6:65:0A:E4:BD:88:AB:76:FB:70:D8:CE:EC:1F:9F:46:00:4B:CC:4B
Certificate issuer: /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial: 024336870CF3198015FBA5896DB2D91837CEF69A
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa
Signing time: Thu 24 Oct 2024 21:03:26 +0000
ROA not before: Thu 24 Oct 2024 20:58:26 +0000
ROA not after: Thu 23 Oct 2025 21:03:26 +0000
asID: 54148
IP address blocks: 2602:fa43:80::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:43:36:87:0c:f3:19:80:15:fb:a5:89:6d:b2:d9:18:37:ce:f6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Validity
Not Before: Oct 24 20:58:26 2024 GMT
Not After : Oct 23 21:03:26 2025 GMT
Subject: CN=F6650AE4BD88AB76FB70D8CEEC1F9F46004BCC4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:59:f1:42:7d:a7:7f:26:54:7c:21:b3:8f:
72:16:1f:7c:cc:91:95:b3:3b:67:8b:75:45:af:aa:
28:95:62:ec:97:4f:24:45:8b:59:ce:12:3b:18:44:
e0:b1:f5:36:be:68:e1:ae:95:5e:69:67:de:a4:91:
11:46:3f:18:b6:f1:f9:90:f1:d6:1e:0c:11:63:d0:
71:ff:4d:43:6d:b9:a6:91:2a:87:fa:cc:f2:ab:9b:
a5:1d:ab:e2:25:0f:6f:ed:7d:82:28:44:14:7b:b8:
60:da:88:b7:57:a7:64:e2:7e:ce:bf:8f:50:ad:f6:
cc:e8:bb:3e:21:a2:e3:c5:7e:6f:e8:52:67:f5:6c:
98:c6:57:91:26:40:b9:38:59:03:63:15:ba:2f:de:
b9:b7:d2:2a:89:3e:5c:b4:1e:d4:45:dc:02:00:52:
c1:06:37:fd:1b:2a:f2:d1:fb:9e:c3:49:e0:68:8d:
83:ed:85:58:cf:fd:0f:6c:70:82:63:e3:bf:7f:14:
74:f9:ce:d4:f3:fb:64:9e:35:f6:0a:bd:89:ae:bd:
98:6e:92:f6:a7:51:88:45:79:fa:98:e4:7f:58:0c:
b7:86:e3:83:50:6e:3a:67:66:3d:06:dd:e0:a4:d5:
60:cf:69:1c:5e:7b:e1:db:2c:b6:9c:91:2c:12:c0:
0f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:65:0A:E4:BD:88:AB:76:FB:70:D8:CE:EC:1F:9F:46:00:4B:CC:4B
X509v3 Authority Key Identifier:
keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa43:80::/44
Signature Algorithm: sha256WithRSAEncryption
96:dc:11:f8:d5:e9:82:ac:9f:5d:dc:bb:9e:9c:02:ea:c1:14:
c8:43:a6:e4:8c:cd:03:dc:b8:dd:de:c9:25:6e:86:78:4f:1e:
3e:03:08:92:80:55:8a:a8:58:0b:3f:68:58:00:b8:e2:20:d5:
ea:aa:ec:52:20:7f:77:62:be:0c:59:31:a1:3e:8f:3c:85:25:
c0:c8:41:c9:ab:c5:15:79:9e:27:f0:5a:e5:e8:f8:b6:ca:20:
ce:90:be:2e:04:a0:c7:10:67:50:a1:6c:6f:5a:ad:00:ac:19:
e1:74:d6:f6:f9:c6:dd:e6:08:b2:23:07:9a:f0:d1:50:ab:22:
74:34:77:0f:ba:5c:c5:6c:3c:fd:e7:38:38:ab:f9:ec:c6:06:
f1:9c:c2:01:2f:47:51:b4:f0:40:1c:33:ac:ab:56:ea:87:d3:
58:65:8c:3a:5a:ca:7a:83:27:f9:af:98:6f:6e:c1:7b:c6:56:
fb:eb:46:24:ed:2a:16:45:df:b3:80:de:03:6c:b1:c6:60:03:
a5:e3:ce:70:c9:ae:48:7d:d2:98:33:d4:ab:0f:d6:9d:29:19:
48:e0:1c:b3:d5:85:10:4a:e4:05:99:06:be:61:30:04:8c:31:
0b:64:41:f0:c3:7b:96:52:0c:af:7f:23:da:de:30:c7:4d:90:
eb:a6:cb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:18:16 2025 by rpki-client