Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a32303a3a2f34342d3434203d3e20343031353037.roa
File: 323630323a663738613a32303a3a2f34342d3434203d3e20343031353037.roa (raw, json)
Hash identifier: QF8ZQc3Ek0/j34EgIPd9WqqITsViQ+T2/XvW7BDMQDE=
Subject key identifier: 03:B0:BA:99:66:0E:05:7A:17:F7:D8:B5:6A:62:06:13:53:6B:5F:FC
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 6161F44F801F72D02C4F28238283184FFEAA26BD
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a32303a3a2f34342d3434203d3e20343031353037.roa
Signing time: Thu 19 Dec 2024 14:16:47 +0000
ROA not before: Thu 19 Dec 2024 14:11:47 +0000
ROA not after: Thu 18 Dec 2025 14:16:47 +0000
asID: 401507
IP address blocks: 2602:f78a:20::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:61:f4:4f:80:1f:72:d0:2c:4f:28:23:82:83:18:4f:fe:aa:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:11:47 2024 GMT
Not After : Dec 18 14:16:47 2025 GMT
Subject: CN=03B0BA99660E057A17F7D8B56A620613536B5FFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:8e:76:fb:f4:2e:f8:51:ba:ea:71:5e:52:
f8:ca:53:54:29:d8:07:90:61:73:5a:2a:e2:ba:81:
87:1a:d5:22:1b:e1:fa:de:e1:7c:f2:38:9a:43:c4:
45:a8:75:34:ef:30:c6:38:88:21:9f:cd:80:ef:31:
f3:ee:4b:85:c0:53:32:e1:b5:2c:a9:cf:dd:91:6d:
38:b2:0a:ea:f9:1d:4e:fa:dc:1f:a6:ea:6e:2e:87:
7c:af:3b:a8:ca:45:78:1a:3b:b5:69:5f:a9:a9:20:
23:64:6b:5b:d0:1d:be:1c:89:d2:b9:86:e4:02:8f:
f3:c9:5e:24:f8:df:7f:bc:05:75:13:d6:4e:a1:9b:
c5:20:f1:a3:e6:37:09:12:d4:88:a4:c8:20:b0:fa:
61:97:25:8a:e7:f0:50:2d:76:f6:c4:16:54:3c:ba:
26:57:48:c0:82:e0:d1:c4:77:2c:6e:20:2f:60:7a:
c5:3f:a1:86:3d:0c:d6:31:83:65:33:3e:89:03:28:
91:c3:c1:87:45:79:e4:43:40:fb:2f:94:1d:d1:1b:
89:a8:40:dd:90:df:f5:70:cb:0b:29:11:3f:ff:80:
1f:98:3d:9c:72:fb:d8:94:a8:59:7d:99:51:91:02:
79:66:e3:94:b7:43:70:b3:34:51:9e:5b:6e:13:a9:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B0:BA:99:66:0E:05:7A:17:F7:D8:B5:6A:62:06:13:53:6B:5F:FC
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a32303a3a2f34342d3434203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:20::/44
Signature Algorithm: sha256WithRSAEncryption
3c:77:15:43:38:20:a5:b0:d5:86:fe:5f:63:66:9c:82:42:f2:
b0:fb:c1:3a:c7:71:a0:fd:fd:f1:1b:ea:f1:45:6e:fd:88:b1:
79:48:19:c5:d6:d5:50:3b:28:03:13:cb:02:6e:73:1e:f1:5a:
b0:e3:b2:b4:bd:97:17:d2:75:a5:7a:5f:b2:5a:b3:f2:bc:84:
22:2a:ec:1a:5e:e9:64:9b:b9:a0:8d:96:f3:05:23:c7:fa:47:
c2:26:c4:d1:d5:de:35:1c:40:e7:19:d6:ad:06:ce:aa:49:67:
80:95:d2:e2:f5:2c:da:eb:6d:96:5e:cb:ef:30:2e:4c:b5:29:
10:da:3d:8e:83:b8:fe:ec:c3:7e:83:a5:4c:cb:89:72:c6:cd:
d7:89:31:28:34:f2:35:44:60:73:da:3b:1e:5e:dd:07:3b:e6:
96:b1:cf:ef:6f:60:cb:ba:d5:09:8b:ab:38:6e:00:9b:2d:5f:
1d:85:9e:ab:3f:97:4d:f2:5d:e0:fb:27:b2:93:80:a4:e1:18:
c9:3e:3a:e6:4d:28:4b:8c:67:9f:58:fe:3c:26:00:38:6c:b0:
f0:48:0a:52:95:b5:73:3e:1a:26:ea:e1:65:93:96:15:13:e1:
99:8c:61:9f:ac:c4:70:59:10:f9:0e:e8:e8:7d:f8:2a:99:9c:
06:42:f5:ae
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUYWH0T4AfctAsTygjgoMYT/6qJr0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA2YmUxNWUxOTk2MDVlNzU2MDI4MTM3MDkyMDM2Mjk4
YTc0NmJjZGZlMjQyMjdlNzIwHhcNMjQxMjE5MTQxMTQ3WhcNMjUxMjE4MTQxNjQ3
WjAzMTEwLwYDVQQDEygwM0IwQkE5OTY2MEUwNTdBMTdGN0Q4QjU2QTYyMDYxMzUz
NkI1RkZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XWOdvv0LvhR
uupxXlL4ylNUKdgHkGFzWiriuoGHGtUiG+H63uF88jiaQ8RFqHU07zDGOIghn82A
7zHz7kuFwFMy4bUsqc/dkW04sgrq+R1O+twfpupuLod8rzuoykV4Gju1aV+pqSAj
ZGtb0B2+HInSuYbkAo/zyV4k+N9/vAV1E9ZOoZvFIPGj5jcJEtSIpMggsPphlyWK
5/BQLXb2xBZUPLomV0jAguDRxHcsbiAvYHrFP6GGPQzWMYNlMz6JAyiRw8GHRXnk
Q0D7L5Qd0RuJqEDdkN/1cMsLKRE//4AfmD2ccvvYlKhZfZlRkQJ5ZuOUt0NwszRR
nltuE6lvXQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFAOwuplmDgV6F/fYtWpiBhNT
a1/8MB8GA1UdIwQYMBaAFBXgJDcag1uwDqu6+0T2jw+K6/j3MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEwZWE2Njg3LzAv
MTVFMDI0MzcxQTgzNUJCMDBFQUJCQUZCNDRGNjhGMEY4QUVCRjhGNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05YzNkLTM0OWRkMTkwMDBkMy81MDZi
ZTE1ZTE5OTYwNWU3NTYwMjgxMzcwOTIwMzYyOThhNzQ2YmNkZmUyNDIyN2U3Mi5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm
NDVhMGVhNjY4Ny8wLzMyMzYzMDMyM2E2NjM3Mzg2MTNhMzIzMDNhM2EyZjM0MzQy
ZDM0MzQyMDNkM2UyMDM0MzAzMTM1MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC94oAIDANBgkq
hkiG9w0BAQsFAAOCAQEAPHcVQzggpbDVhv5fY2acgkLysPvBOsdxoP398Rvq8UVu
/YixeUgZxdbVUDsoAxPLAm5zHvFasOOytL2XF9J1pXpfslqz8ryEIirsGl7pZJu5
oI2W8wUjx/pHwibE0dXeNRxA5xnWrQbOqklngJXS4vUs2uttll7L7zAuTLUpENo9
joO4/uzDfoOlTMuJcsbN14kxKDTyNURgc9o7Hl7dBzvmlrHP729gy7rVCYurOG4A
my1fHYWeqz+XTfJd4PsnspOApOEYyT465k0oS4xnn1j+PCYAOGyw8EgKUpW1cz4a
JurhZZOWFRPhmYxhn6zEcFkQ+Q7o6H34KpmcBkL1rg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:18:14 2025 by rpki-client