Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a61633a3a2f34382d3438203d3e20343031353037.roa
File: 323630323a663738613a61633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: mGxak1tARSfABOnM0uXpwbHyh/kjaFlay+mT0hcLT8c=
Subject key identifier: F3:CB:4F:22:FC:DD:64:B4:50:B4:DE:2F:06:33:92:37:12:99:58:5A
Certificate issuer: /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial: 4E1FA279993B94CED2C0C4470F2D86579049C361
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a61633a3a2f34382d3438203d3e20343031353037.roa
Signing time: Thu 19 Dec 2024 14:31:06 +0000
ROA not before: Thu 19 Dec 2024 14:26:06 +0000
ROA not after: Thu 18 Dec 2025 14:31:06 +0000
asID: 401507
IP address blocks: 2602:f78a:ac::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:1f:a2:79:99:3b:94:ce:d2:c0:c4:47:0f:2d:86:57:90:49:c3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
Validity
Not Before: Dec 19 14:26:06 2024 GMT
Not After : Dec 18 14:31:06 2025 GMT
Subject: CN=F3CB4F22FCDD64B450B4DE2F063392371299585A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:7e:b7:b7:af:ac:93:1c:31:89:b3:17:a3:
fb:f9:a8:e8:39:94:5a:3f:d1:72:38:10:f1:aa:01:
6d:6b:4b:50:3f:f5:4f:4d:1e:50:34:50:40:d7:f4:
0d:0f:4d:27:66:0e:06:be:db:7d:30:4e:b7:d1:44:
1f:3c:8b:26:e5:0e:55:c7:8a:ba:00:3d:25:e3:a1:
03:e2:f8:df:a1:2a:da:0b:9f:a7:36:dc:d1:51:0b:
5c:c7:7c:23:52:ce:5b:5a:12:5a:95:b1:c9:0b:54:
a8:fc:b1:9b:b5:50:9c:d7:a8:52:b7:22:55:2e:50:
57:25:99:52:48:bc:71:56:0a:95:bd:38:be:61:05:
cf:e9:11:4a:86:ea:0c:3b:4f:e3:8b:2d:9a:fe:61:
00:3b:c1:03:8e:63:a0:e4:3d:61:55:d6:42:20:97:
b6:c9:29:a4:7e:f2:51:f1:65:3d:79:7d:a2:6e:51:
4e:ef:90:01:92:b8:d6:30:1f:c4:ac:8e:7c:f2:91:
48:90:28:6c:ac:a9:60:69:65:b1:1d:87:c0:ad:09:
e7:6b:a5:39:2b:11:08:ba:b3:26:d8:00:9a:76:11:
58:79:55:bd:93:05:ef:1c:5d:86:72:17:10:dc:07:
37:1f:fc:75:1e:1e:82:a2:91:34:ca:87:f2:48:e7:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CB:4F:22:FC:DD:64:B4:50:B4:DE:2F:06:33:92:37:12:99:58:5A
X509v3 Authority Key Identifier:
keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a61633a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:ac::/48
Signature Algorithm: sha256WithRSAEncryption
16:dd:ff:f0:bc:78:f6:9d:10:5f:d2:c4:64:3a:34:1e:92:90:
ef:97:0b:66:99:98:ca:7f:f9:73:39:96:46:04:0c:c3:b7:4e:
e1:0c:a7:ca:7d:99:3b:a4:c6:3c:90:55:24:92:92:69:b4:51:
f8:87:ec:74:66:7d:f1:52:d8:ee:f3:c3:4a:fd:4c:33:38:e3:
3d:d4:e3:e8:dc:06:34:ea:e3:5a:c9:f5:e7:bf:f6:c8:e8:5c:
5c:e4:1b:c8:e4:74:0d:4d:32:e5:b4:d3:34:f7:02:3d:87:17:
34:00:e7:29:e5:9f:e7:af:bc:74:6e:83:ec:06:a4:f9:3f:05:
a3:7e:d3:89:f5:6b:3f:23:b7:e9:7e:8e:ca:8f:4b:87:d6:3b:
27:61:5c:19:3e:1c:25:7e:28:e2:c2:02:41:dc:51:fc:9b:8a:
4e:43:5c:30:d1:dd:ae:2d:8e:17:bc:2f:df:a5:b6:88:69:47:
da:d5:fc:89:5f:df:e0:91:6c:22:ff:11:57:fb:13:e2:bd:39:
97:5a:ea:c5:b3:3a:a6:72:f4:48:f0:78:3e:19:b1:bd:9b:4f:
65:85:b2:7a:78:12:18:a2:94:0e:5a:86:08:ab:99:47:99:05:
1c:77:92:2c:d9:c3:69:d9:25:d1:f1:d9:62:82:7b:f6:60:08:
b5:af:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:18:14 2025 by rpki-client