Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3230303a3a2f33392d3339203d3e203533333433.roa
File: 323630323a663736353a3230303a3a2f33392d3339203d3e203533333433.roa (raw, json)
Hash identifier: JuXSoTyqRK3ddlZf92GHME6AYSXx2KQpjRGPujo38Wk=
Subject key identifier: 9D:06:07:FE:F7:82:18:37:94:51:1B:2E:07:BB:5E:19:6C:54:8F:21
Certificate issuer: /CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
Certificate serial: 30F36D65369086CE2F4B5E39553628860C99E122
Authority key identifier: 6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3230303a3a2f33392d3339203d3e203533333433.roa
Signing time: Tue 07 Jan 2025 04:04:04 +0000
ROA not before: Tue 07 Jan 2025 03:59:04 +0000
ROA not after: Tue 06 Jan 2026 04:04:04 +0000
asID: 53343
IP address blocks: 2602:f765:200::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f3:6d:65:36:90:86:ce:2f:4b:5e:39:55:36:28:86:0c:99:e1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
Validity
Not Before: Jan 7 03:59:04 2025 GMT
Not After : Jan 6 04:04:04 2026 GMT
Subject: CN=9D0607FEF782183794511B2E07BB5E196C548F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:00:e3:4b:54:d9:9a:d9:c3:62:4e:43:90:
dc:75:e5:8b:75:92:6a:8d:72:e8:c1:0f:54:a7:75:
b6:51:04:c0:b6:3d:fc:e3:ad:fd:e3:3d:55:a7:fe:
0c:ad:31:41:bd:f4:c2:fb:4d:d7:63:1e:c0:93:32:
82:a0:1e:fe:57:18:22:fe:5d:75:f2:61:23:6a:ae:
6c:0e:be:b0:8f:c0:3f:e8:f8:4e:2c:6f:54:e6:59:
75:8e:ed:b5:3d:82:11:db:92:5b:cd:99:20:a7:c3:
c6:45:12:07:9c:b1:b6:a5:75:a5:bf:e7:ab:af:95:
0a:68:b6:39:71:19:5a:bf:da:b3:f2:f7:ce:fa:27:
27:e6:de:ca:8a:df:da:a4:78:f2:4b:2f:52:40:bd:
5e:9b:01:a5:eb:bc:c4:35:e5:c0:6b:ed:22:f1:bc:
2e:ba:04:54:7d:5b:1f:2e:4d:e4:fd:1d:3e:c4:15:
19:22:98:15:d5:6a:9a:d0:f5:d9:09:62:e8:d4:2d:
46:af:0c:bf:9b:a7:0e:8d:ac:03:88:7b:6d:a3:b0:
9a:3b:d2:38:a8:c1:36:99:b9:6d:08:8b:8f:ab:38:
75:72:6e:ed:5b:d1:91:f3:f5:bf:5f:0c:7a:8b:4f:
cc:6e:74:91:20:db:aa:30:8c:60:fa:4d:86:08:97:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:06:07:FE:F7:82:18:37:94:51:1B:2E:07:BB:5E:19:6C:54:8F:21
X509v3 Authority Key Identifier:
keyid:6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3230303a3a2f33392d3339203d3e203533333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f765:200::/39
Signature Algorithm: sha256WithRSAEncryption
39:a3:ad:db:a2:f9:39:37:d5:7b:62:14:04:ae:70:f4:2f:6b:
64:54:96:10:76:e5:2d:34:b7:7b:58:d3:75:5b:8e:cf:4a:09:
56:37:12:99:38:d9:3c:e5:cc:a0:f7:f0:6a:87:51:a4:bc:1b:
13:17:61:f9:7f:d8:0d:d2:14:d1:b4:6e:ae:8f:94:34:04:6d:
92:5d:98:e6:46:f8:3c:4f:a7:e7:e4:97:d7:e9:0f:2d:b9:2f:
ca:3e:a6:91:ce:7a:a5:90:57:f5:fd:fd:35:71:87:2a:fa:ec:
a4:f1:5e:09:89:ea:81:79:17:4d:65:71:b1:18:55:56:d1:1a:
32:ff:21:1f:ac:57:84:01:b6:52:d5:5e:64:ca:2b:f8:71:10:
83:e6:f9:7b:e9:44:96:59:5d:cd:ed:be:9f:43:60:7c:a3:fe:
0a:94:98:ae:9f:0b:be:db:89:62:62:67:df:e2:8b:41:42:99:
70:f6:43:ff:03:29:ab:e4:6e:e0:96:d9:07:3a:9b:8f:eb:bb:
3c:f9:3e:fa:c0:07:e9:49:85:90:a4:62:99:ff:64:f2:41:42:
e7:36:52:27:36:ff:e6:d0:f5:ec:4d:c7:b1:9e:bd:76:58:16:
1f:7f:26:47:81:b4:1c:1a:97:ef:fc:6b:ac:b0:71:57:bc:d1:
ed:09:99:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:18:14 2025 by rpki-client