Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
File: 323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier: 5B/kt6OFpkvtHfdknsTC7blDk36Rs/E3ObTZYb+VdOs=
Subject key identifier: 67:7F:CF:09:C4:7C:D3:BC:A2:4F:5B:61:BE:EE:49:E7:10:36:AF:90
Certificate issuer: /CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
Certificate serial: 41D5B037875422F4E0BB63EA8BE58B101A946C1A
Authority key identifier: 5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
Signing time: Sun 22 May 2022 06:06:03 +0000
ROA not before: Sun 22 May 2022 06:01:03 +0000
ROA not after: Sun 21 May 2023 06:06:03 +0000
asID: 399970
IP address blocks: 2602:fc3b:300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d5:b0:37:87:54:22:f4:e0:bb:63:ea:8b:e5:8b:10:1a:94:6c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
Validity
Not Before: May 22 06:01:03 2022 GMT
Not After : May 21 06:06:03 2023 GMT
Subject: CN=677FCF09C47CD3BCA24F5B61BEEE49E71036AF90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c3:48:5c:1c:84:89:f4:44:1a:55:43:b6:7d:
10:15:1b:de:1d:2a:e5:1a:89:51:28:be:eb:59:fa:
12:b4:a2:34:78:d0:cf:02:c1:4b:ad:25:59:ff:a2:
49:0f:54:79:9d:77:18:3e:c8:66:a2:97:a0:7f:c4:
58:df:f4:cc:34:ec:8c:1c:be:1f:7a:af:3d:bb:ba:
6b:7c:ee:d8:e9:80:f0:02:99:ba:0e:0b:1b:0e:e4:
b3:a8:99:3d:0b:38:e6:4a:5c:fb:18:b3:f9:6d:92:
35:f0:e5:7b:91:d5:70:79:98:0a:2a:82:71:21:fe:
ca:da:b4:69:a3:46:9d:8b:ab:1b:2d:69:3a:f6:5b:
4f:81:74:89:40:3a:cc:c5:94:73:25:54:1f:11:89:
2d:45:d2:b9:40:92:32:6e:0c:9c:bc:57:0e:0f:c1:
d1:0b:3e:2c:46:6c:52:d5:5e:eb:17:77:30:d4:62:
a2:61:66:87:69:a6:46:08:ed:fd:05:11:33:aa:1b:
68:99:82:9a:67:66:40:05:f3:87:fe:05:d5:01:d8:
50:92:ef:0f:2e:9e:ba:d9:3e:85:47:42:7b:05:d7:
b4:0d:a7:d3:e2:11:9c:04:0e:86:72:48:49:66:45:
26:e8:74:99:75:c5:b4:c1:30:cf:53:e2:7a:e1:72:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7F:CF:09:C4:7C:D3:BC:A2:4F:5B:61:BE:EE:49:E7:10:36:AF:90
X509v3 Authority Key Identifier:
keyid:5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/5A6A2124371AF9DEE86D9383EFCE8AB378309E73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:300::/48
Signature Algorithm: sha256WithRSAEncryption
52:31:de:ca:be:10:0f:66:36:13:96:3e:66:ce:ef:a5:69:0f:
a9:b2:1e:8f:27:92:b0:01:1d:a3:f2:91:e7:a0:34:d2:24:1e:
d2:40:6d:04:90:3f:3a:6a:ae:fc:a8:1a:c8:98:3a:35:ec:41:
75:7c:2b:5a:60:13:79:b3:6b:c3:38:70:8b:9a:83:a6:59:51:
4c:f4:46:04:f8:33:c0:78:72:c9:d8:cc:43:f3:37:55:af:3a:
de:4e:fa:88:b0:61:e2:fb:a2:06:97:17:84:89:00:a6:76:0e:
50:c6:21:4a:6b:84:f8:a8:60:4f:17:ea:4d:c3:43:c1:43:22:
5d:fa:50:92:f3:d1:2d:b7:55:67:a0:15:86:0c:91:30:44:38:
5f:58:da:28:58:ff:2f:36:f6:a2:9b:28:3f:60:a9:78:98:9b:
23:33:8f:45:56:cc:2f:3c:8a:d2:f5:51:83:a1:9d:fc:53:e8:
bf:b9:ff:9e:0a:89:9c:26:12:9e:6f:6f:57:2a:6f:49:be:d1:
db:64:29:27:45:c0:42:25:49:a6:b7:8a:11:7d:33:97:cc:37:
ab:1b:c0:d2:03:c2:dc:b2:02:e2:b5:cf:09:fa:a5:e5:c7:0c:
42:56:45:e4:54:8f:19:95:af:64:31:1a:d4:bf:c3:26:a2:17:
b8:7c:9f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:02:38 2025 by rpki-client