Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
File: 323630323a666333623a3a2f33362d3336203d3e20333939393730.roa (raw, json)
Hash identifier: N3D3ZIYXE5LSayZgLMgHXr2hEQNgzRWRYnZcHadCSfs=
Subject key identifier: 3A:14:ED:FF:76:17:42:5F:A1:99:57:27:20:48:DD:F1:20:D3:54:AF
Certificate issuer: /CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
Certificate serial: 2F4EFEFD34394461F449E2B1510BCACDB623C59B
Authority key identifier: 5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
Signing time: Sun 22 May 2022 06:05:48 +0000
ROA not before: Sun 22 May 2022 06:00:48 +0000
ROA not after: Sun 21 May 2023 06:05:48 +0000
asID: 399970
IP address blocks: 2602:fc3b::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:4e:fe:fd:34:39:44:61:f4:49:e2:b1:51:0b:ca:cd:b6:23:c5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
Validity
Not Before: May 22 06:00:48 2022 GMT
Not After : May 21 06:05:48 2023 GMT
Subject: CN=3A14EDFF7617425FA19957272048DDF120D354AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:f2:e9:86:46:75:2d:dd:f8:be:89:28:97:
a0:dd:60:dd:c5:7a:2b:bf:e3:06:e7:5e:fe:8a:a0:
ed:41:a3:f0:7f:d5:71:c0:af:15:3c:ca:60:14:76:
0d:7d:e8:c7:1a:0d:bd:85:7b:dd:62:08:ac:05:c4:
4c:6a:c9:e0:a0:50:00:17:c1:0e:e0:a1:e5:30:fa:
a0:c9:ee:5b:07:f1:58:04:26:ce:69:03:5f:3d:70:
63:be:8f:57:be:c1:96:b0:a1:06:4b:b2:59:bf:fe:
5b:f2:bf:85:56:00:24:a1:c9:43:a7:0c:67:7a:41:
12:53:28:d8:ce:42:70:7e:41:d2:24:fa:1e:0c:78:
c1:04:e0:85:d1:50:14:d4:c0:58:8e:f2:a6:84:18:
d5:c5:73:35:fd:98:ed:79:65:79:0c:bc:fd:5f:04:
19:64:67:56:32:ef:a6:ed:8b:79:5e:b7:09:3e:1e:
7c:ac:cc:ed:a4:33:c4:6d:ed:57:92:41:57:31:2c:
10:26:97:74:1a:39:a7:59:48:93:54:76:d8:93:22:
f1:b2:78:a8:bf:c1:54:32:f3:7d:2f:aa:be:e5:18:
2e:14:18:cf:51:20:90:63:6f:fc:25:d4:de:d7:b5:
85:e2:3a:55:93:21:91:2e:28:44:88:24:44:86:bf:
dd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:14:ED:FF:76:17:42:5F:A1:99:57:27:20:48:DD:F1:20:D3:54:AF
X509v3 Authority Key Identifier:
keyid:5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/5A6A2124371AF9DEE86D9383EFCE8AB378309E73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b::/36
Signature Algorithm: sha256WithRSAEncryption
2f:6c:6c:27:8f:9b:5e:df:9a:d7:6e:aa:92:65:ca:b2:9c:5f:
11:9a:bc:c9:b1:5c:80:e7:44:20:ee:91:02:d8:40:67:f9:b2:
74:48:9b:c3:28:5f:86:02:ce:d3:51:f8:e4:e9:10:98:e0:85:
d1:bf:78:f7:5c:5d:9f:52:7f:51:4b:f6:75:3e:9d:4a:a9:74:
3a:18:ea:30:ab:ba:86:27:9b:c5:ec:37:90:d9:a1:71:24:85:
36:f5:78:3c:96:80:a6:4b:aa:bf:0a:4e:6f:5d:8d:e8:b1:23:
fd:43:a5:86:9b:42:2e:18:4d:ad:f7:81:4b:1d:7e:48:fe:7f:
e3:e6:fc:21:98:84:92:55:2d:8d:37:73:ad:78:44:46:b1:11:
9c:b8:3b:e3:23:68:67:f0:e2:f1:8a:48:b4:70:98:eb:b6:87:
65:6d:4e:4f:43:cf:81:70:09:8c:35:46:14:be:39:af:c7:1b:
4d:be:a1:b2:3d:0c:76:59:64:5b:2c:1b:0d:86:cd:ab:ce:bd:
96:b9:ee:bb:27:07:08:dd:7c:73:05:9d:03:f4:d1:63:fd:06:
4f:84:df:3b:03:fc:d7:de:b8:2d:c9:4e:33:36:41:7e:4f:60:
1f:7b:33:1a:56:ba:6a:74:7b:02:9b:8c:e2:bf:72:3c:a0:ed:
c0:2c:0f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:02:39 2025 by rpki-client