Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
File: 323630323a666333623a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier: /TwB9z5DD8gBeAZicbZREezwexKfe/9HEdvOzMjI/9o=
Subject key identifier: 1D:AF:43:CA:22:3D:98:C8:BF:17:4D:0C:DE:B5:E1:DE:02:F4:C3:20
Certificate issuer: /CN=fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b
Certificate serial: 02158080E1A967BD9FF2D7466EB8A19FCB6E41F7
Authority key identifier: 37:BD:1F:12:1A:C0:CB:33:16:CF:F1:03:14:AC:8A:28:9E:31:E5:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cf82a88-daad-4851-a26a-7cc5a47f0a27/fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
Signing time: Fri 24 Feb 2023 15:16:22 +0000
ROA not before: Fri 24 Feb 2023 15:11:22 +0000
ROA not after: Fri 23 Feb 2024 15:16:22 +0000
asID: 399970
IP address blocks: 2602:fc3b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:15:80:80:e1:a9:67:bd:9f:f2:d7:46:6e:b8:a1:9f:cb:6e:41:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b
Validity
Not Before: Feb 24 15:11:22 2023 GMT
Not After : Feb 23 15:16:22 2024 GMT
Subject: CN=1DAF43CA223D98C8BF174D0CDEB5E1DE02F4C320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:1f:0a:82:4a:7a:87:1c:dd:c8:5e:80:20:
24:8f:d9:f5:7e:c1:8d:a5:8f:df:0e:35:ef:64:78:
09:48:1d:38:4c:24:a4:ee:08:a7:ed:23:a0:13:ff:
65:9e:21:01:89:1e:20:6b:63:af:02:a1:58:73:36:
0a:3c:99:8b:c2:4c:35:f3:a1:aa:78:61:7a:41:dc:
7e:3c:55:6b:74:1b:cb:12:87:d0:57:89:59:92:1e:
40:d8:d0:e9:c1:d3:c6:6a:31:10:10:31:e4:e8:a7:
e2:5b:36:d5:b2:06:a7:9a:5d:d0:2e:bd:fc:e6:58:
82:48:73:7d:e3:b1:93:7e:42:cd:a4:25:b7:95:da:
77:bc:67:fd:07:a9:51:06:ba:2a:1a:51:90:27:1f:
ae:e6:91:cd:5b:9c:d8:69:0b:6b:4e:6d:aa:a0:59:
78:6c:a5:dd:c5:f5:0c:21:15:28:28:42:79:bc:72:
3f:18:de:3a:3e:74:fa:45:fd:28:00:67:17:fb:b9:
69:cb:fe:d6:78:5b:f9:14:94:b5:62:02:b2:1c:51:
79:d0:17:02:0f:91:be:2a:de:50:5c:e1:2a:2b:f8:
0b:b2:96:2f:45:f4:45:38:36:9a:e6:d5:03:44:27:
6a:14:45:43:43:3f:51:5a:cd:5f:0f:37:77:58:79:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AF:43:CA:22:3D:98:C8:BF:17:4D:0C:DE:B5:E1:DE:02:F4:C3:20
X509v3 Authority Key Identifier:
keyid:37:BD:1F:12:1A:C0:CB:33:16:CF:F1:03:14:AC:8A:28:9E:31:E5:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/37BD1F121AC0CB3316CFF10314AC8A289E31E53D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cf82a88-daad-4851-a26a-7cc5a47f0a27/fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b::/48
Signature Algorithm: sha256WithRSAEncryption
a0:5f:aa:95:26:b5:84:42:c3:62:d3:ce:67:a1:fb:34:a8:2e:
49:ed:ad:e5:0a:ae:c2:0f:08:1b:70:32:4b:0c:6e:33:30:b2:
fb:0e:d2:7e:b0:3a:fa:a0:82:49:2f:91:f9:93:f1:f1:d8:ff:
8f:b6:f8:aa:37:23:28:bb:18:8b:ac:24:fb:dd:5c:a8:b8:e2:
11:b8:49:38:6b:a7:66:d4:c2:d5:39:b8:1c:a5:06:fc:8a:bc:
57:72:7f:e4:43:47:86:08:71:ae:dd:64:ff:91:59:d6:6f:c5:
5c:47:fc:68:5d:09:1c:2f:46:96:92:76:fb:ed:40:c3:e2:b8:
f2:3e:f5:68:e2:31:02:37:35:c6:ff:19:b5:07:45:3c:81:8f:
6b:01:ab:b3:d6:22:3b:40:65:8f:c2:51:b0:30:40:fb:d5:e4:
8d:bf:23:66:40:9e:8e:f1:90:29:9a:0b:a4:4a:5b:6b:6f:68:
b5:3e:bb:ba:8e:62:20:f5:2a:79:67:93:1c:8c:16:42:ae:df:
b3:d8:b9:c2:85:73:03:27:8c:ca:90:98:9a:f6:98:e2:48:0f:
7c:db:40:a5:90:a9:c7:10:d2:84:2c:0e:80:31:39:ea:b2:d7:
90:6e:17:94:8b:f8:6f:20:4e:9b:e1:37:6b:ca:29:ca:db:0a:
5f:96:dd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:28:57 2025 by rpki-client