Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File: 323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier: YhJGWKdLYoMyJL181BeNfkrH8S+GSy3eE1tvUTx1IGU=
Subject key identifier: 96:4B:B0:E8:4B:76:77:F2:C7:AE:2C:73:F2:19:5D:2B:41:F4:53:B2
Certificate issuer: /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial: 4CD3C3C80F0CBC5F5D2E0AFE8ED924D9A179B060
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time: Mon 05 Jun 2023 18:34:00 +0000
ROA not before: Mon 05 Jun 2023 18:29:00 +0000
ROA not after: Mon 03 Jun 2024 18:34:00 +0000
asID: 399970
IP address blocks: 2602:fc3b:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d3:c3:c8:0f:0c:bc:5f:5d:2e:0a:fe:8e:d9:24:d9:a1:79:b0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Validity
Not Before: Jun 5 18:29:00 2023 GMT
Not After : Jun 3 18:34:00 2024 GMT
Subject: CN=964BB0E84B7677F2C7AE2C73F2195D2B41F453B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:43:3e:ea:29:f4:20:6e:68:08:89:0f:0b:
90:59:5c:fd:b1:57:6f:8b:81:3e:33:50:53:82:13:
e6:a8:21:95:61:6d:77:4d:2a:7d:d5:eb:cb:6f:8c:
7a:35:9a:6c:96:d3:ea:07:bd:ed:b6:0c:a8:98:f8:
00:46:cc:0c:a5:f1:23:59:24:97:ba:e5:21:91:d7:
dc:26:da:ac:65:c0:81:2d:3f:c6:d2:79:fb:30:5f:
96:63:a1:10:7f:db:cf:f1:5e:01:fb:15:69:33:05:
47:ac:a5:94:63:c7:37:92:7c:11:29:26:0e:42:d0:
e6:c3:3c:25:40:22:36:04:e0:d1:f8:86:58:bb:ea:
46:8c:d5:bb:80:7d:6d:6e:29:44:33:f8:a3:d3:e9:
a7:c4:0a:6e:8e:35:81:03:b1:cd:7c:a4:18:15:d0:
66:ed:06:ca:ce:d3:4c:21:b8:bb:0c:4e:57:ff:0a:
7e:9c:41:af:27:bc:d2:8f:98:11:0e:c9:2c:a6:d6:
5b:7b:7c:14:29:73:87:24:42:22:ba:cf:33:28:84:
42:47:9c:0b:b3:2a:75:d5:3f:7b:6d:a5:20:55:53:
33:e9:a0:31:1d:77:05:90:0a:f5:46:73:dd:88:97:
15:08:f1:28:a2:77:1a:d3:e3:70:34:71:d1:8b:e3:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4B:B0:E8:4B:76:77:F2:C7:AE:2C:73:F2:19:5D:2B:41:F4:53:B2
X509v3 Authority Key Identifier:
keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:100::/48
Signature Algorithm: sha256WithRSAEncryption
c4:51:a1:a9:f2:72:2b:95:ba:c3:56:20:9e:f2:78:6e:83:f4:
44:4c:0e:fa:23:08:61:ca:d4:de:bb:69:24:b6:f3:46:e2:85:
8e:03:7c:68:cf:4b:00:4a:d6:b6:6f:ce:ac:43:ec:75:72:a3:
7e:8b:24:63:68:7e:59:de:a4:c2:e2:8b:9e:96:73:e6:a6:ee:
1d:65:3e:80:bd:cf:58:19:0a:3b:4a:36:81:0d:a6:80:2c:90:
38:5d:ec:34:58:eb:63:66:5f:0c:51:a6:d9:4d:7d:0d:0d:52:
88:81:5d:5e:8d:dc:7d:24:b4:4a:6d:95:dd:8a:88:51:35:ae:
0f:de:59:16:f8:e3:41:ed:98:86:c9:6e:22:5c:ba:2a:f1:0f:
39:c6:d4:2d:4d:6a:f8:fd:52:3f:45:8f:54:fc:12:78:be:ac:
c6:f0:81:59:e0:63:90:de:56:54:68:9b:9e:7d:9a:c5:a8:99:
9c:a0:8d:ab:28:8d:60:7d:59:20:a5:f8:1c:72:a9:ec:11:1c:
b7:36:9d:4f:e2:cb:2b:03:91:28:bb:72:c5:32:f4:93:64:55:
15:36:09:c1:4a:69:64:d7:54:be:86:c1:b7:09:b0:94:fa:b0:
bb:77:fc:f1:4e:a6:c3:4d:29:13:3a:f2:7a:a7:88:59:99:f4:
a7:a7:a4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-ams.rpki-client.org