Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa
File: 323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier: QY6+t4vDF+qZ1iVNAjSAywBO6qxmACxAS42+5lXF/Lg=
Subject key identifier: 78:B6:66:DF:2C:DA:49:4D:7E:6A:5D:B4:88:A0:E8:C9:79:E4:E4:56
Certificate issuer: /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial: 13CFA02074CB2FD09BB8535813FF94FE16DA05
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa
Signing time: Mon 05 Jun 2023 18:33:24 +0000
ROA not before: Mon 05 Jun 2023 18:28:24 +0000
ROA not after: Mon 03 Jun 2024 18:33:24 +0000
asID: 399970
IP address blocks: 2602:fc3b:a00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:cf:a0:20:74:cb:2f:d0:9b:b8:53:58:13:ff:94:fe:16:da:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Validity
Not Before: Jun 5 18:28:24 2023 GMT
Not After : Jun 3 18:33:24 2024 GMT
Subject: CN=78B666DF2CDA494D7E6A5DB488A0E8C979E4E456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:1c:c9:d3:06:0a:31:78:a5:96:dd:4b:51:
b3:6c:c1:6d:f1:ef:69:23:1e:1e:c6:e6:4b:1b:c4:
8f:43:fe:2e:09:51:29:b4:07:d1:ee:1d:05:29:6f:
0e:0c:84:f8:24:0d:68:5e:2a:4c:54:eb:f0:aa:f7:
f2:43:72:0a:35:d8:d7:98:0d:40:81:6c:a4:0b:79:
30:df:eb:b4:62:fb:79:ff:a3:e6:24:28:9d:df:48:
a3:72:af:a7:ef:03:eb:1a:87:1a:ed:2a:ff:f8:08:
bd:0a:8f:3e:1e:93:66:73:e6:65:d7:71:c8:dc:1d:
b9:17:8d:3d:6e:33:01:17:28:8b:94:b9:f8:06:fe:
84:17:a0:ee:9d:72:cf:27:48:b7:72:0b:ca:35:6d:
c6:a0:14:89:d6:ed:2e:33:51:15:b0:27:7e:e6:b2:
a0:98:52:eb:40:44:7b:e8:85:bb:ac:73:3a:00:5c:
9e:9a:04:da:a3:eb:eb:c7:f0:39:92:45:cb:10:3c:
00:5e:7d:92:b6:2f:5e:60:46:1e:23:cf:7d:23:dd:
45:fb:c6:93:b7:55:b8:65:0d:ae:29:f4:54:63:9f:
0f:c5:2b:f3:db:95:91:96:0a:8d:1e:a8:48:92:7d:
b2:8b:6c:3b:e3:78:70:fa:bc:1a:e4:bb:63:a2:4c:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B6:66:DF:2C:DA:49:4D:7E:6A:5D:B4:88:A0:E8:C9:79:E4:E4:56
X509v3 Authority Key Identifier:
keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:a00::/48
Signature Algorithm: sha256WithRSAEncryption
78:b4:ba:68:8a:35:3f:4b:09:e2:43:96:89:08:2b:3e:f8:82:
ab:ce:b8:5c:56:91:23:3b:00:2d:a0:49:fa:ba:e3:0b:01:90:
27:63:d8:45:85:dc:1a:cc:6d:20:4b:26:42:32:5a:f9:6b:99:
f1:84:a6:ab:38:ab:8d:48:f9:76:7a:8e:35:63:d8:4f:81:1c:
f0:c3:12:19:ca:e0:c3:d5:bd:01:30:b7:15:eb:fa:07:82:cf:
a3:ad:19:0b:b4:b7:46:51:ad:71:74:d4:4c:e4:5e:50:cd:50:
cc:8a:40:e5:72:17:1c:5a:80:bb:58:ee:24:50:f7:51:76:5d:
f0:f2:c9:98:7a:14:9a:ac:b7:ce:e1:d3:7d:5f:c9:88:2c:00:
18:64:f5:d0:68:28:22:3d:1b:f4:5a:ff:25:25:b0:0d:d0:25:
85:eb:b7:55:76:e8:52:2b:d3:7a:d6:7e:4b:b0:3f:b2:d2:22:
fd:e4:35:57:01:5c:33:a5:dc:f6:eb:21:ed:5e:6f:15:48:a8:
bb:5c:92:87:4b:41:78:26:c6:74:8c:9a:4a:9b:bb:9a:a4:c1:
5e:35:8d:63:4a:8d:2c:1c:ed:41:ea:34:a6:ba:68:85:f9:eb:
42:28:49:46:33:c2:af:5d:8b:03:df:da:cc:ad:24:ea:0b:c7:
b8:2a:7a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:06 2024 by rpki-client on console-fra.rpki-client.org