Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
File: 323630323a666333623a3a2f33362d3336203d3e20333939393730.roa (raw, json)
Hash identifier: rGtubGgt96lRAGnAw4jgUiBR/F6j9TmwgLDNumkbxQ8=
Subject key identifier: 23:80:26:A9:5D:D1:EE:C3:40:16:5A:4E:D7:7B:EF:B1:70:EF:37:C0
Certificate issuer: /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial: 64B143F0FB4F5BC113B5226D4BE3EE00761A0374
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
Signing time: Fri 02 Aug 2024 20:09:58 +0000
ROA not before: Fri 02 Aug 2024 20:04:58 +0000
ROA not after: Fri 01 Aug 2025 20:09:58 +0000
asID: 399970
IP address blocks: 2602:fc3b::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b1:43:f0:fb:4f:5b:c1:13:b5:22:6d:4b:e3:ee:00:76:1a:03:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Validity
Not Before: Aug 2 20:04:58 2024 GMT
Not After : Aug 1 20:09:58 2025 GMT
Subject: CN=238026A95DD1EEC340165A4ED77BEFB170EF37C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:7a:df:b7:ba:1a:07:8b:a0:f8:03:38:4c:
67:1e:f5:2e:b9:49:71:20:37:d8:ea:1e:99:ce:ac:
61:9a:94:a2:7d:cf:0a:ed:e5:df:11:64:d5:03:3a:
72:54:62:9b:7e:56:d0:4e:82:ec:8e:5f:7b:ba:b2:
7b:21:10:ef:69:0a:bb:d9:70:d4:97:9c:a2:b7:06:
cd:d3:9f:2c:4c:8f:0d:36:01:8e:65:fe:89:ee:25:
13:6f:9a:53:05:ee:cd:1c:82:e9:1e:4f:21:4a:ba:
8e:03:5a:38:0e:86:14:73:34:e5:99:79:55:8e:fd:
c8:f0:78:39:51:f8:b3:4f:7b:f3:22:43:2c:19:df:
d4:e8:df:7f:b9:d2:1d:47:ac:72:d8:25:70:5d:1b:
a4:f7:1e:1d:41:18:67:61:dd:3e:d2:3e:71:38:ac:
4a:90:94:fd:6b:46:bc:28:87:77:58:81:ef:7d:5a:
f2:cb:5c:20:ae:21:42:a9:87:d9:68:67:a4:d6:b9:
6c:f3:28:a4:06:7c:6d:56:6b:46:00:dc:9c:68:aa:
6e:cd:15:ed:87:27:82:4e:6c:76:91:d7:55:ae:40:
78:47:6e:ab:d6:aa:a2:86:af:ad:55:ae:d6:b6:04:
8f:5c:a6:f0:e6:22:5c:34:ba:cf:46:33:35:58:4a:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:80:26:A9:5D:D1:EE:C3:40:16:5A:4E:D7:7B:EF:B1:70:EF:37:C0
X509v3 Authority Key Identifier:
keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b::/36
Signature Algorithm: sha256WithRSAEncryption
1a:a9:4e:f3:23:2e:7b:18:fe:31:90:fc:c2:13:53:c1:0d:3b:
70:7b:4c:be:94:b4:68:14:fd:8e:6e:5a:c8:b0:d6:55:82:52:
f4:bf:1a:71:7a:b1:9c:ca:9e:18:15:79:c6:2b:27:92:61:dc:
24:bc:0a:c3:68:65:ae:de:db:8b:df:d6:6c:26:d5:48:19:51:
04:c7:7d:c8:4f:ae:08:22:f8:b8:12:3f:2d:ae:1d:e2:04:c3:
ca:85:7c:ee:39:57:21:6c:aa:92:22:7e:48:0d:9b:36:72:72:
4f:f4:02:3f:e4:08:0f:78:32:bb:14:51:73:64:81:91:a7:fa:
79:1a:d0:42:b9:e1:95:ee:c3:79:ee:de:d0:dd:d3:b5:e8:5e:
3a:03:21:9f:f4:d8:e9:40:4f:80:87:cc:cb:a6:99:c7:7b:cd:
1e:65:14:b3:a2:6b:55:03:cc:77:cf:d1:30:ef:57:a9:8e:fc:
c2:5c:d1:bf:3d:28:f3:2c:17:25:d8:a0:ac:96:76:25:f4:b5:
8e:a1:a2:36:c6:08:28:95:a9:2f:5b:4c:cc:cf:05:b2:a5:41:
ce:20:ac:84:52:10:f8:02:94:40:44:1d:55:24:f2:6a:23:df:
a1:f4:ed:97:b8:dc:8f:76:c3:85:9e:b2:4e:06:19:6e:75:d3:
24:aa:2d:18
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUZLFD8PtPW8ETtSJtS+PuAHYaA3QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjM0OGNmMGMzZDI5NTI4MGJiZTVjMjZi
NGU3YjZkZTI3MTU5MTQxY2IwHhcNMjQwODAyMjAwNDU4WhcNMjUwODAxMjAwOTU4
WjAzMTEwLwYDVQQDEygyMzgwMjZBOTVERDFFRUMzNDAxNjVBNEVENzdCRUZCMTcw
RUYzN0MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4d637e6GgeL
oPgDOExnHvUuuUlxIDfY6h6ZzqxhmpSifc8K7eXfEWTVAzpyVGKbflbQToLsjl97
urJ7IRDvaQq72XDUl5yitwbN058sTI8NNgGOZf6J7iUTb5pTBe7NHILpHk8hSrqO
A1o4DoYUczTlmXlVjv3I8Hg5UfizT3vzIkMsGd/U6N9/udIdR6xy2CVwXRuk9x4d
QRhnYd0+0j5xOKxKkJT9a0a8KId3WIHvfVryy1wgriFCqYfZaGek1rls8yikBnxt
VmtGANycaKpuzRXthyeCTmx2kddVrkB4R26r1qqihq+tVa7WtgSPXKbw5iJcNLrP
RjM1WEqLBQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFCOAJqld0e7DQBZaTtd777Fw
7zfAMB8GA1UdIwQYMBaAFKXFvzsjS/OEZYWK7W44kQ4cDqcQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTBjNjQ3YWMwMTkxMTRiM2JhZDc1NmYxLzIv
QTVDNUJGM0IyMzRCRjM4NDY1ODU4QUVENkUzODkxMEUxQzBFQTcxMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzEzMDhmYjc3LTc0MDMtNGQyYy1hNWEzLTgwMTA2NDNiNGNjOC9mY2Iy
MGY1OTY2MzQ4Y2YwYzNkMjk1MjgwYmJlNWMyNmI0ZTdiNmRlMjcxNTkxNDFjYi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkwYzY0N2FjMDE5MTE0
YjNiYWQ3NTZmMS8yLzMyMzYzMDMyM2E2NjYzMzM2MjNhM2EyZjMzMzYyZDMzMzYy
MDNkM2UyMDMzMzkzOTM5MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCYC/DsAMA0GCSqGSIb3DQEB
CwUAA4IBAQAaqU7zIy57GP4xkPzCE1PBDTtwe0y+lLRoFP2OblrIsNZVglL0vxpx
erGcyp4YFXnGKyeSYdwkvArDaGWu3tuL39ZsJtVIGVEEx33IT64IIvi4Ej8trh3i
BMPKhXzuOVchbKqSIn5IDZs2cnJP9AI/5AgPeDK7FFFzZIGRp/p5GtBCueGV7sN5
7t7Q3dO16F46AyGf9NjpQE+Ah8zLppnHe80eZRSzomtVA8x3z9Ew71epjvzCXNG/
PSjzLBcl2KCslnYl9LWOoaI2xggolakvW0zMzwWypUHOIKyEUhD4ApRARB1VJPJq
I9+h9O2XuNyPdsOFnrJOBhluddMkqi0Y
-----END CERTIFICATE-----
Generated at Thu Aug 22 22:43:21 2024 by rpki-client on console-ams.rpki-client.org