Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File: 323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier: GPJ8mrjCOyN5xUu46Qp2l8NUln8GpuDbG0xAtni1hHw=
Subject key identifier: 43:6B:F9:E8:61:45:3B:E8:33:D0:AA:91:D7:8C:39:A8:6F:A9:6D:4B
Certificate issuer: /CN=fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd
Certificate serial: 587963A7B774A1CF94DB23D64C5615AEF75C696E
Authority key identifier: DA:31:D6:43:46:D9:E7:5E:2A:5A:B4:2D:4E:1A:39:16:9A:87:0F:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time: Tue 31 Jan 2023 17:12:53 +0000
ROA not before: Tue 31 Jan 2023 17:07:53 +0000
ROA not after: Tue 30 Jan 2024 17:12:53 +0000
asID: 399970
IP address blocks: 2602:fc3b:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:79:63:a7:b7:74:a1:cf:94:db:23:d6:4c:56:15:ae:f7:5c:69:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd
Validity
Not Before: Jan 31 17:07:53 2023 GMT
Not After : Jan 30 17:12:53 2024 GMT
Subject: CN=436BF9E861453BE833D0AA91D78C39A86FA96D4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:e0:7a:26:7f:43:5b:5d:d8:e2:3d:69:cc:
e3:b5:a2:d1:d9:03:dc:00:cc:17:3f:12:98:c6:06:
a0:85:71:fb:ca:b4:a8:99:22:2b:06:3b:2b:12:7f:
4b:a4:33:a0:3c:29:2d:e7:3e:4d:7b:94:da:e0:01:
bb:3f:ee:32:3c:4d:4a:92:6f:40:3f:34:f3:bb:ac:
82:ca:97:83:1b:a8:32:f5:7c:8b:e5:e7:34:b1:0a:
e5:61:cf:ad:88:80:a7:69:62:d2:41:05:28:35:31:
f3:58:ab:36:22:db:60:74:56:c7:32:e7:cd:12:e4:
ec:59:be:b9:79:31:59:b6:26:98:d3:29:75:8b:da:
b7:af:42:d8:82:91:ba:09:ac:8d:15:6f:db:5c:8e:
42:f8:13:42:8a:6f:64:d0:a3:e6:64:3e:44:33:8f:
80:8f:78:60:64:0d:45:cc:43:50:dc:6c:81:e8:f2:
e2:73:fc:c5:c5:fc:27:4d:a3:0e:d1:0e:33:25:a2:
c4:b6:bc:74:a7:c9:7d:79:7b:89:2c:7c:3c:72:5f:
00:5d:36:d2:c8:f9:0d:67:3e:97:03:42:84:bb:c2:
88:87:1e:17:a1:0b:07:45:30:fa:43:cf:e1:19:13:
39:a3:53:21:4d:3c:d1:9f:e5:a5:ed:8d:bf:ea:2e:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6B:F9:E8:61:45:3B:E8:33:D0:AA:91:D7:8C:39:A8:6F:A9:6D:4B
X509v3 Authority Key Identifier:
keyid:DA:31:D6:43:46:D9:E7:5E:2A:5A:B4:2D:4E:1A:39:16:9A:87:0F:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/DA31D64346D9E75E2A5AB42D4E1A39169A870F35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:100::/48
Signature Algorithm: sha256WithRSAEncryption
5f:b6:d7:12:1c:6a:25:98:98:0e:68:1b:83:cd:3d:52:6e:e9:
e0:6b:3a:1a:64:db:6b:a0:8a:9c:27:84:3d:1e:40:a3:e5:92:
e7:5f:94:f0:a0:ee:07:c9:d7:59:41:66:95:80:31:c0:97:e4:
0c:e1:e2:54:82:e5:4f:96:ba:11:bb:5d:23:2b:ad:88:25:a8:
a4:f3:8d:b3:30:33:6b:7f:91:52:f5:95:c5:b8:36:65:48:ee:
99:f5:a4:87:64:bf:48:11:58:01:74:cb:c7:30:9b:2e:88:bd:
d0:9d:ff:98:f2:41:e7:a8:64:aa:60:ed:4f:bb:21:1a:b5:18:
4c:c1:7d:0e:07:63:eb:a0:90:7a:00:0d:f1:54:bb:19:45:0d:
04:59:92:db:f9:e3:86:5e:14:ef:0c:47:9b:a2:d2:23:b3:b1:
a1:76:d6:8b:26:43:33:fa:72:f9:1c:ac:55:78:2c:a3:46:38:
b9:04:3e:bf:f4:b5:1d:03:8d:57:55:e4:48:6a:fd:75:bd:c0:
59:1d:70:c2:92:b7:f5:0a:ad:ac:a6:e4:75:bd:3e:da:26:c0:
95:78:5a:ba:70:4a:b7:67:c5:eb:05:3d:30:e4:2b:b4:56:86:
cf:7f:a1:7a:82:04:d0:87:05:73:5f:0d:46:7d:f6:20:49:b1:
e7:3e:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:46:43 2025 by rpki-client