Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
File: 323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier: KqMVG+j66uokxPsIqNbrAkxtMqFXWdvsCANlgIOsJzw=
Subject key identifier: C1:68:89:3E:4F:18:77:8D:84:CE:46:13:70:AB:9B:DB:C6:23:CC:2C
Certificate issuer: /CN=fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd
Certificate serial: 46A06403D3A944E326970630B509DC6F3E524336
Authority key identifier: DA:31:D6:43:46:D9:E7:5E:2A:5A:B4:2D:4E:1A:39:16:9A:87:0F:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
Signing time: Tue 31 Jan 2023 17:13:45 +0000
ROA not before: Tue 31 Jan 2023 17:08:45 +0000
ROA not after: Tue 30 Jan 2024 17:13:45 +0000
asID: 399970
IP address blocks: 2602:fc3b:200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a0:64:03:d3:a9:44:e3:26:97:06:30:b5:09:dc:6f:3e:52:43:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd
Validity
Not Before: Jan 31 17:08:45 2023 GMT
Not After : Jan 30 17:13:45 2024 GMT
Subject: CN=C168893E4F18778D84CE461370AB9BDBC623CC2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:31:9c:52:c8:54:62:68:ef:e0:62:f3:d6:14:
81:62:35:d9:a8:ce:76:f4:9c:a3:53:08:2a:2c:0e:
1a:6d:a1:42:7f:98:22:45:7b:63:58:8e:66:0c:c1:
83:ef:ff:c6:83:07:26:87:b9:07:ff:a5:2f:d2:c3:
66:5c:ff:ee:27:43:00:20:ff:31:06:89:fd:a2:35:
f7:8b:31:22:d1:6c:01:20:7c:4b:8c:8f:c1:d9:d0:
dd:e1:9a:e2:a4:4c:10:15:50:c4:57:31:9d:0d:3a:
98:53:7b:d5:2d:ba:74:9c:8f:c5:c1:21:7d:84:c1:
4f:99:e3:bd:e3:90:6f:48:98:84:51:41:9f:5c:07:
79:a1:c0:67:70:68:29:a8:6d:eb:cc:c2:ba:f9:ca:
93:a0:9b:1a:96:86:8f:37:84:39:91:c4:f6:17:c0:
ce:93:1f:72:d3:17:2f:79:f8:ff:44:8c:d5:a3:ea:
93:5d:ec:d1:4c:15:3e:ec:30:e0:38:c5:cf:ab:d4:
51:3c:ea:83:73:c3:cd:78:f0:41:eb:98:9c:f2:68:
28:b4:92:39:cf:9e:db:b0:cf:58:42:bf:47:21:61:
9f:66:21:ef:3b:f3:be:e4:b1:e5:1f:c0:70:4e:2b:
27:47:c4:0e:d5:c4:10:14:b6:33:62:fb:af:e3:c8:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:89:3E:4F:18:77:8D:84:CE:46:13:70:AB:9B:DB:C6:23:CC:2C
X509v3 Authority Key Identifier:
keyid:DA:31:D6:43:46:D9:E7:5E:2A:5A:B4:2D:4E:1A:39:16:9A:87:0F:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/DA31D64346D9E75E2A5AB42D4E1A39169A870F35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:200::/48
Signature Algorithm: sha256WithRSAEncryption
6c:86:13:ab:f4:c9:8b:d4:cc:3b:a3:00:2e:67:a2:33:5a:b0:
ec:00:f7:3b:6b:e0:dc:81:1d:38:83:0e:19:ad:4a:2d:a2:5a:
7a:ae:0d:4e:43:20:51:09:b8:ea:d8:46:96:82:e8:34:7a:66:
cf:d8:61:e3:89:42:18:64:70:2e:91:2f:42:7b:bf:2e:6b:5a:
01:90:b5:2b:14:7f:18:08:e2:15:5f:76:08:de:e6:03:b0:ae:
ac:bd:c2:6e:0d:27:84:b6:1c:68:65:3f:38:9c:95:98:8d:a0:
7e:38:60:15:a6:b6:73:4b:22:85:fa:57:ee:02:4e:7f:ef:b2:
95:84:c1:68:1d:b6:c3:ef:dc:04:73:e1:48:2a:86:f6:fb:f1:
e1:f4:b3:d1:97:d0:f6:60:56:84:45:37:1c:bd:48:54:04:93:
d7:58:18:05:0b:f0:cd:30:b6:ac:8c:5f:b6:ec:c2:2a:93:7d:
b6:cc:71:93:00:bf:8f:97:93:4c:b2:c8:ea:e3:76:32:f2:2b:
24:f0:8f:4d:e1:f1:0e:86:e8:47:60:f9:8c:15:f4:4f:66:ea:
1a:51:f7:b2:13:78:9d:49:db:9a:6f:54:34:9c:f5:93:6c:89:
d7:ab:6d:67:2e:4f:3c:38:83:97:bb:83:39:65:1a:cb:62:86:
51:ec:18:3a
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIURqBkA9OpROMmlwYwtQncbz5SQzYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjJlMWYxNjUxMDhiMGYwYTU2NWNjOGNh
YzUzYTU5OWMxMDE5NDEwYmQwHhcNMjMwMTMxMTcwODQ1WhcNMjQwMTMwMTcxMzQ1
WjAzMTEwLwYDVQQDEyhDMTY4ODkzRTRGMTg3NzhEODRDRTQ2MTM3MEFCOUJEQkM2
MjNDQzJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zGcUshUYmjv
4GLz1hSBYjXZqM529JyjUwgqLA4abaFCf5giRXtjWI5mDMGD7//Ggwcmh7kH/6Uv
0sNmXP/uJ0MAIP8xBon9ojX3izEi0WwBIHxLjI/B2dDd4ZripEwQFVDEVzGdDTqY
U3vVLbp0nI/FwSF9hMFPmeO945BvSJiEUUGfXAd5ocBncGgpqG3rzMK6+cqToJsa
loaPN4Q5kcT2F8DOkx9y0xcvefj/RIzVo+qTXezRTBU+7DDgOMXPq9RRPOqDc8PN
ePBB65ic8mgotJI5z57bsM9YQr9HIWGfZiHvO/O+5LHlH8BwTisnR8QO1cQQFLYz
Yvuv48hR3wIDAQABo4ICvTCCArkwHQYDVR0OBBYEFMFoiT5PGHeNhM5GE3Crm9vG
I8wsMB8GA1UdIwQYMBaAFNox1kNG2edeKlq0LU4aORaahw81MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODYwNDRlNDgwMTg2MDhjYjkzN2IwNWVhLzAv
REEzMUQ2NDM0NkQ5RTc1RTJBNUFCNDJENEUxQTM5MTY5QTg3MEYzNS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdm
MDA5OWIyLzk3NTdhMzFhLWQ5ZmUtNGUwNC05NzVjLTBlZmZhNTU5MGI4OC9mY2Iy
MGY1OTY2MmUxZjE2NTEwOGIwZjBhNTY1Y2M4Y2FjNTNhNTk5YzEwMTk0MTBiZC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg2MDQ0ZTQ4MDE4NjA4
Y2I5MzdiMDVlYS8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzIzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwIAMA0G
CSqGSIb3DQEBCwUAA4IBAQBshhOr9MmL1Mw7owAuZ6IzWrDsAPc7a+DcgR04gw4Z
rUotolp6rg1OQyBRCbjq2EaWgug0embP2GHjiUIYZHAukS9Ce78ua1oBkLUrFH8Y
COIVX3YI3uYDsK6svcJuDSeEthxoZT84nJWYjaB+OGAVprZzSyKF+lfuAk5/77KV
hMFoHbbD79wEc+FIKob2+/Hh9LPRl9D2YFaERTccvUhUBJPXWBgFC/DNMLasjF+2
7MIqk322zHGTAL+Pl5NMssjq43Yy8isk8I9N4fEOhuhHYPmMFfRPZuoaUfeyE3id
Sduab1Q0nPWTbInXq21nLk88OIOXu4M5ZRrLYoZR7Bg6
-----END CERTIFICATE-----
Generated at Fri Feb 21 10:51:11 2025 by rpki-client