Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
File: 323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier: aJdG1Mw8i1JLFO9FUOhY7qK/YFB9dmq/BpYDMbayhdo=
Subject key identifier: 32:A9:A6:69:5F:97:21:C2:E7:5C:89:B2:20:A1:8A:2E:79:3B:69:BA
Certificate issuer: /CN=fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd
Certificate serial: 4759F3DED9B74A7C15A4255EC2C393FF8E324C91
Authority key identifier: DA:31:D6:43:46:D9:E7:5E:2A:5A:B4:2D:4E:1A:39:16:9A:87:0F:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
Signing time: Tue 31 Jan 2023 17:36:42 +0000
ROA not before: Tue 31 Jan 2023 17:31:42 +0000
ROA not after: Tue 30 Jan 2024 17:36:42 +0000
asID: 399970
IP address blocks: 2602:fc3b:400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:59:f3:de:d9:b7:4a:7c:15:a4:25:5e:c2:c3:93:ff:8e:32:4c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd
Validity
Not Before: Jan 31 17:31:42 2023 GMT
Not After : Jan 30 17:36:42 2024 GMT
Subject: CN=32A9A6695F9721C2E75C89B220A18A2E793B69BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:de:ab:47:4e:99:91:2e:c8:6c:4a:39:6b:
f5:8a:b9:12:b1:56:8e:c2:2e:ca:12:74:39:41:1e:
ac:6b:7b:af:55:da:46:29:ad:e0:4f:86:d8:1c:0a:
09:ff:7a:b3:80:6a:e5:d2:c6:32:ec:cc:61:b0:07:
bd:1c:62:c5:bf:8b:c3:d6:13:7c:99:a2:24:5f:d0:
b5:75:2b:89:1a:45:6a:07:bc:58:14:34:f5:f8:64:
3e:43:a7:c7:e7:50:4e:ee:57:44:7f:ef:62:d5:15:
32:8e:62:b9:d9:54:46:bd:7a:3a:5d:13:3f:4e:ca:
99:fd:af:cb:2d:21:df:09:5b:ca:fa:32:b6:1d:33:
d0:9a:21:66:2b:0c:7b:f1:ea:b0:fa:0d:97:16:15:
a8:0b:0c:a4:ae:42:4c:54:0e:90:10:90:5f:ae:50:
ce:27:e7:0c:02:cd:06:ec:2c:4e:8a:c4:26:9c:0a:
f2:cd:52:1c:8c:08:b5:3f:46:7c:b9:c5:0e:b8:75:
58:f9:12:f3:da:77:9d:8d:5c:6a:0d:85:5d:80:cc:
06:af:fd:24:66:68:e5:4d:5e:f2:f9:a1:d5:34:a8:
de:f7:c4:ff:89:ff:24:41:38:3a:85:f9:5f:06:62:
11:9e:7c:3d:3f:bf:05:a9:f0:da:55:d8:11:5a:94:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A9:A6:69:5F:97:21:C2:E7:5C:89:B2:20:A1:8A:2E:79:3B:69:BA
X509v3 Authority Key Identifier:
keyid:DA:31:D6:43:46:D9:E7:5E:2A:5A:B4:2D:4E:1A:39:16:9A:87:0F:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/DA31D64346D9E75E2A5AB42D4E1A39169A870F35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:400::/48
Signature Algorithm: sha256WithRSAEncryption
04:9c:54:5f:eb:af:8c:77:db:9d:1c:ae:d7:11:16:a3:4a:d4:
3a:20:bc:66:c0:78:47:1c:bc:37:31:02:2b:da:e8:2d:28:3e:
da:04:26:64:61:ae:97:f4:70:52:e6:aa:51:9f:fd:1e:00:f0:
ea:9d:5c:85:23:8e:af:78:d7:d9:d3:2a:5f:e2:0d:06:32:f8:
8d:45:46:25:27:eb:8d:f5:b2:b7:0b:5f:50:36:68:18:98:5a:
4b:8a:ef:8a:be:d6:b2:3f:02:ce:10:f8:0a:2f:07:53:81:12:
5b:01:e4:bd:a4:af:4f:5a:e4:49:59:00:0e:57:99:f9:c7:73:
f9:df:48:03:d8:82:38:04:48:89:10:85:91:c3:19:34:ec:4e:
d4:dd:a7:44:07:d1:e5:3e:a5:cd:bb:ea:6b:dc:cc:43:90:c7:
25:6e:d2:c9:40:b3:91:d9:c2:6c:eb:25:13:0b:b5:7f:95:25:
ab:a7:8e:71:66:dc:66:87:47:63:d9:f9:63:ad:3e:c3:2e:60:
3a:4b:b5:04:ad:40:f1:71:97:8c:5e:80:8c:a4:c2:55:b4:b4:
14:d2:4b:31:c6:1b:28:79:e6:27:32:8d:bd:8c:0e:2e:33:8b:
49:cd:34:5b:47:c8:73:a4:15:5a:b1:b9:9f:38:65:78:3a:5d:
21:db:c0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:33:38 2025 by rpki-client