Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
File: 323630323a666333623a3a2f33362d3336203d3e20333939393730.roa (raw, json)
Hash identifier: nBepYYlk233SL8FQBgjMoQ45cOLYLvsDqjDUcpgeIlE=
Subject key identifier: 46:3B:B7:78:0B:7A:08:A0:6C:03:AB:18:2F:93:6F:D8:0A:52:F3:AA
Certificate issuer: /CN=fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd
Certificate serial: 447D216D9984332F5522110870B6F1333921215B
Authority key identifier: DA:31:D6:43:46:D9:E7:5E:2A:5A:B4:2D:4E:1A:39:16:9A:87:0F:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
Signing time: Tue 31 Jan 2023 17:35:51 +0000
ROA not before: Tue 31 Jan 2023 17:30:51 +0000
ROA not after: Tue 30 Jan 2024 17:35:51 +0000
asID: 399970
IP address blocks: 2602:fc3b::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7d:21:6d:99:84:33:2f:55:22:11:08:70:b6:f1:33:39:21:21:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd
Validity
Not Before: Jan 31 17:30:51 2023 GMT
Not After : Jan 30 17:35:51 2024 GMT
Subject: CN=463BB7780B7A08A06C03AB182F936FD80A52F3AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:54:a3:f1:71:d0:13:a5:2b:13:4e:09:48:aa:
4c:e8:7b:e4:61:20:bd:08:7a:d1:fb:b5:43:c0:84:
4f:02:e6:ee:85:84:8c:54:98:4f:96:ef:7d:a0:a4:
44:25:e8:7a:fa:49:da:52:67:79:71:ae:ab:ec:81:
7e:41:a3:ef:dc:e8:f0:c7:4d:da:6f:8a:75:86:7c:
1c:33:30:a9:8b:61:e7:70:43:d3:67:64:64:26:cd:
5d:b0:c0:e5:72:12:65:9f:04:ac:6b:94:7e:8a:89:
8d:35:9f:60:48:94:4f:c4:d6:52:23:e5:4a:b2:79:
18:6c:f0:10:a2:e9:bf:8d:96:4c:18:60:50:77:45:
5b:2b:99:18:7f:92:5a:3d:1a:71:e5:77:fb:74:80:
32:06:76:bd:0b:32:37:60:6e:03:31:f0:ff:51:53:
65:56:b8:e1:55:85:3b:6e:9c:57:6c:c7:a3:30:5a:
6c:c6:2a:34:71:b9:2e:d3:1f:2e:fb:db:8b:3f:e2:
b6:bd:9f:12:64:0e:08:a0:0f:b6:b1:da:3a:2c:14:
45:c6:3d:28:e0:06:f3:30:2b:74:a7:94:68:77:04:
b4:82:10:6a:aa:72:99:2c:66:5c:1c:06:d6:eb:32:
ab:69:be:c8:91:07:e4:e5:27:9d:33:43:a4:b2:0f:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3B:B7:78:0B:7A:08:A0:6C:03:AB:18:2F:93:6F:D8:0A:52:F3:AA
X509v3 Authority Key Identifier:
keyid:DA:31:D6:43:46:D9:E7:5E:2A:5A:B4:2D:4E:1A:39:16:9A:87:0F:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/DA31D64346D9E75E2A5AB42D4E1A39169A870F35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b::/36
Signature Algorithm: sha256WithRSAEncryption
33:52:c0:fc:0d:29:b3:b7:a0:e8:ca:07:a4:8c:cc:6a:06:e9:
1c:9d:ae:ee:e3:b1:54:0e:8c:ac:46:91:98:ea:ce:db:63:a9:
c3:6e:9b:ff:a3:b3:3f:80:00:81:e5:ec:72:41:95:73:b5:6a:
7f:53:32:ed:ad:02:99:b6:b4:21:f4:19:8e:a9:89:23:e9:d5:
20:9c:a2:ca:5d:ca:17:e2:da:34:8e:d2:80:ae:2f:b1:97:ee:
b5:7b:90:fa:9e:14:25:8d:13:64:33:89:df:4d:e1:a6:4b:1d:
69:10:d5:3b:14:76:c0:d5:fe:28:5c:5b:cb:49:c6:bf:90:e2:
84:8f:ab:ae:33:02:e9:a8:7f:c0:6e:23:e3:21:c2:4a:ff:c2:
8d:ba:44:e0:54:7b:23:ec:e4:26:d5:21:8c:2c:36:8d:4d:71:
39:d3:99:f2:5f:8c:55:85:dc:a1:a1:3c:f8:57:98:7e:f0:73:
4b:84:61:5a:b5:6c:67:e5:d2:bc:d1:9e:5a:53:a1:e5:0e:c8:
fd:cc:13:d1:cc:ec:b5:dd:13:17:c7:8a:0b:70:4b:f8:58:74:
c1:62:79:96:12:2e:14:82:26:8a:16:be:24:49:35:84:c7:f6:
fd:95:4e:4d:e5:83:00:68:5f:4f:c9:31:34:d5:ad:9e:87:96:
e4:6c:1c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:47:19 2025 by rpki-client