Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
File: 323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier: QLCdDl/3URHCGH8kfqBFi8JiQ/lltDadJ7sUy+IJvf4=
Subject key identifier: 89:27:60:0A:8A:C2:21:3A:BA:C2:C3:A3:23:DC:AB:A4:6A:BA:DF:CD
Certificate issuer: /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial: 4C435024A33BD98E35E25D5B21EB9AF626B8C32C
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access: rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
Signing time: Fri 18 Apr 2025 22:22:37 +0000
ROA not before: Fri 18 Apr 2025 22:17:37 +0000
ROA not after: Fri 17 Apr 2026 22:22:37 +0000
asID: 399970
IP address blocks: 2602:fc3b:200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:43:50:24:a3:3b:d9:8e:35:e2:5d:5b:21:eb:9a:f6:26:b8:c3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Validity
Not Before: Apr 18 22:17:37 2025 GMT
Not After : Apr 17 22:22:37 2026 GMT
Subject: CN=8927600A8AC2213ABAC2C3A323DCABA46ABADFCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:ef:81:ad:10:dc:52:f5:a8:76:8c:b1:90:
bf:90:1b:fb:8d:a3:96:d0:be:e3:96:f1:89:29:eb:
a4:4e:7e:98:04:73:05:10:11:e8:7d:a2:18:ce:c6:
8a:91:6e:7f:ea:4c:d6:d2:69:6f:3a:38:87:1f:16:
7f:a6:74:a2:25:13:3b:56:f1:c4:51:26:1e:43:00:
3d:43:bc:97:19:87:1b:04:12:4c:a6:fc:b5:62:b4:
b1:f3:83:c6:af:d1:57:b7:65:a0:0c:e1:a6:9a:7c:
1a:09:05:01:c0:15:93:06:a7:2f:5a:93:4b:ff:ec:
b0:2f:f7:22:25:cf:4d:25:bf:27:d5:fa:67:d8:82:
f1:b7:21:98:54:6f:86:f4:60:e8:ce:f5:42:4f:8e:
23:ca:77:d7:b4:5d:40:2f:2b:10:56:70:25:5e:ad:
5d:89:38:70:ad:59:0c:7d:0a:d8:ce:ee:16:a3:3b:
d5:03:bd:92:d5:73:03:38:04:a5:f2:ec:31:00:e5:
a8:5b:fd:08:a1:ff:c9:07:42:13:9c:4e:fd:f1:1f:
f0:6b:e4:65:70:2e:da:fc:d2:92:49:cc:8d:0f:c2:
d9:82:61:fb:27:6c:5e:98:4d:4e:28:8a:9a:ca:fc:
fd:b7:31:8b:75:0c:b3:64:98:73:d6:1a:86:1c:c5:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:27:60:0A:8A:C2:21:3A:BA:C2:C3:A3:23:DC:AB:A4:6A:BA:DF:CD
X509v3 Authority Key Identifier:
keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:200::/48
Signature Algorithm: sha256WithRSAEncryption
1b:d7:cf:96:63:b0:94:3b:c8:11:48:d7:b2:3a:b0:1f:bb:bc:
ad:6f:e0:b4:07:9c:ff:bd:4f:3a:11:ba:3b:58:d1:f1:cf:ff:
0b:c9:6f:08:25:c0:41:e7:2c:e6:9d:e7:71:f2:b6:ec:e6:a8:
45:a9:83:30:6d:be:44:3c:3b:09:eb:54:2d:98:37:7a:7d:b1:
7d:7e:23:88:62:31:9d:be:fa:87:89:a3:f0:60:ef:84:9e:5f:
84:e9:b1:7a:d2:25:81:59:ff:23:ff:6b:72:89:19:5f:35:06:
5b:13:5d:94:84:1e:0f:09:0e:d5:33:ac:7a:19:c7:82:07:8b:
78:ba:97:7d:8d:38:64:a4:b5:c0:e2:61:da:8e:83:77:ff:f5:
a6:49:25:1e:2b:8d:34:cc:07:1c:e5:dc:12:24:a3:fb:74:10:
ca:fb:37:5a:be:2c:33:9c:ad:7b:64:29:e6:7a:02:74:2b:e2:
be:8e:84:37:15:71:67:14:94:36:bb:c8:d9:85:12:28:14:52:
3d:ec:1c:04:ef:b7:3b:83:7d:2b:b5:9e:14:8d:40:de:81:a8:
e8:7e:6c:8f:8b:01:78:b2:c0:c4:6d:fd:29:36:25:2a:ae:4b:
8c:4b:fc:ec:3f:6b:35:cf:60:e6:53:7b:06:da:19:3c:d7:0d:
98:cd:56:7d
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUTENQJKM72Y414l1bIeua9ia4wywwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjBjMmVmZmFiMDIyYjcyMDJjMTI0YWMw
MzY0YTNmMmY5MmYxZTdmYWEwHhcNMjUwNDE4MjIxNzM3WhcNMjYwNDE3MjIyMjM3
WjAzMTEwLwYDVQQDEyg4OTI3NjAwQThBQzIyMTNBQkFDMkMzQTMyM0RDQUJBNDZB
QkFERkNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAzvga0Q3FL1
qHaMsZC/kBv7jaOW0L7jlvGJKeukTn6YBHMFEBHofaIYzsaKkW5/6kzW0mlvOjiH
HxZ/pnSiJRM7VvHEUSYeQwA9Q7yXGYcbBBJMpvy1YrSx84PGr9FXt2WgDOGmmnwa
CQUBwBWTBqcvWpNL/+ywL/ciJc9NJb8n1fpn2ILxtyGYVG+G9GDozvVCT44jynfX
tF1ALysQVnAlXq1diThwrVkMfQrYzu4WozvVA72S1XMDOASl8uwxAOWoW/0Iof/J
B0ITnE798R/wa+RlcC7a/NKSScyND8LZgmH7J2xemE1OKIqayvz9tzGLdQyzZJhz
1hqGHMU1/QIDAQABo4ICvTCCArkwHQYDVR0OBBYEFIknYAqKwiE6usLDoyPcq6Rq
ut/NMB8GA1UdIwQYMBaAFLegdNRHQhedQQPy+SuN1745V1zVMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRjYWI4MTdiNmJlMTQ5YzQ4M2QxOTQzMGUyNTQ1MzEwLzAv
QjdBMDc0RDQ0NzQyMTc5RDQxMDNGMkY5MkI4REQ3QkUzOTU3NUNENS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzljNjRkNGFkLTg0MWItNDBhOS05NTdjLTNjZDFmZTZiYjE1ZC9mY2Iy
MGY1OTY2MGMyZWZmYWIwMjJiNzIwMmMxMjRhYzAzNjRhM2YyZjkyZjFlN2ZhYS5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS80Y2FiODE3YjZiZTE0OWM0ODNkMTk0
MzBlMjU0NTMxMC8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzIzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwIAMA0G
CSqGSIb3DQEBCwUAA4IBAQAb18+WY7CUO8gRSNeyOrAfu7ytb+C0B5z/vU86Ebo7
WNHxz/8LyW8IJcBB5yzmnedx8rbs5qhFqYMwbb5EPDsJ61QtmDd6fbF9fiOIYjGd
vvqHiaPwYO+Enl+E6bF60iWBWf8j/2tyiRlfNQZbE12UhB4PCQ7VM6x6GceCB4t4
upd9jThkpLXA4mHajoN3//WmSSUeK400zAcc5dwSJKP7dBDK+zdaviwznK17ZCnm
egJ0K+K+joQ3FXFnFJQ2u8jZhRIoFFI97BwE77c7g30rtZ4UjUDegajofmyPiwF4
ssDEbf0pNiUqrkuMS/zsP2s1z2DmU3sG2hk81w2YzVZ9
-----END CERTIFICATE-----
Generated at Sun May 11 00:49:33 2025 by rpki-client