Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa
File: 323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier: jRFse5eGmpwATdzyXH1HcUFyDCpeWAla7mpyS9znD4Y=
Subject key identifier: 94:3D:2E:70:06:FD:9C:BD:7B:F9:14:AA:4B:F6:18:8F:77:1E:28:47
Certificate issuer: /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial: 5B8EB1CB80CCC2018733F3F4343194FEAB5A76EE
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access: rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa
Signing time: Fri 18 Apr 2025 22:23:06 +0000
ROA not before: Fri 18 Apr 2025 22:18:06 +0000
ROA not after: Fri 17 Apr 2026 22:23:06 +0000
asID: 399970
IP address blocks: 2602:fc3b:a00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:8e:b1:cb:80:cc:c2:01:87:33:f3:f4:34:31:94:fe:ab:5a:76:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Validity
Not Before: Apr 18 22:18:06 2025 GMT
Not After : Apr 17 22:23:06 2026 GMT
Subject: CN=943D2E7006FD9CBD7BF914AA4BF6188F771E2847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:6f:36:70:5c:2c:34:35:d2:d3:75:bd:8c:
cf:67:95:60:39:55:53:a1:31:c9:f7:76:ce:4f:8a:
9c:cd:29:6b:1b:8b:49:c3:ba:63:a4:2b:f8:b6:ab:
01:45:dc:36:c8:59:36:05:d0:c7:7a:f3:ee:c8:c7:
d1:f3:cc:b7:9a:ed:26:8f:f1:b4:76:0c:93:1e:5e:
79:89:10:05:84:5a:44:3a:a4:9f:4c:6b:15:bc:0c:
ee:bd:7e:91:eb:8c:7b:95:11:0b:a9:bd:40:e1:ae:
0d:31:b4:45:ee:81:7e:3c:96:01:20:82:1e:dd:78:
0b:6e:dc:bb:7d:99:0d:3c:a5:4c:45:13:97:b0:bc:
fd:80:24:30:f3:59:98:cf:d0:10:79:cc:60:ac:04:
02:f2:f4:c5:45:66:f2:b4:3c:82:35:c9:7f:de:c5:
4e:f4:c2:1d:29:07:59:53:b2:40:19:88:e4:e8:ff:
1c:bb:09:9a:6f:0b:0f:cb:40:55:4e:9b:56:0e:62:
2b:d4:26:4a:ba:ac:3c:ac:92:02:de:74:8d:10:1b:
31:2c:cf:0c:5e:8a:e2:cb:8a:34:ff:47:70:fe:06:
3b:6e:e2:23:ab:2f:1b:1f:5a:90:87:80:36:c6:ea:
0a:be:e2:99:1a:25:7a:13:ac:b4:b1:b6:75:06:1e:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3D:2E:70:06:FD:9C:BD:7B:F9:14:AA:4B:F6:18:8F:77:1E:28:47
X509v3 Authority Key Identifier:
keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:a00::/48
Signature Algorithm: sha256WithRSAEncryption
4b:f1:b6:ea:54:0a:35:71:4a:6a:cf:51:55:aa:19:dd:9f:f1:
df:f2:ac:bc:bb:41:b9:7c:c6:57:91:6d:39:2a:29:4e:b9:f6:
de:a9:e8:9d:21:e5:a1:23:6a:33:19:e8:f6:b8:b9:97:86:0d:
a8:44:2e:24:5d:b7:dc:2e:01:97:a5:63:dc:26:ad:5e:84:34:
07:3b:72:8d:3e:21:26:c4:94:ec:b9:a6:70:ad:70:d5:5d:86:
f4:9d:61:54:07:b7:53:f3:4c:19:79:2d:dd:a6:f3:4b:f9:ac:
a1:70:0a:8e:79:50:c3:7e:30:b5:c4:68:bc:9c:a7:05:dd:88:
e5:e0:d7:a3:f5:61:cd:61:15:e3:00:90:96:47:e5:f5:9c:c1:
12:1d:f3:ae:b6:05:2c:8a:e2:f0:3f:14:7e:04:41:90:4a:19:
d0:eb:a9:61:4d:14:b0:f9:44:4b:45:11:f9:ef:4b:4d:33:5c:
86:79:dd:ab:ba:7d:f1:30:68:0d:39:95:29:82:c2:b9:c6:e9:
0b:24:3c:41:0b:45:6f:bb:35:00:c8:d5:d1:ca:e3:c9:86:e7:
2b:b2:fc:3e:79:00:10:a2:81:d7:e8:cc:9b:74:97:d4:77:d9:
78:c7:f3:12:60:46:58:99:ea:78:e6:71:df:b0:1e:50:78:e9:
5f:3f:a7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:52:40 2025 by rpki-client