Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa
File: 323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier: RvoVxexxXievO3oak9kNl27PZLYmMzQHliRZhR4KEIY=
Subject key identifier: 81:DE:A9:AA:B0:9F:AB:98:50:5E:7A:A8:F6:EB:B7:77:44:24:41:CF
Certificate issuer: /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial: 210BF6648C77BA6B9188DD66E18A97AE717B577B
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access: rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa
Signing time: Fri 18 Apr 2025 22:23:08 +0000
ROA not before: Fri 18 Apr 2025 22:18:08 +0000
ROA not after: Fri 17 Apr 2026 22:23:08 +0000
asID: 399970
IP address blocks: 2602:fc3b:b00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:0b:f6:64:8c:77:ba:6b:91:88:dd:66:e1:8a:97:ae:71:7b:57:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Validity
Not Before: Apr 18 22:18:08 2025 GMT
Not After : Apr 17 22:23:08 2026 GMT
Subject: CN=81DEA9AAB09FAB98505E7AA8F6EBB777442441CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:ef:51:dd:44:6a:9a:90:c7:34:fb:42:1b:
b1:a1:5b:46:c7:96:24:02:5e:a5:4e:e9:59:93:22:
f2:dd:70:b9:98:3a:0b:16:82:f6:9e:41:b5:0b:96:
58:1c:30:70:e8:1a:f9:cf:81:82:f5:48:93:50:2c:
75:4b:ff:90:80:3b:97:e1:db:e3:d3:5a:da:52:97:
7e:88:97:77:72:17:0e:1e:c5:6a:69:ac:d7:b6:bd:
40:0a:02:86:fd:d9:d4:b1:2f:6c:29:14:fb:7f:01:
97:3d:5b:80:8e:6c:f8:84:3c:75:d5:38:42:b1:92:
03:a0:ee:80:2d:19:7f:1b:b2:ec:fe:17:f8:15:f0:
ee:5b:5f:a8:e8:27:5c:70:37:98:ec:9a:d9:e7:1d:
33:af:10:16:a7:7b:0a:50:a4:87:36:41:61:72:e3:
70:24:a7:9a:04:d3:b0:eb:35:ba:47:8d:62:07:47:
4d:87:ba:cd:0c:0f:e9:c2:44:8b:46:6e:b4:55:55:
65:c8:fe:ea:aa:ba:6b:95:16:ad:f4:5a:7c:5c:45:
95:39:f4:ec:69:3e:d5:d8:46:a7:39:1d:a6:08:df:
f3:e1:60:83:27:31:dc:59:8a:68:e0:35:41:cf:28:
0d:c7:3e:4e:69:7e:2c:e4:ca:e1:eb:b5:7b:d4:01:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DE:A9:AA:B0:9F:AB:98:50:5E:7A:A8:F6:EB:B7:77:44:24:41:CF
X509v3 Authority Key Identifier:
keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:b00::/48
Signature Algorithm: sha256WithRSAEncryption
01:42:06:c6:a9:5f:2d:84:5b:19:0b:98:f7:9a:73:87:18:ed:
d8:1f:16:16:0c:97:15:32:e0:dc:b5:a4:a5:ab:4f:b2:cf:83:
da:fb:cd:38:71:f4:af:f5:07:68:92:da:0c:c0:8e:48:7c:c6:
47:88:93:99:d1:3d:87:7d:59:84:f0:b6:52:d8:e4:f7:9d:32:
b4:8f:5e:08:13:4f:03:55:50:b8:f6:19:03:cd:bd:61:ad:1b:
80:5e:d5:02:70:3f:ae:70:3a:71:d4:8b:ad:c0:12:6c:9c:2b:
a3:cf:eb:2d:5a:da:93:1c:09:77:ca:48:ec:12:3e:d7:51:73:
b6:fc:9f:1c:90:39:d0:59:fd:8b:b7:76:ed:b1:4e:01:6e:e6:
d0:aa:63:bb:67:05:55:52:53:9b:8a:42:56:24:eb:96:8f:99:
d4:02:18:65:17:39:be:a7:eb:fe:45:87:5d:03:a7:83:31:53:
68:00:6d:43:c7:cb:d6:ad:09:69:1e:07:33:01:47:24:2c:b0:
64:3b:51:81:4d:d4:b6:19:76:5d:97:8d:c1:27:2c:56:e8:2c:
48:9a:00:89:5c:cd:f0:f9:ce:ff:ac:cc:31:1e:b5:e3:b6:73:
cc:6a:68:90:51:79:3e:8a:5c:75:f8:92:bb:25:90:69:46:15:
08:dc:79:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:41:23 2025 by rpki-client