Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613830303a3a2f34332d3433203d3e203533333433.roa
File: 326130613a363034343a613830303a3a2f34332d3433203d3e203533333433.roa (raw, json)
Hash identifier: yyyoxGppzrPBpHyS7wtUfV1AEfqPV4X0yk1eLPwNlw4=
Subject key identifier: 69:DD:FC:59:58:6F:EF:C6:23:C0:F0:B0:78:D9:A7:6F:B0:FC:00:16
Certificate issuer: /CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Certificate serial: 5087C0727B51EE019B9BFA1ABBC102436A2D85FB
Authority key identifier: 6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613830303a3a2f34332d3433203d3e203533333433.roa
Signing time: Thu 13 Feb 2025 02:42:12 +0000
ROA not before: Thu 13 Feb 2025 02:37:12 +0000
ROA not after: Thu 12 Feb 2026 02:42:12 +0000
asID: 53343
IP address blocks: 2a0a:6044:a800::/43 maxlen: 43
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:87:c0:72:7b:51:ee:01:9b:9b:fa:1a:bb:c1:02:43:6a:2d:85:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Validity
Not Before: Feb 13 02:37:12 2025 GMT
Not After : Feb 12 02:42:12 2026 GMT
Subject: CN=69DDFC59586FEFC623C0F0B078D9A76FB0FC0016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:46:18:23:03:06:ed:f0:9a:38:30:af:84:
6f:7b:50:ec:0f:e8:e6:03:c6:75:04:04:61:32:0b:
34:fa:c0:11:0b:2d:fb:42:cf:20:a7:cd:63:77:d3:
92:45:b3:d4:28:4a:01:0b:4b:58:31:d4:73:82:f3:
77:16:a7:e4:96:c0:05:04:db:d6:3a:27:f3:e7:17:
eb:cb:08:5a:0a:6e:37:48:f0:cc:be:cf:8a:ca:c0:
98:8a:51:f9:c5:f3:a1:ad:b5:92:d4:7e:5d:d0:08:
05:7f:18:97:3c:06:1a:5c:bc:d0:91:aa:c9:02:a1:
8f:e7:03:b2:11:6f:ac:de:a9:c8:df:3b:9a:59:76:
20:2b:48:d2:3c:b4:0b:5a:40:69:d6:65:75:c5:d1:
f2:6a:65:8a:34:bd:db:6c:68:3d:54:87:b3:c0:6a:
b4:0e:35:9c:96:8f:68:5b:a3:9f:8e:91:90:0c:ef:
fb:81:77:ef:e6:cf:aa:c4:ec:9d:6e:e0:ea:af:ab:
07:4f:7f:08:33:2c:c5:f3:2e:7a:03:2c:c7:4d:5c:
27:58:74:a5:77:fa:0a:85:51:52:e0:8f:6b:1e:dc:
ff:26:e9:4f:7e:54:71:68:25:06:8f:03:5f:f6:50:
82:b0:ae:97:7a:d6:4a:97:cc:4d:f9:02:e2:6d:2f:
45:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DD:FC:59:58:6F:EF:C6:23:C0:F0:B0:78:D9:A7:6F:B0:FC:00:16
X509v3 Authority Key Identifier:
keyid:6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613830303a3a2f34332d3433203d3e203533333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a800::/43
Signature Algorithm: sha256WithRSAEncryption
ab:12:09:56:37:68:bf:31:34:73:2b:fc:ce:d8:e8:4f:a6:c9:
20:ce:fe:5f:e6:e7:3e:34:c6:0c:14:75:be:eb:e1:0c:94:38:
4b:42:f8:23:63:bd:ba:d6:68:e1:73:4a:f0:fb:cd:43:e9:cc:
1c:1f:91:1f:0a:d7:73:15:c3:97:00:40:3c:5c:66:e8:6a:5d:
0b:dc:5c:1a:c8:44:28:35:6f:80:eb:23:00:ed:7c:a2:a0:00:
e7:cd:10:31:db:24:6b:e0:69:05:ed:6f:28:ea:2c:09:03:84:
80:14:4f:2c:37:e4:9a:39:e7:ad:3a:f1:34:b2:5c:78:9e:2b:
cb:95:46:d6:24:1a:99:63:67:23:f9:53:e3:94:d0:6d:7a:fa:
53:d3:c0:30:fb:67:22:23:60:65:4d:25:c7:01:4c:b5:27:f9:
fa:7e:3c:54:45:fa:29:8f:f0:48:06:02:c0:19:ec:29:71:4b:
32:f3:69:a6:74:25:99:b4:2a:4f:47:55:30:72:13:59:e9:65:
ab:15:dd:d7:93:8c:0f:13:f8:33:79:0b:d9:42:ec:79:b8:07:
8a:fb:ae:f4:81:35:a3:98:2e:42:19:17:5f:05:af:2a:ec:b1:
c0:a5:c2:ca:a1:ab:3e:f8:ef:60:8d:5b:e4:b7:9c:a4:e6:f6:
96:89:dc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:19:54 2025 by rpki-client