Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613834303a3a2f34332d3433203d3e203533333433.roa
File: 326130613a363034343a613834303a3a2f34332d3433203d3e203533333433.roa (raw, json)
Hash identifier: BY6+GEhFD/PUqx1YR9dxLwyybbZCnXdYBuNKFYmfqPw=
Subject key identifier: D4:6A:09:D3:33:6D:0A:78:9A:D0:0F:2F:46:BA:17:75:92:CB:1B:A4
Certificate issuer: /CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Certificate serial: 68E6BF6C62E1852FC4B7C51AC4B12A3916933279
Authority key identifier: 6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613834303a3a2f34332d3433203d3e203533333433.roa
Signing time: Thu 13 Feb 2025 02:43:52 +0000
ROA not before: Thu 13 Feb 2025 02:38:52 +0000
ROA not after: Thu 12 Feb 2026 02:43:52 +0000
asID: 53343
IP address blocks: 2a0a:6044:a840::/43 maxlen: 43
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e6:bf:6c:62:e1:85:2f:c4:b7:c5:1a:c4:b1:2a:39:16:93:32:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Validity
Not Before: Feb 13 02:38:52 2025 GMT
Not After : Feb 12 02:43:52 2026 GMT
Subject: CN=D46A09D3336D0A789AD00F2F46BA177592CB1BA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:79:16:5b:1a:35:e8:5b:17:1d:d2:d6:9a:
4e:5a:e4:54:4a:96:4d:3b:7a:09:67:64:11:56:d8:
c6:dc:94:49:db:8e:62:1b:1b:23:4b:a3:18:0c:ea:
05:cf:b9:01:db:cf:f1:8b:38:ce:39:a9:cf:1a:7f:
50:8a:6d:c0:4b:38:35:bb:c2:ed:15:36:f1:de:68:
77:f6:f7:a4:33:da:1f:bb:77:4b:c5:d3:54:29:ae:
3c:f9:ac:a8:93:c8:80:43:6f:23:22:d2:eb:40:7c:
d2:6b:87:68:b0:78:74:c2:fe:8f:c6:8e:e3:02:8e:
3e:c9:3d:80:6d:76:56:46:4c:48:2e:ef:1d:18:06:
a3:30:c2:ff:fd:bc:25:dd:81:12:03:4a:f0:c1:7e:
05:61:84:46:22:8f:e0:1c:9e:05:cb:62:20:31:b7:
c8:69:1c:87:85:d6:d3:56:a9:69:e1:25:48:ed:b0:
84:3a:78:af:c2:73:c3:30:7a:ba:83:0a:4a:04:7c:
4e:79:33:63:05:af:41:ac:9a:a5:52:2f:aa:cb:ee:
53:8b:21:b6:f9:19:18:62:53:33:a8:a4:95:5d:aa:
bb:90:fe:5a:6a:8a:50:8a:8e:73:c7:c3:f6:a4:99:
b1:2a:f1:93:79:fc:bd:75:34:e1:33:14:c8:c6:d8:
3c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6A:09:D3:33:6D:0A:78:9A:D0:0F:2F:46:BA:17:75:92:CB:1B:A4
X509v3 Authority Key Identifier:
keyid:6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613834303a3a2f34332d3433203d3e203533333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a840::/43
Signature Algorithm: sha256WithRSAEncryption
a4:42:6e:d1:04:ab:02:46:ad:9e:2f:3a:4f:e0:1b:9c:85:d3:
ee:57:f2:8d:24:a3:05:56:e0:67:fd:b2:80:35:54:2c:3a:c9:
af:c1:35:b0:0b:0c:68:32:9d:92:3f:fc:c1:60:5f:c5:de:0f:
78:de:84:e0:d6:08:9b:2b:ed:71:1e:65:b9:74:8b:2f:a0:03:
a0:f2:50:36:cf:9a:e2:15:f0:44:c8:73:5a:63:17:e5:d4:eb:
e8:b2:7a:fa:de:c1:cc:4c:4f:32:c3:31:6c:3c:dc:0b:a4:27:
a2:72:12:a4:c4:21:0d:39:e6:98:33:a7:93:23:05:f2:64:7e:
36:2a:4e:64:a3:b8:6a:7d:e1:8b:80:df:a5:bc:1a:2d:67:1a:
be:85:f7:89:bb:92:b7:50:39:b6:3a:19:ea:b2:14:02:44:5f:
43:14:eb:48:f4:bf:b4:f1:5c:02:c2:bf:c4:9c:35:64:3d:04:
0c:31:70:2b:89:1f:13:2f:bf:c4:6e:8e:ae:d9:7b:05:ea:5e:
5a:d9:1c:11:b9:00:33:0a:84:14:cd:9a:ab:2e:b4:69:c3:ae:
4a:12:0c:9e:4f:3f:09:a4:45:0b:cb:b6:86:b1:79:3a:65:56:
ad:10:30:08:75:87:1f:53:0c:06:ab:06:5f:4a:ba:02:76:4b:
96:f1:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:17:30 2025 by rpki-client