Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613834303a3a2f34362d3436203d3e203533333433.roa
File: 326130613a363034343a613834303a3a2f34362d3436203d3e203533333433.roa (raw, json)
Hash identifier: cWy6hH8z0Stz3hvANwE/cHPzw2sGZwonnP+PwrD+Iqk=
Subject key identifier: 39:01:29:73:03:45:A3:56:3B:23:35:2D:8A:4E:01:56:EC:D1:1B:48
Certificate issuer: /CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Certificate serial: 5EE34B0B7B165423DE48F2422DF80E9EB4D42F87
Authority key identifier: 6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613834303a3a2f34362d3436203d3e203533333433.roa
Signing time: Thu 13 Feb 2025 02:44:24 +0000
ROA not before: Thu 13 Feb 2025 02:39:24 +0000
ROA not after: Thu 12 Feb 2026 02:44:24 +0000
asID: 53343
IP address blocks: 2a0a:6044:a840::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e3:4b:0b:7b:16:54:23:de:48:f2:42:2d:f8:0e:9e:b4:d4:2f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Validity
Not Before: Feb 13 02:39:24 2025 GMT
Not After : Feb 12 02:44:24 2026 GMT
Subject: CN=390129730345A3563B23352D8A4E0156ECD11B48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:65:d6:95:33:2f:43:8d:40:59:a9:48:33:
64:bc:d6:2b:f4:b1:7a:20:10:b6:d3:08:65:63:8a:
14:4e:2b:02:e2:75:2d:c9:d2:19:cc:2a:95:ce:a3:
3f:c5:1d:75:23:8c:8d:03:0a:fe:e7:1b:12:aa:38:
3d:e6:de:37:4c:74:4d:89:5e:d5:51:a8:e4:5e:e9:
bb:ad:15:46:c5:ac:66:af:9d:4c:81:b2:60:9d:5b:
23:19:66:80:f1:f2:af:0e:07:2e:78:3f:d4:7f:d1:
9a:d6:3f:c8:b9:23:7a:5f:3e:fc:be:d7:29:5d:33:
7b:ea:0d:fc:e1:07:0a:b4:6a:25:3f:50:49:d1:c9:
50:a8:9d:72:a6:ae:1b:4c:14:22:90:f2:b3:96:18:
5e:7e:49:eb:33:fb:43:12:4a:61:eb:a1:21:d0:ef:
a6:29:86:ce:fa:c1:61:1b:f9:32:9d:4a:13:00:16:
d8:ea:ca:dc:db:76:ce:18:fc:a6:9f:f8:5f:2f:ad:
63:b3:4f:81:57:08:f7:69:26:dc:16:ad:2c:0f:55:
b0:1d:ba:0e:f2:7b:ed:d4:8c:77:55:4b:aa:66:37:
e3:4d:08:be:2f:92:5c:4f:42:58:59:3e:ba:9f:fc:
14:0b:cc:44:e4:0e:75:cc:10:d0:18:92:d3:18:89:
28:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:01:29:73:03:45:A3:56:3B:23:35:2D:8A:4E:01:56:EC:D1:1B:48
X509v3 Authority Key Identifier:
keyid:6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613834303a3a2f34362d3436203d3e203533333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a840::/46
Signature Algorithm: sha256WithRSAEncryption
16:f2:0c:8b:25:a2:b1:91:8c:c6:54:4a:45:2b:eb:66:09:b4:
7f:ef:98:8c:5c:e1:97:f9:99:7f:eb:16:7c:eb:1d:77:a8:1c:
4e:e8:c3:82:7b:8a:3b:c6:ad:32:3a:7b:b6:a0:fa:1a:39:bb:
41:bb:3f:f9:f8:d7:91:8b:2e:db:46:e0:5c:a7:0c:db:15:2e:
5d:d7:f8:e3:3f:ae:38:04:e6:83:ca:84:42:3d:89:47:b9:16:
54:74:cd:a1:8b:13:16:8a:8e:fa:76:ff:b0:cf:a9:89:18:57:
f7:ac:4d:5e:4a:40:69:96:70:42:83:2f:ce:d0:df:73:1a:50:
08:0e:de:da:5a:16:9e:1b:7a:be:5b:11:a2:3f:75:e4:48:a3:
dc:da:3f:7a:20:75:41:6c:3e:c9:62:64:e2:a8:39:6d:4b:c6:
f1:ba:48:85:58:90:09:33:cd:f1:1b:9b:d7:06:94:ac:89:c3:
f4:52:a8:15:01:20:a5:64:6d:12:7b:10:a6:a7:da:81:f9:c4:
81:e3:fd:b4:63:9f:42:35:fa:ca:9d:55:c2:9a:21:ff:ba:bd:
59:4b:3f:a7:1c:48:ea:93:b4:a1:96:4d:38:e7:5f:9d:6d:e6:
20:14:28:78:a4:c5:9e:f7:ed:71:85:08:83:25:5b:83:c6:1d:
f9:dc:55:71
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUXuNLC3sWVCPeSPJCLfgOnrTUL4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI3RDY2QzIzMTQxRTc3OUI1RjQ5QkRCMzBEOTlBMTVG
QzQzODkxQjAeFw0yNTAyMTMwMjM5MjRaFw0yNjAyMTIwMjQ0MjRaMDMxMTAvBgNV
BAMTKDM5MDEyOTczMDM0NUEzNTYzQjIzMzUyRDhBNEUwMTU2RUNEMTFCNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbT2XWlTMvQ41AWalIM2S81iv0
sXogELbTCGVjihROKwLidS3J0hnMKpXOoz/FHXUjjI0DCv7nGxKqOD3m3jdMdE2J
XtVRqORe6butFUbFrGavnUyBsmCdWyMZZoDx8q8OBy54P9R/0ZrWP8i5I3pfPvy+
1yldM3vqDfzhBwq0aiU/UEnRyVConXKmrhtMFCKQ8rOWGF5+Sesz+0MSSmHroSHQ
76Yphs76wWEb+TKdShMAFtjqytzbds4Y/Kaf+F8vrWOzT4FXCPdpJtwWrSwPVbAd
ug7ye+3UjHdVS6pmN+NNCL4vklxPQlhZPrqf/BQLzETkDnXMENAYktMYiSjZAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUOQEpcwNFo1Y7IzUtik4BVuzRG0gwHwYDVR0j
BBgwFoAUa31mwjFB53m19JvbMNmaFfxDiRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvMy82QjdENjZDMjMx
NDFFNzc5QjVGNDlCREIzMEQ5OUExNUZDNDM4OTFCLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzZCN0Q2NkMyMzE0MUU3NzlCNUY0OUJEQjMwRDk5QTE1RkM0Mzg5MUIu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQz
ZDU4MzZmZjFiMjkvMy8zMjYxMzA2MTNhMzYzMDM0MzQzYTYxMzgzNDMwM2EzYTJm
MzQzNjJkMzQzNjIwM2QzZTIwMzUzMzMzMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioKYESoQDAN
BgkqhkiG9w0BAQsFAAOCAQEAFvIMiyWisZGMxlRKRSvrZgm0f++YjFzhl/mZf+sW
fOsdd6gcTujDgnuKO8atMjp7tqD6Gjm7Qbs/+fjXkYsu20bgXKcM2xUuXdf44z+u
OATmg8qEQj2JR7kWVHTNoYsTFoqO+nb/sM+piRhX96xNXkpAaZZwQoMvztDfcxpQ
CA7e2loWnht6vlsRoj915Eij3No/eiB1QWw+yWJk4qg5bUvG8bpIhViQCTPN8Rub
1waUrInD9FKoFQEgpWRtEnsQpqfagfnEgeP9tGOfQjX6yp1Vwpoh/7q9WUs/pxxI
6pO0oZZNOOdfnW3mIBQoeKTFnvftcYUIgyVbg8Yd+dxVcQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:54:10 2025 by rpki-client