Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa
File: 326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa (raw, json)
Hash identifier: gmd4m0SeuJjWvfJO+FAdmNrRqnHVsJB1sR4hYLzeA2Q=
Subject key identifier: 36:56:4F:7E:B6:20:3B:8A:2F:30:D5:B5:99:2F:3E:35:E1:93:43:FE
Certificate issuer: /CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Certificate serial: 66ECC61E154DA95CD8498E8ACFCC15D87D8A2A8E
Authority key identifier: 6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa
Signing time: Tue 11 Feb 2025 18:46:10 +0000
ROA not before: Tue 11 Feb 2025 18:41:10 +0000
ROA not after: Tue 10 Feb 2026 18:46:10 +0000
asID: 53343
IP address blocks: 2a0a:6044:a880::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ec:c6:1e:15:4d:a9:5c:d8:49:8e:8a:cf:cc:15:d8:7d:8a:2a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Validity
Not Before: Feb 11 18:41:10 2025 GMT
Not After : Feb 10 18:46:10 2026 GMT
Subject: CN=36564F7EB6203B8A2F30D5B5992F3E35E19343FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:a4:d5:40:7b:1e:55:c1:e6:ec:e3:b7:00:
07:b2:50:22:c5:17:d0:f1:58:9d:e2:3a:a8:db:55:
ba:e0:5e:33:93:f4:f1:eb:17:6d:16:71:24:b7:47:
8b:08:b2:9d:d3:4b:0c:d4:4a:e2:fb:5c:94:5e:d1:
09:e1:09:44:fb:de:f6:92:49:60:13:b0:ec:87:40:
f4:21:4e:59:08:3e:44:e4:31:a4:70:22:a7:6d:4f:
b4:aa:2f:cd:5b:df:be:ea:7d:24:85:20:03:d5:f3:
06:96:3c:fe:6d:ae:c4:f5:00:c2:a5:56:1b:00:52:
e0:1c:92:78:31:b7:93:e1:77:5d:38:b5:a3:36:6b:
9b:69:a0:81:69:2c:2d:7c:4c:63:ae:c8:e9:5a:1a:
c2:7c:7d:b7:57:56:ad:fd:c3:ce:06:82:9a:40:89:
c5:d2:b6:ea:fa:ed:7b:07:10:ee:2e:00:06:74:c6:
81:77:ee:3e:e6:cc:03:a5:de:9a:f3:9d:b2:97:ec:
45:c4:ad:99:3b:2f:77:31:8c:44:d0:3f:f8:c6:ac:
c7:ca:f6:67:6e:b9:d1:64:b2:f4:b1:58:56:cc:d5:
4e:c4:63:cd:65:cc:c3:b8:e2:1e:60:68:09:6a:ef:
b3:5d:b4:e7:13:4e:12:c5:c1:be:61:68:2a:0b:b3:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:56:4F:7E:B6:20:3B:8A:2F:30:D5:B5:99:2F:3E:35:E1:93:43:FE
X509v3 Authority Key Identifier:
keyid:6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a880::/44
Signature Algorithm: sha256WithRSAEncryption
89:e8:a5:1a:df:01:86:85:77:8b:41:31:b9:d9:cf:31:45:fa:
ed:a5:f4:46:50:c0:cf:b0:29:b8:f8:55:cf:b5:2e:9f:6a:4c:
cb:3d:b7:09:b9:d8:b5:4d:25:fe:ba:ad:2b:cb:1d:90:f9:05:
ac:3a:eb:b9:bb:76:46:91:8e:1f:e1:08:75:69:fb:b8:29:53:
1c:c0:3c:b2:9e:3a:57:38:e6:c1:df:8e:16:ae:52:07:a1:71:
2f:98:44:05:9c:95:98:99:ef:97:b6:53:b9:81:04:46:2b:c4:
23:8b:26:4f:06:1b:cf:12:31:1e:0b:be:40:74:32:66:aa:c6:
3b:8a:20:f2:f4:d1:79:5c:c5:ac:cb:98:d9:08:05:bd:ff:56:
f1:9e:e2:60:16:7c:a1:f3:48:a7:9c:7d:ae:d4:f9:6b:35:82:
30:e2:e1:df:6c:8b:18:64:ef:9a:58:1f:d8:a0:5b:66:c1:82:
2f:d9:34:d9:f9:f5:d4:33:18:aa:4a:7f:c4:d6:ab:62:b1:70:
a5:e3:11:27:2a:eb:ee:57:a0:79:69:99:b5:44:51:27:31:3a:
7d:d9:92:76:fc:5c:a1:b1:c2:5d:31:30:fa:8b:84:77:c3:36:
8d:5b:de:24:73:a2:7b:56:d7:be:c3:59:53:44:08:c2:29:07:
ba:d0:98:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:53:15 2025 by rpki-client