Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa
File: 326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa (raw, json)
Hash identifier: ieiPXHb0LqnIe4Sb9oMzov9gsD9eBVnGkXmjDt9fNGY=
Subject key identifier: B1:34:36:BA:06:DD:11:62:32:84:8A:CA:20:7F:44:76:33:9E:A1:28
Certificate issuer: /CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839
Certificate serial: 2D98EDA41D13D043CD9661749B3A86F7F448632A
Authority key identifier: F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa
Signing time: Wed 08 Jan 2025 11:07:43 +0000
ROA not before: Wed 08 Jan 2025 11:02:43 +0000
ROA not after: Wed 07 Jan 2026 11:07:43 +0000
asID: 53343
IP address blocks: 2a0a:6044:a880::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:98:ed:a4:1d:13:d0:43:cd:96:61:74:9b:3a:86:f7:f4:48:63:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839
Validity
Not Before: Jan 8 11:02:43 2025 GMT
Not After : Jan 7 11:07:43 2026 GMT
Subject: CN=B13436BA06DD116232848ACA207F4476339EA128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b1:ef:63:ad:7c:d4:d5:6a:e0:e8:94:42:c5:
c1:06:96:a1:75:da:92:3d:04:0e:46:d9:12:14:64:
63:22:e5:ba:04:a2:52:45:b2:ee:72:5d:95:72:f6:
ac:e9:62:5b:8b:61:10:e1:f1:00:91:e0:27:0c:a2:
2e:34:c0:92:97:ff:6d:0c:e3:6d:ec:13:63:48:82:
14:7b:2d:ce:50:f9:3d:2f:07:3a:42:39:df:25:a0:
79:7e:61:6d:c9:f7:ee:c7:54:5e:98:c2:2e:23:3e:
49:e0:7a:d2:a8:bd:4a:b8:08:4d:7a:ed:a5:d4:b0:
1e:d3:99:ff:c9:62:b0:8a:70:63:98:d0:4a:7f:37:
82:3f:e9:bb:85:ff:68:dd:ee:80:b2:df:05:cc:02:
c1:24:cf:11:aa:b4:cd:c9:18:97:9c:50:3c:59:32:
4e:94:09:b5:6e:4f:bd:9c:c0:fa:5b:04:09:74:46:
ca:cf:c9:3a:9b:53:81:5d:2f:de:4d:59:f2:2b:ba:
bb:3e:f1:61:2a:f2:ef:f0:ed:2c:46:42:b5:33:e9:
85:64:90:26:25:fa:a3:ca:4b:96:db:c4:8d:4d:0e:
1c:2b:41:9b:03:7b:5d:8b:5f:9b:59:8e:fd:02:da:
b9:e1:30:7c:2f:94:82:15:40:22:78:42:33:15:40:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:34:36:BA:06:DD:11:62:32:84:8A:CA:20:7F:44:76:33:9E:A1:28
X509v3 Authority Key Identifier:
keyid:F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a880::/44
Signature Algorithm: sha256WithRSAEncryption
7b:f1:ac:34:0a:84:6d:49:b4:12:d4:5c:20:3c:5f:a0:3f:eb:
46:d5:d9:52:3e:ce:27:2e:d0:d6:b2:89:55:f8:74:ac:d0:57:
f6:b1:0d:41:d3:1a:aa:70:bf:8c:d5:ea:5d:df:58:1d:93:f1:
52:bc:b2:1c:f2:9d:e2:b2:ab:eb:26:5d:fb:fb:49:2c:77:e1:
78:79:75:28:df:e6:e1:11:6b:75:59:87:1e:f4:cf:11:6a:85:
0f:14:5c:36:f6:60:e4:8d:12:54:13:7e:04:54:31:09:0d:81:
f7:43:02:c8:88:ac:70:3f:f7:6f:d6:86:14:51:b8:ac:0c:b7:
ab:07:74:08:25:4c:29:7a:84:f2:b8:4d:74:23:17:c1:19:bf:
f9:9b:da:73:99:da:08:d1:f1:36:5d:1e:1a:67:8e:5d:f5:d2:
7c:0d:0e:a7:5f:c3:50:61:de:65:c7:07:8a:4a:bc:4e:14:4e:
0e:8a:85:a7:bc:75:c0:3d:34:cd:1f:07:2a:76:ba:11:c9:30:
80:50:81:f6:e6:b8:c1:55:43:7d:c3:3b:3c:6f:51:c7:a0:fd:
60:0e:df:44:60:28:6e:15:b0:7d:7c:94:a0:71:70:c9:a5:12:
cf:9b:c2:c3:34:63:57:0d:0b:cf:eb:3e:51:b1:67:7d:97:5c:
0b:ca:14:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:14:10 2025 by rpki-client