Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613866303a3a2f34342d3434203d3e203533333433.roa
File: 326130613a363034343a613866303a3a2f34342d3434203d3e203533333433.roa (raw, json)
Hash identifier: FW30thSU/B4DifikxnnGU17OdvYzeKNmhH/gqj1T/5g=
Subject key identifier: E6:DD:22:77:CB:9C:54:DC:14:39:A2:DC:3B:7E:D7:1A:46:13:24:7D
Certificate issuer: /CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839
Certificate serial: 38B0221D9555B082AC5605852D90D0F4305B3464
Authority key identifier: F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613866303a3a2f34342d3434203d3e203533333433.roa
Signing time: Wed 08 Jan 2025 11:07:43 +0000
ROA not before: Wed 08 Jan 2025 11:02:43 +0000
ROA not after: Wed 07 Jan 2026 11:07:43 +0000
asID: 53343
IP address blocks: 2a0a:6044:a8f0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b0:22:1d:95:55:b0:82:ac:56:05:85:2d:90:d0:f4:30:5b:34:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839
Validity
Not Before: Jan 8 11:02:43 2025 GMT
Not After : Jan 7 11:07:43 2026 GMT
Subject: CN=E6DD2277CB9C54DC1439A2DC3B7ED71A4613247D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:bc:21:a5:56:cd:8b:a4:f2:f1:37:b9:e7:
ca:2c:53:94:c7:78:83:a7:46:06:2d:0f:64:36:f9:
e3:ee:c7:05:e7:b5:d8:f8:03:29:eb:a6:5e:20:ae:
03:81:5e:42:6c:5b:34:6d:b8:04:cd:a7:53:9f:62:
13:70:c5:f8:6a:de:da:cf:b2:47:f8:7f:ef:0b:02:
27:8a:c2:cf:6a:f2:ad:d6:35:de:60:0f:70:a3:29:
0e:00:80:dc:50:4c:c8:85:2a:86:7b:0b:fa:29:4e:
39:e5:b6:a8:e8:20:76:7a:53:7b:42:e1:10:da:57:
cc:12:6d:ba:ae:21:12:42:bd:bf:47:ee:81:7f:ee:
13:81:a4:00:32:ce:b0:cc:dd:11:1c:55:b9:75:46:
52:4b:ae:31:39:ac:a5:98:25:0a:1d:44:33:47:92:
90:b1:24:f5:4c:39:51:5e:ca:96:cd:ef:7a:c6:62:
97:af:90:02:30:cb:92:c0:27:7d:a3:10:2f:16:ce:
a8:15:c6:e5:f4:5b:95:38:43:60:b8:8f:ca:cc:29:
15:6c:f5:44:70:cf:6c:51:8a:d1:dd:63:38:b6:9b:
10:89:64:4b:b6:d3:5a:6d:23:c1:77:bd:2b:b0:f3:
fe:32:c3:b8:64:21:91:cb:ab:2c:2b:06:22:f8:b4:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DD:22:77:CB:9C:54:DC:14:39:A2:DC:3B:7E:D7:1A:46:13:24:7D
X509v3 Authority Key Identifier:
keyid:F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613866303a3a2f34342d3434203d3e203533333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a8f0::/44
Signature Algorithm: sha256WithRSAEncryption
32:dc:10:72:55:6d:05:d8:6e:99:d4:9e:be:76:fe:76:16:ea:
d9:cf:d3:8e:62:88:aa:05:3b:74:ea:ad:9d:40:27:76:2e:b9:
e2:6b:1b:62:71:81:41:ce:9f:51:98:ad:08:0a:70:3c:d6:d7:
9d:78:af:7b:45:96:85:55:84:5d:06:eb:ae:48:09:26:08:d9:
7c:97:18:17:97:91:f7:61:63:da:6f:94:b1:5f:bb:3f:70:22:
c0:b5:f9:5f:44:d4:3c:88:b3:b1:cc:b2:38:45:dd:40:9a:87:
c8:c9:af:56:c4:8d:9b:26:a8:59:50:9a:e8:80:3d:88:7c:a4:
c5:9b:2c:a5:c5:06:ea:7c:ea:ca:e0:2b:5d:eb:4b:98:24:50:
a5:0e:45:6a:b6:ab:b2:e5:81:a4:91:59:6e:fb:28:e9:16:75:
ed:d4:48:40:e3:9b:1f:24:e3:23:da:f7:b9:66:e1:a8:a6:cf:
78:b8:ad:c9:61:b1:f3:40:f4:6c:c0:31:75:e2:77:84:ed:65:
8e:8f:b2:a1:1d:89:0f:75:03:5d:14:0c:14:c7:b4:37:b9:c3:
d4:9d:ec:88:de:4d:de:57:09:60:d9:0b:c2:e7:96:26:24:5e:
a8:cc:07:c6:af:76:78:48:b6:a3:c7:1e:b2:50:d7:2c:90:2b:
5e:3b:23:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:52 2025 by rpki-client