Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/326130363a313238313a393030303a3a2f33362d3336203d3e20313938303136.roa
File: 326130363a313238313a393030303a3a2f33362d3336203d3e20313938303136.roa (raw, json)
Hash identifier: oLu7z117NCVwlvkWyPC9/0giT83Pr1XJzvMLvQVrMy0=
Subject key identifier: E3:C4:A3:C4:E3:44:E6:AB:19:D2:E3:27:16:06:1A:61:E6:84:9A:B3
Certificate issuer: /CN=78739F607E14E11BD03439F7A388E78EDD031A1B
Certificate serial: 7EB30A2997A057CB8A23EE78161EE78EA5510C53
Authority key identifier: 78:73:9F:60:7E:14:E1:1B:D0:34:39:F7:A3:88:E7:8E:DD:03:1A:1B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/78739F607E14E11BD03439F7A388E78EDD031A1B.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/326130363a313238313a393030303a3a2f33362d3336203d3e20313938303136.roa
Signing time: Fri 11 Apr 2025 19:08:43 +0000
ROA not before: Fri 11 Apr 2025 19:03:43 +0000
ROA not after: Fri 10 Apr 2026 19:08:43 +0000
asID: 198016
IP address blocks: 2a06:1281:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b3:0a:29:97:a0:57:cb:8a:23:ee:78:16:1e:e7:8e:a5:51:0c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78739F607E14E11BD03439F7A388E78EDD031A1B
Validity
Not Before: Apr 11 19:03:43 2025 GMT
Not After : Apr 10 19:08:43 2026 GMT
Subject: CN=E3C4A3C4E344E6AB19D2E32716061A61E6849AB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:89:2e:65:42:bc:0b:c4:d0:73:b5:4c:2c:
9f:d2:df:ec:ce:58:06:41:30:9e:ea:4c:9d:64:7f:
ac:79:22:cd:d9:cf:69:5a:51:48:66:cc:ca:56:27:
38:91:74:23:e0:d4:e1:03:ce:69:95:75:96:e1:0a:
16:ef:89:16:1b:21:cb:69:91:37:be:83:ce:f4:34:
2a:b2:5e:7f:44:6b:0a:dd:e1:b5:69:e8:aa:b5:d4:
7d:ad:e2:be:4f:91:d4:a5:bc:86:9f:37:2f:e5:9d:
06:d8:9b:08:23:35:ff:f8:30:30:3c:04:d5:87:fd:
fd:0d:26:39:88:48:37:75:c9:07:3f:79:03:67:7a:
e8:ce:e8:96:79:41:87:da:55:99:e2:b8:14:a8:4f:
e7:d3:33:c9:2a:42:72:03:f7:b9:0e:93:3f:ab:0c:
ae:43:90:9c:20:3f:90:db:dd:ca:ed:23:e6:00:18:
1d:01:f9:06:17:97:1c:3a:0f:e7:dc:ba:f6:0d:9f:
b1:69:3c:9e:58:ec:39:39:43:89:44:9c:72:ef:20:
64:b2:b0:d6:ea:74:6b:f4:19:71:09:9f:19:3a:79:
34:b8:52:66:34:98:00:d0:1b:da:36:00:08:cd:f0:
a0:ca:ab:28:65:a9:35:a8:41:02:ee:ce:bd:1a:9f:
e1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C4:A3:C4:E3:44:E6:AB:19:D2:E3:27:16:06:1A:61:E6:84:9A:B3
X509v3 Authority Key Identifier:
keyid:78:73:9F:60:7E:14:E1:1B:D0:34:39:F7:A3:88:E7:8E:DD:03:1A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/78739F607E14E11BD03439F7A388E78EDD031A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/78739F607E14E11BD03439F7A388E78EDD031A1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/2/326130363a313238313a393030303a3a2f33362d3336203d3e20313938303136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:9000::/36
Signature Algorithm: sha256WithRSAEncryption
1b:24:e7:85:dc:ed:d0:61:ac:85:6c:13:ac:bd:1b:52:18:53:
7b:cf:bc:60:54:4d:92:03:59:f1:61:b8:1c:95:c7:bc:e7:86:
f2:4b:02:66:ee:e2:c6:d0:4b:ef:e8:b3:4f:0a:56:a7:4e:0a:
54:26:51:d8:39:df:c9:9f:76:1e:d7:e8:51:bb:f0:ce:51:5c:
5e:6b:c8:19:c5:0d:9c:8b:6d:d2:16:23:f1:12:24:9c:45:f2:
cf:af:c4:fe:fa:1a:53:11:d8:b8:c7:3d:13:87:36:ff:e7:03:
98:3c:95:b7:25:01:21:e7:4c:18:22:a9:46:b8:61:31:25:ce:
d5:5e:59:e5:ef:c5:c6:cc:50:3a:44:53:9c:c7:26:3e:a9:4e:
de:15:a9:c4:56:f7:d0:27:47:bb:61:5e:d9:06:c2:4d:8d:58:
a4:81:73:7d:28:57:f6:21:00:85:e0:df:b7:00:94:43:d8:71:
25:08:ad:72:18:2a:cb:7f:91:65:29:a9:35:d5:b5:32:04:f3:
d2:d2:56:09:30:4a:de:be:72:44:9b:1f:05:3c:a5:e1:8c:ba:
bb:f7:b5:02:36:7c:11:0d:5c:b6:67:c2:ad:3f:19:5a:41:a6:
8e:ea:2e:99:44:80:05:1d:74:f7:af:15:37:ae:5a:d0:e4:aa:
f5:9f:e7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net