Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363762303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363762303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 7DwFY5HQfC1lggjECHEUZnpCi+0GkGKKBaaH5QF4wyo=
Subject key identifier: B5:9E:2A:B8:AD:10:D6:7F:6F:5C:14:D2:C2:CC:98:B0:6F:9F:54:A9
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6B75234071206EBDB7CB1271539130144E4846C6
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363762303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 16 Jan 2025 19:32:59 +0000
ROA not before: Thu 16 Jan 2025 19:27:59 +0000
ROA not after: Thu 15 Jan 2026 19:32:59 +0000
asID: 16909
IP address blocks: 2a14:7584:67b0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:75:23:40:71:20:6e:bd:b7:cb:12:71:53:91:30:14:4e:48:46:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 16 19:27:59 2025 GMT
Not After : Jan 15 19:32:59 2026 GMT
Subject: CN=B59E2AB8AD10D67F6F5C14D2C2CC98B06F9F54A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:6f:78:2a:ad:bd:b4:50:f7:5f:cd:20:73:
be:a7:fc:13:9f:38:64:f1:01:03:37:dd:c0:f6:d2:
bd:ea:0d:8a:76:8a:ab:b9:9b:b5:75:15:e9:d0:50:
0e:18:a2:1c:e6:6e:ed:b9:86:d8:34:37:16:18:ff:
2a:c8:d0:44:c9:ff:7f:5b:9f:dd:b5:8d:e2:44:3f:
3b:05:2d:0e:6f:6b:32:0a:ea:cf:dd:9f:c3:78:7d:
44:e3:17:64:f5:5f:d9:30:c4:5e:d5:bf:e1:1b:85:
a0:af:62:72:55:48:bf:48:d1:c5:9a:5d:df:b0:b5:
88:18:db:ce:e6:88:ce:84:6b:0e:27:f5:26:63:22:
85:1b:b0:3d:bd:24:67:00:c9:0d:35:9b:ce:a2:ce:
b9:f5:a4:f9:1f:06:3e:17:94:9d:ae:ae:f2:c4:32:
2d:69:2d:ed:be:b3:7b:83:2b:f8:25:17:ed:d6:f3:
f8:11:a5:7c:7b:e6:e4:63:fa:0e:a2:a4:be:47:91:
bf:9d:de:6a:20:c1:ad:6a:b5:5e:8e:bc:ba:35:c4:
4f:71:a0:a6:6f:90:4f:9c:6d:61:a0:45:1b:61:33:
bc:97:38:4b:e0:29:40:c2:7a:c7:79:c1:ec:75:bd:
f1:d7:7a:50:59:91:de:fa:14:06:05:b8:d8:fe:8b:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9E:2A:B8:AD:10:D6:7F:6F:5C:14:D2:C2:CC:98:B0:6F:9F:54:A9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363762303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:67b0::/48
Signature Algorithm: sha256WithRSAEncryption
98:cb:62:ea:b1:7e:5d:4d:0f:6c:23:50:86:87:f1:e1:91:51:
11:af:dd:8d:78:37:63:3b:74:b8:91:1b:46:a7:f8:3f:98:52:
20:8d:f1:3d:b9:2e:0b:b1:d1:b2:47:c1:f4:53:f8:99:36:cb:
bf:ea:99:0d:e9:90:88:e4:2d:24:7d:60:99:72:b8:61:7e:c7:
13:25:46:ab:a0:03:49:17:7a:16:40:bc:ad:b7:50:d5:d0:76:
e7:ea:cd:f1:74:55:e4:ac:5d:e1:40:9d:09:e7:5c:6a:8f:78:
e7:5e:ee:b8:37:3e:04:77:33:16:b4:c6:92:ba:1c:a4:cf:8c:
df:8c:98:dc:1c:61:1c:e5:cb:4f:f7:e5:c0:d4:dd:bc:76:d8:
0d:64:77:bb:67:d6:9e:83:9f:d0:87:53:3e:00:76:49:e6:cc:
fb:e8:9f:ee:83:c1:cc:bd:e4:45:9c:f3:4b:1e:73:4f:19:96:
c1:2e:07:4e:fa:49:d6:ab:e8:36:53:34:eb:69:1b:2e:19:f8:
c2:b5:d0:b8:ce:8f:d1:6d:b2:d9:d4:bf:4e:02:3e:e2:fd:2c:
53:54:b8:31:9a:34:00:8d:38:5f:1f:4a:db:e4:26:4b:4d:2c:
d7:37:4e:0f:d8:b5:29:12:68:95:36:56:f5:85:3a:7b:95:3c:
a7:08:e0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:14:07 2025 by rpki-client