Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363861303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363861303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: q9cVy8n5arIzmRLuVfeBpeoPadeDSV02FroM++X+EPg=
Subject key identifier: E9:30:73:18:28:F2:D7:53:65:AF:F6:6E:56:F1:27:46:80:89:C9:82
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 28CB789574929025BE4C3A412BB1CDA0112F5371
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363861303a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 22 Jan 2025 12:27:12 +0000
ROA not before: Wed 22 Jan 2025 12:22:12 +0000
ROA not after: Wed 21 Jan 2026 12:27:12 +0000
asID: 16909
IP address blocks: 2a14:7584:68a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:cb:78:95:74:92:90:25:be:4c:3a:41:2b:b1:cd:a0:11:2f:53:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 22 12:22:12 2025 GMT
Not After : Jan 21 12:27:12 2026 GMT
Subject: CN=E930731828F2D75365AFF66E56F127468089C982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:14:c9:f6:20:9a:36:b3:de:cf:92:89:23:
c2:b2:31:92:75:36:9c:eb:55:7d:e0:ae:c9:cc:3c:
34:58:27:a8:a3:d2:36:f9:de:a8:bf:9e:ce:9f:6e:
ed:e2:0f:27:e8:0f:ad:ab:bf:63:df:da:29:63:d5:
57:81:a9:09:90:70:f7:b9:16:bd:49:5f:5c:a0:6e:
5f:31:b5:3c:15:f6:4b:e4:6b:a5:bb:a2:7a:3d:cb:
af:e7:52:46:f1:3e:ef:3e:12:98:8c:23:c7:f1:fe:
fd:0d:40:95:f6:cd:b2:d6:4d:72:03:55:a4:e8:0c:
1c:cc:83:bf:ef:5f:0b:50:7f:f1:6f:9c:bd:1c:d8:
3c:9a:3e:be:22:cf:68:43:68:c9:0c:cd:3d:f3:9a:
6e:ea:ca:ea:f4:ca:27:13:b8:ec:bd:d4:f7:1c:19:
49:39:bd:20:65:66:17:43:ff:01:7a:1a:11:0d:cb:
9e:3b:bd:39:c2:d1:6c:ae:81:45:6a:c5:17:a0:7c:
eb:75:c8:c9:8a:e5:cf:4b:4e:fa:b0:69:ae:86:42:
5b:55:52:0a:33:12:f6:22:e5:e6:96:fd:8f:0d:c9:
ce:86:da:cc:ca:3f:41:a7:32:09:6c:8d:35:f4:35:
06:d7:65:d6:e2:55:30:3b:8f:d9:f0:d5:05:a0:49:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:30:73:18:28:F2:D7:53:65:AF:F6:6E:56:F1:27:46:80:89:C9:82
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363861303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68a0::/48
Signature Algorithm: sha256WithRSAEncryption
79:10:0b:a1:31:8b:1c:f2:ec:36:3c:0d:49:f0:a5:1a:ae:13:
13:b8:25:b3:af:e7:be:71:c8:ca:07:1b:f2:3e:ac:35:18:78:
8b:57:22:8c:b7:c1:ff:98:c2:b5:96:0a:ad:07:01:69:04:41:
e0:bd:6e:e2:67:ba:55:40:94:1a:91:e6:4a:92:c6:b6:a6:f0:
e7:1a:78:8f:e5:a0:21:64:65:cb:b2:3c:ae:11:c6:be:b7:a5:
9a:79:36:00:03:c1:32:44:c8:f0:32:7b:db:df:3a:f6:97:f6:
7c:3d:1a:f7:7b:9a:34:12:2b:8f:73:80:fd:50:07:47:47:05:
9c:fe:de:68:4f:9b:ac:48:a5:5f:f5:ea:63:c1:52:60:6f:e5:
e6:8e:e1:30:de:e8:ba:7e:40:0e:f4:28:67:1c:a6:3a:53:ef:
2c:7d:8a:99:dc:28:9e:50:d6:1b:8c:1f:7d:ed:ca:1a:3f:b8:
2b:48:e9:25:7f:b0:dc:56:34:a0:7b:94:cb:7c:e4:12:11:06:
ee:1a:20:fb:f1:d7:55:d0:7d:7b:d0:5b:15:9a:14:5b:a9:cf:
de:ef:da:0f:39:a7:f8:22:f3:ab:0d:b6:58:9b:08:8d:f7:42:
33:b8:7a:11:0a:df:30:f4:b6:2f:2a:0a:d5:5d:67:19:84:75:
d5:e5:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:58 2025 by rpki-client