Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363862303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363862303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: kPZxEL4TQkqurxTc8OrfG9o60amOSJ/dOz75CnJH6O4=
Subject key identifier: 4D:E7:89:57:A6:68:FB:D3:BA:43:59:98:71:AC:85:A3:99:88:08:D1
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4D35A624EBB4A98035C24580A886BA56D9B27AF3
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363862303a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 22 Jan 2025 12:27:13 +0000
ROA not before: Wed 22 Jan 2025 12:22:13 +0000
ROA not after: Wed 21 Jan 2026 12:27:13 +0000
asID: 16909
IP address blocks: 2a14:7584:68b0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:35:a6:24:eb:b4:a9:80:35:c2:45:80:a8:86:ba:56:d9:b2:7a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 22 12:22:13 2025 GMT
Not After : Jan 21 12:27:13 2026 GMT
Subject: CN=4DE78957A668FBD3BA43599871AC85A3998808D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:81:b1:0d:6e:a3:b2:c6:0f:ce:0b:66:6c:
bb:ce:1e:98:f3:f9:ba:b8:2e:19:b2:eb:7a:f2:7c:
b6:a6:93:73:fc:de:80:b2:09:f4:b7:f5:87:6c:e0:
f5:71:d7:9e:8d:7f:25:ba:82:34:b9:67:d4:6d:a9:
0f:67:7f:15:4e:5c:4d:1b:71:e4:d7:22:66:aa:66:
87:a6:b7:27:b8:0f:c4:5d:14:fa:91:c9:a5:ef:ce:
41:75:c3:22:94:56:60:3c:70:75:9f:fc:7b:c3:6b:
9a:a8:f5:fb:0e:e2:c7:86:57:48:be:90:4b:df:db:
1d:f8:13:43:f1:7c:e3:73:ac:58:8d:d5:54:db:19:
a4:ae:09:17:3e:4c:98:82:ef:01:2e:51:38:ef:1e:
80:3b:7b:04:24:f2:a8:63:b7:c2:c5:d9:ba:bc:3c:
ba:3c:d1:e3:03:c5:b3:e1:a0:ac:a3:1e:4c:4f:c8:
59:6e:74:50:94:60:a4:47:16:0b:27:7a:58:51:d3:
f8:33:0b:dc:ae:47:cd:97:e2:4a:08:0a:20:b9:e0:
64:8e:4b:8f:73:84:62:81:9d:dc:ab:ee:21:28:37:
fc:78:6e:fb:3b:01:27:db:1b:4a:14:5f:89:ce:4b:
2d:8b:36:8f:a3:4d:d8:05:28:3a:66:f0:f7:de:79:
1e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E7:89:57:A6:68:FB:D3:BA:43:59:98:71:AC:85:A3:99:88:08:D1
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363862303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68b0::/48
Signature Algorithm: sha256WithRSAEncryption
a0:63:06:39:0a:ac:f8:4b:9b:d3:d4:62:f1:78:30:da:a2:95:
76:be:13:d3:ec:1d:02:69:a4:87:1e:d4:ff:34:72:62:b1:0f:
c7:8a:f9:4c:cb:ed:96:61:d6:04:4f:91:6e:ed:c8:6c:31:36:
cf:db:78:36:2b:8c:fc:75:49:2a:56:76:43:79:8a:b5:56:a0:
3a:5a:d9:fe:c5:4d:1b:b8:ea:d2:1c:1e:83:ea:fd:44:bf:6c:
39:80:3c:8d:61:22:31:c8:cb:a3:47:88:1c:dd:bf:7b:8a:24:
e2:0d:ea:1e:75:bc:4a:0d:76:07:a5:03:19:08:87:9d:fb:5d:
a5:62:6f:01:c3:d5:1d:d4:8e:87:48:e1:c1:2b:fb:55:43:bc:
b0:1e:ec:cc:e1:70:7d:85:00:f0:51:74:80:6d:b8:82:9e:29:
6a:71:c7:66:f6:89:3b:64:70:0a:fa:df:30:a5:3b:99:54:01:
e7:d3:c1:04:1d:9b:af:37:0b:41:5c:d7:3e:ea:d8:1a:59:c9:
6d:0a:28:d6:ba:64:1d:c3:4a:ba:76:cb:92:58:a4:8b:d9:b0:
51:81:0c:46:03:5d:a5:e9:5d:8f:18:69:72:5a:20:f8:10:1a:
08:80:9a:28:46:3d:18:b7:05:45:2e:07:70:fa:77:18:ac:45:
73:a8:55:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:57 2025 by rpki-client