Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363863303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363863303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: wy0zOqVvWJhRWYwDGke/Tlo+t1dz7QpykyqZvB2vPAU=
Subject key identifier: 97:C3:D6:BD:95:83:A5:F6:53:65:A1:32:C4:C6:D1:B6:86:59:1C:20
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7F4832E6357BEFF02E25E422EA168C8FFAA52C77
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363863303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 24 Jan 2025 11:27:17 +0000
ROA not before: Fri 24 Jan 2025 11:22:17 +0000
ROA not after: Fri 23 Jan 2026 11:27:17 +0000
asID: 16909
IP address blocks: 2a14:7584:68c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:48:32:e6:35:7b:ef:f0:2e:25:e4:22:ea:16:8c:8f:fa:a5:2c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 24 11:22:17 2025 GMT
Not After : Jan 23 11:27:17 2026 GMT
Subject: CN=97C3D6BD9583A5F65365A132C4C6D1B686591C20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:6b:1d:66:0f:f0:c0:74:f9:18:c4:2e:ab:
80:3f:1d:fd:00:de:95:d0:c6:87:8b:5e:d7:e7:f3:
1f:67:09:02:5b:42:73:52:df:6c:cb:b2:d8:3f:dd:
72:f8:48:53:58:91:2a:52:84:43:4c:00:b7:d6:da:
ac:bb:04:e7:e2:5e:c5:e7:1a:9a:ca:6e:74:6b:5a:
e3:40:61:b9:a2:f2:74:0c:ce:f9:0a:2c:70:bd:e2:
9b:16:fd:48:d5:dd:fc:99:a0:1e:0b:d8:39:2b:86:
f1:77:e8:52:69:2c:8a:83:d4:fe:c8:e3:56:70:2c:
b5:df:1d:c8:96:20:1b:71:75:e9:05:8c:d2:7f:56:
cb:cd:f8:22:1e:d0:ae:8b:7d:5c:e9:a5:87:00:6d:
f2:32:c2:1d:0a:72:d1:9f:c8:aa:82:d3:e4:20:e4:
39:de:08:74:b1:b4:9c:a8:cc:3a:53:9f:4e:01:af:
40:74:df:5a:60:b7:9a:85:54:c4:65:17:27:35:a3:
a5:49:f5:5c:c9:6f:74:3b:3f:6a:cb:0c:a9:05:9e:
13:3b:dd:6a:e7:00:28:5b:b3:fb:81:7a:59:38:7a:
4e:fc:8d:e0:53:b9:70:27:82:ac:77:ef:d2:3d:ea:
85:b3:d0:f1:3a:41:14:a7:69:81:39:29:68:b1:53:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C3:D6:BD:95:83:A5:F6:53:65:A1:32:C4:C6:D1:B6:86:59:1C:20
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363863303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:68c0::/48
Signature Algorithm: sha256WithRSAEncryption
b6:a3:d4:cb:45:3c:3e:38:a6:07:ab:b3:20:d2:35:34:06:35:
88:6f:d0:01:59:56:4f:75:99:c9:47:7a:0f:b4:d0:f2:23:b3:
40:b6:7e:cf:e2:36:bb:4d:b3:7a:e0:0e:10:d2:44:a9:84:37:
86:91:4e:b3:66:78:92:3e:0d:a5:f5:2e:d6:1d:d8:9c:ac:0e:
b9:c0:ab:cf:ad:cd:79:66:37:7c:fa:e5:ff:a2:db:ea:57:ab:
ef:5e:1f:9c:f5:3a:ed:71:20:84:34:ab:c2:7f:f1:8a:31:ff:
24:f1:57:5c:ce:2c:07:5a:23:be:5b:c3:63:8c:3e:52:f7:34:
9b:4b:bb:61:27:66:14:60:48:6f:90:0c:c6:a4:29:ba:f7:54:
6e:af:85:01:23:1d:18:5a:69:94:76:0c:bd:67:05:8d:89:bb:
b5:3f:92:5a:15:59:25:01:ed:41:5a:c5:7b:8a:7f:7d:f6:df:
7f:3c:7c:93:7b:b3:7a:74:57:26:f1:d1:60:82:86:7c:29:ab:
fd:69:7c:bf:f7:1f:d9:54:d4:04:82:87:1e:fc:1d:d6:3d:e2:
5f:19:31:99:c0:28:33:85:69:e3:62:34:71:36:e9:e0:87:12:
e8:df:74:a0:4d:7a:ea:57:ba:56:a7:b2:fb:02:ea:d9:6e:c1:
aa:40:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:50 2025 by rpki-client