Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363930303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363930303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 6aFp2e7f2loplWEmXb/C4OiOD2f3AHtIWt9PtTLxbMk=
Subject key identifier: 0A:7F:1A:38:3D:E8:D4:0C:02:5F:0F:61:48:EB:A8:8F:11:98:20:2C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 22D11C6FDE641244358855BDCECFECEDFD93F79F
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363930303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 24 Jan 2025 11:27:20 +0000
ROA not before: Fri 24 Jan 2025 11:22:20 +0000
ROA not after: Fri 23 Jan 2026 11:27:20 +0000
asID: 16909
IP address blocks: 2a14:7584:6900::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d1:1c:6f:de:64:12:44:35:88:55:bd:ce:cf:ec:ed:fd:93:f7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 24 11:22:20 2025 GMT
Not After : Jan 23 11:27:20 2026 GMT
Subject: CN=0A7F1A383DE8D40C025F0F6148EBA88F1198202C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a0:de:85:0f:a3:db:15:98:be:d0:61:1e:ba:
c5:17:85:bb:51:a2:dc:8f:1f:53:e8:e8:5f:03:b1:
51:fa:0f:3b:0f:6b:1e:11:68:14:b4:96:c2:7c:66:
90:7e:99:5d:15:fd:7f:40:b5:ba:0b:5b:8d:4b:b9:
fb:57:28:b3:cb:43:68:e0:ac:06:0c:ca:f4:54:7d:
71:b1:25:0d:32:13:c9:ce:59:97:41:bf:a3:32:38:
d3:5b:7f:f0:e4:52:fe:d7:09:3d:1f:c9:f3:f3:98:
f0:65:a8:e1:47:29:64:40:96:88:e5:2a:58:cc:41:
c1:77:54:a3:67:27:71:95:a2:01:3c:f0:42:e9:1a:
5a:1f:4a:7a:ab:53:2c:be:0b:df:5f:1a:ce:36:27:
00:e2:1b:c0:80:f1:fe:bd:72:05:7f:56:85:32:10:
66:73:b2:70:9b:4b:5a:4d:1c:1a:48:1d:65:3d:77:
4c:77:26:20:f7:f6:d2:8b:97:db:a1:52:2b:81:3e:
9b:2b:48:39:1e:5e:a0:7f:19:27:34:72:45:c7:50:
f3:0f:a5:98:ae:d8:d6:f8:77:ed:4f:4f:8b:7d:fa:
9c:92:54:ee:cb:ff:ce:5d:d2:61:78:a4:3e:8f:bc:
15:58:f9:a9:f9:a6:76:13:f7:91:43:29:f7:d4:01:
16:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7F:1A:38:3D:E8:D4:0C:02:5F:0F:61:48:EB:A8:8F:11:98:20:2C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363930303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6900::/48
Signature Algorithm: sha256WithRSAEncryption
a7:ce:ca:26:2a:b0:8a:f4:d8:4b:ba:41:60:a2:f7:09:d1:52:
41:55:af:53:af:58:63:40:35:05:f4:84:21:13:f2:58:62:4a:
4c:f4:f3:29:28:51:ae:4d:c9:ee:3c:66:81:5b:15:b6:cc:4a:
b5:13:d3:da:df:32:91:22:5f:35:9a:a9:dd:2a:9c:10:c7:a2:
66:87:26:cd:3d:30:3d:ed:48:af:f3:f7:40:bd:bd:97:2e:e1:
0a:0b:28:ad:01:9a:76:89:5f:34:af:c8:29:4c:ec:6f:2d:09:
29:b6:26:e5:58:6b:0c:37:06:b7:8d:4d:a7:4c:ea:b6:7b:04:
48:cf:13:4b:50:4b:a2:0a:e2:6a:95:be:f0:0f:f4:ad:70:19:
72:ed:75:a6:00:72:8a:95:eb:9f:fe:65:e9:e6:e3:db:dd:4b:
da:6b:d2:26:db:de:ca:39:aa:b5:ce:5a:05:3c:ee:e7:19:88:
6d:dd:47:2a:8a:73:10:45:fc:bc:28:cf:8a:ff:c4:f1:d9:ee:
1f:c9:61:bf:b2:6f:2f:17:09:05:8e:10:15:44:8a:03:70:33:
68:60:25:94:ee:03:09:53:be:48:f8:39:5d:c2:44:2b:cc:bf:
c4:b7:5d:35:81:db:91:d8:11:25:df:15:8a:20:ee:bc:6f:1a:
ec:4c:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:14:07 2025 by rpki-client