Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363931303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363931303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: ER47yGkLOqEUCOF3lrejIvVE1bQc0aUSPwx6UE6hE2w=
Subject key identifier: A1:D0:B5:28:6D:C0:C4:55:45:86:B0:15:84:3C:A6:56:23:C0:59:20
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2619613BEF37F06A6A1889F85B3C69718C29D8BF
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363931303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 24 Jan 2025 11:27:21 +0000
ROA not before: Fri 24 Jan 2025 11:22:21 +0000
ROA not after: Fri 23 Jan 2026 11:27:21 +0000
asID: 16909
IP address blocks: 2a14:7584:6910::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:19:61:3b:ef:37:f0:6a:6a:18:89:f8:5b:3c:69:71:8c:29:d8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 24 11:22:21 2025 GMT
Not After : Jan 23 11:27:21 2026 GMT
Subject: CN=A1D0B5286DC0C4554586B015843CA65623C05920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:58:7e:77:68:6a:24:8e:79:39:4a:d8:27:
f1:c0:62:18:ec:83:ac:b8:b6:0e:74:ce:09:3a:95:
7a:72:af:e6:a6:e8:59:0a:a3:44:22:bb:4a:fe:fa:
d5:b4:34:6e:67:5d:e4:b0:d1:86:bd:13:83:57:7f:
f4:0b:33:12:af:b7:52:bd:f4:17:f1:57:13:6e:55:
12:9a:39:81:b7:1e:7d:82:a7:00:4e:f2:f4:ba:b2:
f2:e4:90:c4:3f:fe:2e:c9:28:a2:2a:84:da:19:78:
48:f9:ef:5a:d2:2f:ee:46:96:dd:25:4a:7d:e9:c1:
70:7c:52:c1:13:bf:54:2b:97:f8:78:39:0c:7e:3d:
f8:9e:32:f9:27:ce:fd:c7:58:3b:2c:04:18:15:c2:
0d:0c:34:48:a7:49:0a:52:ef:6a:b4:89:76:63:b6:
60:10:86:2f:b3:01:bd:3c:26:e0:21:c6:1f:d0:9b:
b1:98:3b:33:e3:63:45:00:ac:6f:20:f8:09:a8:05:
b2:68:0d:0e:63:70:e5:c3:83:80:91:1e:57:36:d3:
4b:81:fa:71:89:78:c1:99:fe:6c:ad:dd:35:b1:7c:
26:cd:02:fa:77:d7:74:2b:93:3d:72:3f:b2:13:e6:
fb:d6:05:b6:e5:bc:33:27:ca:85:99:c0:17:3c:14:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D0:B5:28:6D:C0:C4:55:45:86:B0:15:84:3C:A6:56:23:C0:59:20
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363931303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6910::/48
Signature Algorithm: sha256WithRSAEncryption
06:9d:0c:d2:3e:41:ad:8c:c2:27:de:51:1e:0e:ca:dc:9e:90:
48:fd:c3:dd:28:f1:4c:e5:16:a3:5f:2b:b8:c6:5d:e1:69:5a:
32:2d:a2:a0:83:98:28:7f:85:0a:85:19:6e:0d:56:52:34:60:
4f:79:4a:72:b4:48:3d:b5:26:b0:00:28:73:e7:7a:16:35:e8:
a0:6c:53:51:36:6d:73:3d:11:04:9c:c8:52:bb:ba:1c:44:4b:
7d:f7:43:08:ec:82:ce:e4:ed:ad:93:25:2b:51:04:c8:1b:fb:
41:8a:b8:04:ab:36:98:f8:b3:bc:96:89:ce:ef:58:6e:53:aa:
fe:29:ae:9b:7e:5e:37:45:18:14:c5:e3:da:fc:16:ea:13:e4:
2f:cb:68:cc:30:d5:1f:bc:8d:51:42:21:d3:24:bb:ac:19:71:
a6:62:6c:11:a1:98:e7:e2:a6:c9:96:66:96:91:1f:79:e8:68:
c7:a9:5e:fb:96:3c:c3:53:e6:31:33:27:1a:02:96:1f:6b:d7:
2d:ae:b3:40:dc:19:c2:40:18:b4:c2:e3:0b:71:45:d8:7c:15:
c2:40:78:45:c3:78:fc:57:93:d9:02:80:0d:7d:62:4d:83:64:
60:5f:d2:64:18:f0:e6:7d:b9:37:07:a0:59:f0:69:01:28:14:
a6:f2:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:47 2025 by rpki-client