Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363934303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363934303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: F9JCsfZjN2iNuJCP+UtzeTV9VvoWMF9VbGTAp/1xe0M=
Subject key identifier: 4A:BA:0A:85:33:20:ED:55:15:AE:61:37:3A:A2:F9:81:DC:F2:05:5C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 6938DD9CED321589242441209D9C61330F4B678E
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363934303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 24 Jan 2025 11:27:54 +0000
ROA not before: Fri 24 Jan 2025 11:22:54 +0000
ROA not after: Fri 23 Jan 2026 11:27:54 +0000
asID: 16909
IP address blocks: 2a14:7584:6940::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:38:dd:9c:ed:32:15:89:24:24:41:20:9d:9c:61:33:0f:4b:67:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 24 11:22:54 2025 GMT
Not After : Jan 23 11:27:54 2026 GMT
Subject: CN=4ABA0A853320ED5515AE61373AA2F981DCF2055C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:e8:f2:24:be:a3:8c:d7:ef:ea:15:b1:c7:
09:f9:68:73:5b:59:6c:47:e8:28:f3:30:0e:47:ca:
7d:80:2b:6c:c5:5f:66:c6:23:65:87:03:b5:bf:da:
8f:f1:78:1b:55:f1:98:48:65:72:6f:47:e9:df:c1:
28:87:ec:1c:5c:5e:34:68:b7:85:c2:46:9f:6e:6a:
2d:dc:97:af:d3:4c:6f:a4:6b:52:a8:04:56:4d:24:
29:fa:ee:1a:80:8e:80:e7:81:68:99:78:94:01:17:
3a:ff:3c:7f:85:c7:54:06:45:2e:61:e1:d3:c9:c2:
1f:eb:34:f9:d0:e1:26:07:91:77:24:97:88:25:67:
f5:89:f2:5a:4b:5e:13:b7:65:30:46:3b:da:ae:a5:
eb:ea:90:0b:32:e5:26:a0:90:8b:05:6f:2f:61:03:
92:3a:df:17:88:c1:3c:7d:eb:66:77:e4:5a:00:8b:
c1:45:91:5a:68:f6:d0:60:39:8c:01:57:5b:28:fd:
8e:28:b9:d3:3f:f8:e2:df:0a:7a:e3:7b:2c:88:77:
da:00:32:20:f0:70:eb:74:77:37:46:01:97:31:2b:
20:47:ee:bd:0e:9d:6f:29:01:46:7a:20:e0:65:f6:
16:73:b5:73:b3:69:3d:19:e2:a1:83:a6:ab:f5:af:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BA:0A:85:33:20:ED:55:15:AE:61:37:3A:A2:F9:81:DC:F2:05:5C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363934303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6940::/48
Signature Algorithm: sha256WithRSAEncryption
b4:fd:be:f6:c5:d0:32:fd:b1:8f:06:08:3e:23:4f:21:67:cb:
23:2c:60:94:d7:7f:48:d3:23:00:84:b2:01:ee:67:22:f2:60:
1e:8e:73:bd:9e:a7:88:74:b3:2d:21:41:39:3c:45:b3:a5:8b:
04:86:21:6d:d0:19:56:22:0e:6e:86:be:ba:06:b0:ef:38:b0:
87:d2:fd:89:e1:7e:31:1a:50:d1:84:39:81:0a:46:27:e7:5e:
c1:42:bb:b7:56:45:b2:e2:bb:92:ae:c9:66:01:c8:8a:03:63:
b9:7d:b1:f2:ff:9f:2b:40:77:5b:c0:25:30:6c:ed:3e:c8:ef:
85:cc:85:4c:fa:47:2a:0f:04:7d:87:a8:4a:cb:99:4f:fa:e6:
14:54:32:84:e9:6b:55:5c:d9:52:a7:27:bc:54:7d:d0:32:92:
92:7c:93:d9:01:29:57:18:68:1e:ae:a5:b7:53:93:c8:8f:43:
4d:b7:68:cc:66:3a:8e:1d:2b:ae:59:f4:a1:b7:9f:fc:e3:d8:
c1:fe:60:97:4c:e4:29:27:d3:69:06:16:38:d2:4d:c8:df:56:
3c:c1:fb:4e:b8:30:c3:e0:98:78:99:d6:35:32:72:3d:6a:22:
2f:28:6b:87:87:4c:02:5c:71:fd:93:0c:bb:ec:57:c7:d4:6a:
58:80:f7:db
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUaTjdnO0yFYkkJEEgnZxhMw9LZ44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMjQxMTIyNTRaFw0yNjAxMjMxMTI3NTRaMDMxMTAvBgNV
BAMTKDRBQkEwQTg1MzMyMEVENTUxNUFFNjEzNzNBQTJGOTgxRENGMjA1NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLhejyJL6jjNfv6hWxxwn5aHNb
WWxH6CjzMA5Hyn2AK2zFX2bGI2WHA7W/2o/xeBtV8ZhIZXJvR+nfwSiH7BxcXjRo
t4XCRp9uai3cl6/TTG+ka1KoBFZNJCn67hqAjoDngWiZeJQBFzr/PH+Fx1QGRS5h
4dPJwh/rNPnQ4SYHkXckl4glZ/WJ8lpLXhO3ZTBGO9qupevqkAsy5SagkIsFby9h
A5I63xeIwTx962Z35FoAi8FFkVpo9tBgOYwBV1so/Y4oudM/+OLfCnrjeyyId9oA
MiDwcOt0dzdGAZcxKyBH7r0OnW8pAUZ6IOBl9hZztXOzaT0Z4qGDpqv1r9xfAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUSroKhTMg7VUVrmE3OqL5gdzyBVwwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzkzNDMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRpQDAN
BgkqhkiG9w0BAQsFAAOCAQEAtP2+9sXQMv2xjwYIPiNPIWfLIyxglNd/SNMjAISy
Ae5nIvJgHo5zvZ6niHSzLSFBOTxFs6WLBIYhbdAZViIOboa+ugaw7ziwh9L9ieF+
MRpQ0YQ5gQpGJ+dewUK7t1ZFsuK7kq7JZgHIigNjuX2x8v+fK0B3W8AlMGztPsjv
hcyFTPpHKg8EfYeoSsuZT/rmFFQyhOlrVVzZUqcnvFR90DKSknyT2QEpVxhoHq6l
t1OTyI9DTbdozGY6jh0rrln0obef/OPYwf5gl0zkKSfTaQYWONJNyN9WPMH7Trgw
w+CYeJnWNTJyPWoiLyhrh4dMAlxx/ZMMu+xXx9RqWID32w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:54 2025 by rpki-client