Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363962303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363962303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: Thw21p2fzeAYGmk2HOXimX2eLAT0I7BlnB9nPoVQwys=
Subject key identifier: C0:EB:E9:5E:4E:1F:1B:68:33:B2:A8:73:21:42:8B:2F:C0:E6:E1:04
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 26051D212498F3A581C14CC80F56DF57153AEA2C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363962303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 24 Jan 2025 11:27:59 +0000
ROA not before: Fri 24 Jan 2025 11:22:59 +0000
ROA not after: Fri 23 Jan 2026 11:27:59 +0000
asID: 16909
IP address blocks: 2a14:7584:69b0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:05:1d:21:24:98:f3:a5:81:c1:4c:c8:0f:56:df:57:15:3a:ea:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 24 11:22:59 2025 GMT
Not After : Jan 23 11:27:59 2026 GMT
Subject: CN=C0EBE95E4E1F1B6833B2A87321428B2FC0E6E104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:d7:c5:c5:b8:6c:6b:85:e1:3d:c8:56:95:
0e:c5:3e:ef:c6:d2:11:81:95:28:25:91:83:87:5f:
3d:f1:ba:87:78:fe:1c:53:61:68:de:9d:26:cf:98:
17:5b:e0:c5:5c:da:cf:c2:ef:92:78:1a:b0:49:56:
23:06:67:c9:ee:7f:d6:3c:7c:0b:00:6e:67:b0:8f:
3b:1c:16:10:4f:aa:bd:79:0b:a3:64:ff:88:f2:11:
b9:b5:f5:5a:a5:04:d7:d4:b5:d0:45:27:4e:8c:33:
e4:f1:1a:5f:ed:fc:0b:ce:cf:ec:50:35:f3:55:fa:
8f:23:56:0d:78:3a:44:72:7f:30:5c:dd:37:23:af:
8f:a5:99:bc:00:5a:60:59:4a:91:f8:81:2f:32:ed:
02:b5:b9:8c:20:ca:a7:28:70:24:7a:83:80:bb:28:
40:a9:b9:db:92:16:d1:36:66:d1:3a:91:72:d3:e7:
d8:63:bb:a1:b0:ec:82:1b:4b:1c:dc:eb:b4:9d:0f:
3a:2c:b2:c5:ce:a3:d1:78:80:e6:f7:0a:f1:66:8f:
ec:64:5e:f0:e5:f4:c0:7c:eb:99:f5:63:17:ac:a2:
1a:8b:e1:9b:5f:85:ee:1b:f1:06:a4:81:01:60:45:
1b:34:7d:5b:4d:98:d8:12:f8:58:7a:e5:c4:44:ea:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:E9:5E:4E:1F:1B:68:33:B2:A8:73:21:42:8B:2F:C0:E6:E1:04
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363962303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:69b0::/48
Signature Algorithm: sha256WithRSAEncryption
9a:aa:77:94:45:f3:cb:61:d8:ce:78:56:8d:2a:63:77:74:9a:
f5:fc:ca:a1:e1:29:26:ac:fd:09:43:eb:08:0b:0d:35:91:2e:
8f:15:84:d5:28:b2:b6:a8:3f:d3:58:f8:cb:02:a9:21:45:1e:
64:cb:b3:23:20:7c:cc:d2:c0:c2:11:2e:12:09:e8:61:2a:f8:
44:a3:01:0a:d3:04:b3:4e:4f:11:a7:17:bd:0d:c9:76:22:45:
30:d5:53:78:3c:3f:4a:c2:06:3a:37:88:10:dd:79:80:ea:84:
f6:15:89:a8:94:e6:6c:54:1e:8f:08:87:73:60:31:94:7c:06:
2f:b4:6e:f3:2b:06:ad:5f:b7:43:8d:29:3e:2c:08:dd:4f:f1:
9e:56:75:4d:33:d5:16:ea:fa:fc:af:70:98:15:86:c7:35:7b:
2c:2c:ef:94:78:e3:04:7b:e4:f1:21:cb:f3:f8:6a:73:78:a6:
4e:2c:6a:e2:15:44:33:2f:71:66:c3:61:09:08:60:fe:d9:9b:
05:61:67:f7:65:39:23:12:73:30:a2:cf:90:98:42:49:14:fe:
0e:55:8b:ef:58:ab:d5:2c:70:fa:45:5d:de:db:ad:9e:e1:f6:
1a:11:52:d3:f5:02:8a:2e:62:3b:e2:6a:f3:fd:1c:f1:e3:f3:
cd:6e:66:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:47 2025 by rpki-client