Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363965303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363965303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: my1w/tFVyn0SyGZ5bj1cVGkbMG4tz8TYbGEai4Boq5o=
Subject key identifier: A7:FA:B6:EE:50:49:F4:FF:0C:B2:01:C1:1D:0A:54:92:9A:80:EF:FE
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 2BFDF9CD6232ABC3D962B31537566B4CAA2EC06B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363965303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 24 Jan 2025 11:28:36 +0000
ROA not before: Fri 24 Jan 2025 11:23:36 +0000
ROA not after: Fri 23 Jan 2026 11:28:36 +0000
asID: 16909
IP address blocks: 2a14:7584:69e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:fd:f9:cd:62:32:ab:c3:d9:62:b3:15:37:56:6b:4c:aa:2e:c0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 24 11:23:36 2025 GMT
Not After : Jan 23 11:28:36 2026 GMT
Subject: CN=A7FAB6EE5049F4FF0CB201C11D0A54929A80EFFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5c:6d:1b:1d:21:b5:d7:d4:41:e6:ce:04:21:
05:54:a6:72:19:86:89:01:e4:11:c6:fa:50:db:e9:
fa:e9:8f:9b:db:7c:9a:89:9b:1e:e7:bc:0e:02:ac:
ba:a4:bd:2a:6e:3b:5c:51:4b:28:45:2d:b7:2f:cb:
35:4d:f4:2a:da:97:2b:94:cf:53:e5:31:4b:dd:dd:
a4:d1:05:8a:cf:69:b3:aa:d7:2c:52:11:b9:89:cd:
df:ba:de:da:88:e9:b0:ec:60:d0:e0:bd:d0:e0:09:
3f:3c:0b:0c:ce:b6:d3:3d:83:ac:7b:e5:3e:3c:51:
dd:9e:c3:52:6f:fd:4e:aa:13:73:a4:f1:a8:cd:99:
18:e9:bf:d5:ee:ca:4c:ee:25:68:28:97:81:4c:3a:
08:d7:f4:b6:1b:f2:24:de:75:e9:1f:a2:fe:0a:6d:
9b:f7:c7:c5:c2:27:d2:a4:3f:e1:c8:f7:99:d3:1f:
34:bf:72:93:f7:de:f1:cf:ce:83:16:0c:ff:19:77:
6a:63:70:21:d2:67:e6:e3:e9:fa:dd:9f:61:f1:43:
35:e9:ac:6a:fa:8c:48:be:a8:0c:82:cf:4a:a4:53:
8b:6d:74:ab:82:41:8c:5c:a6:3e:7f:c8:a3:6a:74:
e3:7b:6b:7d:d3:62:4f:d2:ef:01:d4:dc:ec:aa:05:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FA:B6:EE:50:49:F4:FF:0C:B2:01:C1:1D:0A:54:92:9A:80:EF:FE
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363965303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:69e0::/48
Signature Algorithm: sha256WithRSAEncryption
12:67:19:4b:41:ab:59:dd:d9:30:8d:62:45:9b:93:f6:61:d5:
9f:cc:c3:7f:bb:e6:18:54:6d:65:f1:04:98:06:e9:72:27:38:
1a:56:73:48:53:6f:bf:93:fe:00:29:25:ff:75:d1:14:48:8a:
ec:be:88:4e:dd:4c:0f:f4:7a:7a:0d:7a:92:21:e3:6e:57:10:
6f:bd:49:bc:4a:5d:a7:45:96:b0:e4:59:dd:e9:26:50:ae:ed:
6b:0a:8d:40:10:c3:c1:cb:e7:48:d0:79:8a:5f:ab:36:dc:59:
bc:66:84:f1:07:79:7a:e5:a5:f8:34:4d:93:36:95:1b:c5:4c:
59:83:50:11:10:f9:75:c4:8f:e7:22:e5:27:a1:57:26:88:3e:
ac:26:2a:93:08:83:7f:0e:5e:3c:60:b3:40:9a:8e:c1:49:51:
e2:1a:c6:4c:36:27:73:42:4b:39:7f:85:b6:6a:e4:35:83:8b:
0d:26:4d:d5:a5:9d:5a:f7:e6:66:13:c9:06:6c:a7:f8:83:bc:
b1:05:3d:d5:e9:66:ec:5e:5a:9b:89:ed:dd:58:e3:c2:16:27:
6f:87:28:c7:c1:cf:56:e8:fa:dd:70:0a:c9:9b:66:cb:1d:c3:
dd:bd:d0:00:36:9b:81:0e:8f:4d:92:37:c3:b5:50:51:db:f4:
49:65:f5:55
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUK/35zWIyq8PZYrMVN1ZrTKouwGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMjQxMTIzMzZaFw0yNjAxMjMxMTI4MzZaMDMxMTAvBgNV
BAMTKEE3RkFCNkVFNTA0OUY0RkYwQ0IyMDFDMTFEMEE1NDkyOUE4MEVGRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaXG0bHSG119RB5s4EIQVUpnIZ
hokB5BHG+lDb6frpj5vbfJqJmx7nvA4CrLqkvSpuO1xRSyhFLbcvyzVN9CralyuU
z1PlMUvd3aTRBYrPabOq1yxSEbmJzd+63tqI6bDsYNDgvdDgCT88CwzOttM9g6x7
5T48Ud2ew1Jv/U6qE3Ok8ajNmRjpv9XuykzuJWgol4FMOgjX9LYb8iTedekfov4K
bZv3x8XCJ9KkP+HI95nTHzS/cpP33vHPzoMWDP8Zd2pjcCHSZ+bj6frdn2HxQzXp
rGr6jEi+qAyCz0qkU4ttdKuCQYxcpj5/yKNqdON7a33TYk/S7wHU3OyqBct3AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUp/q27lBJ9P8MsgHBHQpUkpqA7/4wHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2Mzk2NTMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRp4DAN
BgkqhkiG9w0BAQsFAAOCAQEAEmcZS0GrWd3ZMI1iRZuT9mHVn8zDf7vmGFRtZfEE
mAbpcic4GlZzSFNvv5P+ACkl/3XRFEiK7L6ITt1MD/R6eg16kiHjblcQb71JvEpd
p0WWsORZ3ekmUK7tawqNQBDDwcvnSNB5il+rNtxZvGaE8Qd5euWl+DRNkzaVG8VM
WYNQERD5dcSP5yLlJ6FXJog+rCYqkwiDfw5ePGCzQJqOwUlR4hrGTDYnc0JLOX+F
tmrkNYOLDSZN1aWdWvfmZhPJBmyn+IO8sQU91elm7F5am4nt3VjjwhYnb4cox8HP
Vuj63XAKyZtmyx3D3b3QADabgQ6PTZI3w7VQUdv0SWX1VQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:53 2025 by rpki-client