Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363966303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363966303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: nkrGEM9I9W3vJbCzTv/FYz52KdJJpSBAmSgJNIT6RwQ=
Subject key identifier: 32:41:86:FD:D8:1B:34:22:22:C3:D0:B6:C6:C3:CA:E6:5C:9D:6A:4A
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7E9910813636D355107E621030BE81EFB6B3740C
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363966303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 24 Jan 2025 11:28:37 +0000
ROA not before: Fri 24 Jan 2025 11:23:37 +0000
ROA not after: Fri 23 Jan 2026 11:28:37 +0000
asID: 16909
IP address blocks: 2a14:7584:69f0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:99:10:81:36:36:d3:55:10:7e:62:10:30:be:81:ef:b6:b3:74:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 24 11:23:37 2025 GMT
Not After : Jan 23 11:28:37 2026 GMT
Subject: CN=324186FDD81B342222C3D0B6C6C3CAE65C9D6A4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:b9:b6:8d:20:74:2d:69:e3:21:74:bc:28:
ee:e9:aa:a1:ce:a4:3d:0b:85:c7:74:49:05:99:39:
2c:46:0e:d6:36:c1:89:97:b0:cc:cf:3c:16:c1:e5:
cd:9e:d7:0c:37:65:52:9e:bb:19:dc:29:68:15:ef:
b9:a1:3d:f1:0c:8f:d1:49:96:87:fd:b0:57:5c:ce:
0c:7c:de:bf:61:09:84:13:66:ec:c5:25:22:17:4f:
6d:d7:8f:a4:53:ec:e7:2a:0e:70:64:a9:48:a3:54:
48:39:3c:42:45:65:2c:0b:73:e5:c4:d0:82:ed:d9:
a0:0e:06:c2:d0:79:95:84:c5:ee:f5:e2:1b:26:f2:
e3:d3:e0:a9:53:fb:df:34:88:fc:56:e1:64:ca:9b:
f7:97:03:27:92:b6:23:7e:e3:67:d8:de:f6:c8:87:
14:de:b4:3c:b5:59:2b:67:1d:ad:c6:ba:90:31:70:
8f:7c:b3:9e:e4:c5:88:b8:4f:58:24:c2:3b:09:62:
17:43:c7:b3:1e:c7:9a:23:24:f9:44:ea:26:aa:5c:
6e:b7:20:4e:ae:a0:86:c9:ab:31:0f:17:45:88:c4:
a6:33:1a:3d:51:6a:8e:a2:d8:6e:39:e3:9b:a1:92:
4a:7a:a0:d2:2c:79:9c:17:0b:04:4c:82:7e:64:e3:
95:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:41:86:FD:D8:1B:34:22:22:C3:D0:B6:C6:C3:CA:E6:5C:9D:6A:4A
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363966303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:69f0::/48
Signature Algorithm: sha256WithRSAEncryption
0f:a8:04:75:23:68:89:cb:f6:bc:a1:62:33:94:20:d2:17:db:
09:b4:43:b1:3c:54:cd:ab:15:e7:18:73:0d:8c:4d:5c:eb:42:
d7:d7:c2:19:b0:2a:4e:a0:1d:6e:b8:81:c8:b7:29:33:48:8f:
5b:e1:82:bc:23:bf:7e:8a:d4:a5:c5:40:77:b0:c8:0a:9e:77:
70:5b:4a:12:34:54:ba:a9:9b:40:44:5f:16:a9:4b:16:8f:ed:
c6:42:28:8f:eb:d0:55:8e:7e:f2:f2:d9:21:97:2e:8d:d5:88:
fc:72:b6:b5:ec:df:2a:26:53:1d:b5:50:c1:2b:2b:c7:52:d9:
79:8b:11:91:5d:60:d3:41:92:21:e4:e6:7b:2d:b2:e2:0a:a5:
9e:ed:e0:f5:9e:c7:8f:aa:cc:b7:cb:b4:9f:61:4f:20:7f:f5:
c8:70:e6:f1:25:53:49:26:ab:38:25:a5:55:a8:7f:50:29:85:
56:97:c1:5a:0d:f3:3f:7b:d6:bf:b5:04:c1:be:55:a7:c3:98:
a7:6f:81:75:65:48:73:1e:84:b5:5c:52:aa:67:b6:1e:34:c5:
2c:32:c7:e5:73:7d:24:11:d3:7c:8f:ac:56:08:48:e3:96:2c:
e2:8a:fa:e6:a0:db:04:e5:c2:aa:a9:c3:99:54:3c:57:5b:e8:
1e:cc:81:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:48 2025 by rpki-client