Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366132303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366132303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: 5PnH/H9LIsAL9XD9GoPQqU8i4Q6QMpw2qRUILsfR0pI=
Subject key identifier: D2:D2:18:61:D0:2A:17:4C:2D:7A:DF:74:E1:62:A0:7E:EA:79:BE:9C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 08ADB727C91E9550B8F811D6F749E35C07E9BEC9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366132303a3a2f34382d3438203d3e203136393039.roa
Signing time: Fri 24 Jan 2025 11:28:39 +0000
ROA not before: Fri 24 Jan 2025 11:23:39 +0000
ROA not after: Fri 23 Jan 2026 11:28:39 +0000
asID: 16909
IP address blocks: 2a14:7584:6a20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ad:b7:27:c9:1e:95:50:b8:f8:11:d6:f7:49:e3:5c:07:e9:be:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 24 11:23:39 2025 GMT
Not After : Jan 23 11:28:39 2026 GMT
Subject: CN=D2D21861D02A174C2D7ADF74E162A07EEA79BE9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:34:0e:0a:d0:a0:97:c8:dc:c5:41:73:c4:56:
af:10:01:6a:f2:0d:f5:34:74:e8:c6:e3:a6:62:37:
3a:41:0c:f2:30:66:0f:bb:f0:7c:22:d8:5d:47:6a:
61:0b:dd:43:cd:75:3d:6d:e5:81:f8:20:88:86:6b:
8d:17:8e:a5:c4:f6:71:36:cf:a8:8c:09:8b:5d:07:
18:9e:fc:9b:1d:d3:cd:97:e1:e8:42:60:2f:0e:35:
ec:a6:5d:73:e2:6c:96:e2:99:34:cf:74:7c:a2:65:
2f:bb:08:54:bd:be:7b:83:b1:d1:49:13:40:5c:12:
33:23:89:06:89:34:28:f6:f4:56:96:d1:0e:93:12:
a8:8b:a6:20:94:2e:ea:08:01:12:ed:b9:11:a4:e9:
7f:c9:5e:0f:b2:1f:2d:ab:15:15:61:8a:b0:c8:d3:
4d:ad:6a:81:ba:7a:ae:08:f9:79:f0:8f:d3:78:5a:
fb:ec:08:3c:0a:7b:19:07:37:0b:4c:a8:3f:eb:ac:
d2:89:61:0b:2f:80:a9:62:6f:4e:63:50:4d:4a:99:
99:c1:09:32:6d:58:3b:5f:8a:a9:c8:27:ae:5f:e2:
89:64:db:b7:56:44:94:0c:4e:61:6c:0c:d2:fa:e1:
3c:2f:7e:af:62:0c:b5:5c:42:9c:60:b6:ff:44:c7:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D2:18:61:D0:2A:17:4C:2D:7A:DF:74:E1:62:A0:7E:EA:79:BE:9C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366132303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6a20::/48
Signature Algorithm: sha256WithRSAEncryption
67:75:a2:20:7c:79:3d:d2:5c:7d:8f:32:16:25:fe:7f:67:9b:
e4:11:4b:ac:d9:6c:6c:8e:4e:cd:c9:75:1b:de:84:e1:b8:bd:
26:57:6a:4e:3a:8c:3f:d3:f8:1d:b0:c8:2e:9b:59:f0:d4:05:
28:bc:26:a4:c9:a5:39:28:e6:60:26:fd:d3:aa:36:c5:48:77:
13:5d:3b:bc:54:a7:85:c2:64:ac:5d:85:26:56:36:12:b5:43:
a7:e7:bc:b1:5a:52:f2:5e:5b:fe:3f:87:d6:6c:5a:be:af:af:
32:fd:36:6f:67:8c:0d:7a:83:52:ff:fd:ab:15:bc:13:00:25:
79:14:40:67:c1:f4:ef:4b:d5:09:12:8c:e5:77:cd:4d:9c:73:
d1:11:41:a2:1d:07:26:b0:e9:e7:d7:6e:04:7b:a8:4a:27:30:
5c:16:97:5b:90:13:6e:fb:0b:b1:3c:38:b2:94:87:fe:13:ec:
7a:4d:d8:13:de:02:24:9e:b4:37:32:69:b4:b6:fd:ee:83:32:
58:40:32:bd:b1:39:c0:50:57:c1:2c:90:24:79:b4:33:c0:5a:
db:7b:01:3e:c3:39:4f:c6:93:e8:e1:de:81:90:66:5f:be:4d:
98:dd:14:27:48:9d:66:6f:05:21:0b:43:23:0a:9a:aa:00:33:
74:7b:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:52 2025 by rpki-client