Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366134303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366134303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: l3EUvlufQh3yKGa5S+6XnJ7gl2KR2IVRRLZcabs41qM=
Subject key identifier: AA:AD:DD:5B:F5:27:2E:30:2B:22:8B:E1:77:A2:F4:15:72:C3:FC:74
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7FE89628D7BE9EDD59AADBBE8370B8DD0BDBD63D
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366134303a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 29 Jan 2025 17:52:11 +0000
ROA not before: Wed 29 Jan 2025 17:47:11 +0000
ROA not after: Wed 28 Jan 2026 17:52:11 +0000
asID: 16909
IP address blocks: 2a14:7584:6a40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e8:96:28:d7:be:9e:dd:59:aa:db:be:83:70:b8:dd:0b:db:d6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jan 29 17:47:11 2025 GMT
Not After : Jan 28 17:52:11 2026 GMT
Subject: CN=AAADDD5BF5272E302B228BE177A2F41572C3FC74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:25:c4:d6:ba:91:48:0c:7c:9e:d1:18:4b:
ef:72:ff:52:75:32:6a:69:6a:05:47:c3:0f:e9:2e:
17:1c:24:3b:fa:8a:d7:59:41:af:0e:5e:71:8d:f3:
d4:cf:d0:ff:b2:6b:4c:b5:3e:e8:51:51:fb:85:c5:
f9:6f:b6:ea:a5:7d:38:72:59:55:d0:96:6b:3d:af:
c0:46:fe:35:29:91:59:a0:25:4f:49:32:fc:bb:4e:
a8:d8:be:f2:9f:ba:e7:00:24:c5:1f:82:04:4e:dd:
7b:3d:1b:06:c9:89:ab:cb:64:4e:bd:84:83:92:33:
2c:83:bd:d1:cd:6b:ab:48:93:2a:1f:00:8e:fc:28:
67:9b:2e:46:68:95:7e:15:e8:47:b5:f1:02:a5:05:
6a:c0:22:a5:53:ce:de:c3:0a:8a:dd:11:bb:17:8a:
55:8d:ff:2b:61:fc:fc:77:2b:83:2f:c6:fc:78:c1:
f5:c2:6f:26:11:75:10:c9:af:8c:45:23:e7:c7:77:
84:ee:91:6e:97:47:de:4f:e2:5c:6c:71:e4:82:68:
c1:03:67:3a:23:2c:64:65:da:20:11:2e:02:6b:93:
33:b5:50:91:18:59:0d:63:56:96:f7:d5:41:60:cb:
4c:0f:2e:84:b2:d2:f0:76:93:0a:83:55:09:18:5e:
7c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AD:DD:5B:F5:27:2E:30:2B:22:8B:E1:77:A2:F4:15:72:C3:FC:74
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366134303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6a40::/48
Signature Algorithm: sha256WithRSAEncryption
9e:d5:b3:26:5b:2e:ac:6f:ce:2a:38:1f:a9:95:73:f5:48:cc:
14:69:f1:79:11:85:b3:08:be:58:7f:df:b0:c9:1b:11:6d:b3:
1f:9a:5c:58:81:c2:d1:63:03:c8:4e:f3:88:45:36:27:b5:dd:
86:71:36:ca:33:c9:33:c7:88:cc:66:00:68:c2:96:76:22:48:
31:43:12:c7:59:c9:5f:c1:61:11:de:d6:85:0d:97:c9:58:2d:
bb:ce:7c:b2:d4:4a:28:c6:16:25:fc:0a:8e:a7:18:0a:dc:a2:
06:ef:ca:4a:b5:75:39:1e:28:e5:a3:7b:2f:66:d0:eb:dc:04:
22:39:69:3b:8a:fc:59:7d:27:84:14:7d:9b:f3:79:a0:23:3d:
ec:bb:c4:43:af:1d:e7:c2:db:77:ad:22:9d:a6:12:c4:41:6f:
16:91:29:c8:21:ec:20:3e:8d:30:9d:2a:bf:84:7b:d3:42:f4:
01:91:76:df:4d:75:7d:0e:5e:a9:f5:71:59:54:a7:25:53:0f:
4f:e8:46:07:d0:93:fc:8d:50:e4:8f:06:ec:22:7b:98:cf:66:
49:dc:47:8d:1d:e3:fb:7c:15:90:d3:e2:ab:0e:b0:f1:09:cc:
24:1a:06:99:4d:3a:e7:de:b0:b2:a8:e6:44:3c:50:23:44:a4:
68:37:42:c1
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUf+iWKNe+nt1Zqtu+g3C43Qvb1j0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAxMjkxNzQ3MTFaFw0yNjAxMjgxNzUyMTFaMDMxMTAvBgNV
BAMTKEFBQURERDVCRjUyNzJFMzAyQjIyOEJFMTc3QTJGNDE1NzJDM0ZDNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/SXE1rqRSAx8ntEYS+9y/1J1
MmppagVHww/pLhccJDv6itdZQa8OXnGN89TP0P+ya0y1PuhRUfuFxflvtuqlfThy
WVXQlms9r8BG/jUpkVmgJU9JMvy7TqjYvvKfuucAJMUfggRO3Xs9GwbJiavLZE69
hIOSMyyDvdHNa6tIkyofAI78KGebLkZolX4V6Ee18QKlBWrAIqVTzt7DCordEbsX
ilWN/yth/Px3K4Mvxvx4wfXCbyYRdRDJr4xFI+fHd4TukW6XR95P4lxsceSCaMED
ZzojLGRl2iARLgJrkzO1UJEYWQ1jVpb31UFgy0wPLoSy0vB2kwqDVQkYXnz3AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUqq3dW/UnLjArIovhd6L0FXLD/HQwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjEzNDMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRqQDAN
BgkqhkiG9w0BAQsFAAOCAQEAntWzJlsurG/OKjgfqZVz9UjMFGnxeRGFswi+WH/f
sMkbEW2zH5pcWIHC0WMDyE7ziEU2J7XdhnE2yjPJM8eIzGYAaMKWdiJIMUMSx1nJ
X8FhEd7WhQ2XyVgtu858stRKKMYWJfwKjqcYCtyiBu/KSrV1OR4o5aN7L2bQ69wE
IjlpO4r8WX0nhBR9m/N5oCM97LvEQ68d58Lbd60inaYSxEFvFpEpyCHsID6NMJ0q
v4R700L0AZF23011fQ5eqfVxWVSnJVMPT+hGB9CT/I1Q5I8G7CJ7mM9mSdxHjR3j
+3wVkNPiqw6w8QnMJBoGmU06596wsqjmRDxQI0SkaDdCwQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:14:01 2025 by rpki-client