Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier: 9z7+E2DPcvYerj1RGJzKi2C+rP4Idonbf5tvgUIPVdY=
Subject key identifier: EA:19:CD:5A:E3:BC:51:96:C2:DF:5B:F6:7D:7B:87:4A:DE:12:BB:06
Certificate issuer: /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial: 656D6E0E0C0AE4D635EE1FFDC5EC643626B63BA7
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa
Signing time: Mon 27 Jan 2025 12:14:14 +0000
ROA not before: Mon 27 Jan 2025 12:09:14 +0000
ROA not after: Mon 26 Jan 2026 12:14:14 +0000
asID: 200676
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6d:6e:0e:0c:0a:e4:d6:35:ee:1f:fd:c5:ec:64:36:26:b6:3b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892843788777A43273322096510EA10880E7E5EA
Validity
Not Before: Jan 27 12:09:14 2025 GMT
Not After : Jan 26 12:14:14 2026 GMT
Subject: CN=EA19CD5AE3BC5196C2DF5BF67D7B874ADE12BB06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:a9:61:ac:d6:92:4d:5c:38:a5:c6:4d:b7:
e5:3e:e1:02:83:75:31:9e:82:9b:48:b0:91:a1:15:
52:0a:9d:31:e8:51:0b:44:41:12:2d:c0:2e:ea:02:
d5:40:83:0c:90:b7:2c:8a:0e:05:81:d2:fd:ad:97:
6c:1c:26:08:9a:88:06:00:9b:7d:a5:d4:c5:8a:1f:
9c:36:41:7d:a2:a8:0a:b9:7f:0b:e5:47:45:62:42:
11:9b:0e:24:0c:76:7f:9d:29:1f:a4:55:2d:c7:52:
51:79:66:cb:d2:fd:e0:72:2a:21:11:eb:ce:57:42:
65:1a:16:64:b4:05:68:6f:38:89:23:45:e6:ca:98:
31:87:79:d8:e0:c6:3a:99:0f:40:ec:64:84:6b:73:
14:64:35:dd:77:f4:d1:6c:75:31:b8:65:c3:63:a8:
07:96:92:c8:a5:e6:de:5d:ad:aa:57:17:17:aa:20:
d1:90:d1:9f:30:e9:4b:49:a3:bd:e3:27:0e:71:77:
65:a6:d9:00:24:09:34:2c:90:00:c5:96:a5:d5:36:
b9:cb:9c:61:a9:54:a3:6a:f7:bf:bb:76:30:6d:05:
4a:04:7a:81:2c:f5:cd:ba:33:18:dd:52:5d:66:bb:
d6:1a:4c:39:a0:4a:11:71:1c:33:0d:6a:2e:00:ba:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:19:CD:5A:E3:BC:51:96:C2:DF:5B:F6:7D:7B:87:4A:DE:12:BB:06
X509v3 Authority Key Identifier:
keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
89:dd:7d:f0:e4:3a:71:c5:3e:69:5d:86:3b:4d:b5:3d:34:a2:
84:1b:4d:06:11:47:cf:32:a3:4e:da:9b:3c:f8:bd:3d:40:a3:
64:47:0b:bf:39:07:2c:54:04:57:5f:8c:2d:70:a1:cd:49:88:
18:16:7b:68:eb:35:0d:a8:af:20:9c:b6:87:80:d6:f5:91:83:
f0:9e:87:27:13:37:18:d1:9b:8d:f9:ae:5b:fd:e9:e8:46:0e:
42:7b:2f:48:84:15:2b:d5:29:c1:43:05:b2:b7:1a:1c:6a:9a:
8f:cc:db:45:ae:2a:e8:17:2f:fc:26:90:8a:48:2e:a6:a4:73:
db:f5:ea:09:8f:2c:6a:bd:ae:81:54:de:7e:19:e7:e7:3a:04:
32:57:dd:48:fe:eb:a9:bd:af:98:a5:44:5a:95:cc:60:06:e1:
2a:30:e1:7f:1d:fc:84:14:34:27:87:99:08:69:c9:eb:96:b8:
70:65:34:21:e3:0c:8a:15:08:cc:d2:11:0b:3d:52:01:8f:53:
f3:07:34:28:86:c8:fe:77:17:59:d4:e0:e9:52:7b:b1:bb:cc:
3b:59:a5:e3:d1:d9:70:f7:70:2f:0f:50:49:6a:37:73:a2:b2:
04:de:5a:34:13:28:c6:0e:f3:a1:58:5f:31:23:4e:18:a7:49:
00:f1:41:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:29:51 2025 by rpki-client