Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa (raw, json)
Hash identifier: k2wIrX3z5+0YgpC5VRvnRjBWzLYez3sfZPLJNGjzyVo=
Subject key identifier: 5F:F7:FD:9C:BF:9C:43:D6:B1:7B:F6:0A:65:90:8D:E2:ED:FC:A9:12
Certificate issuer: /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial: 26FFFFA0D66D08E273C36C72849D608730384D68
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
Signing time: Mon 27 Jan 2025 12:14:13 +0000
ROA not before: Mon 27 Jan 2025 12:09:13 +0000
ROA not after: Mon 26 Jan 2026 12:14:13 +0000
asID: 203619
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ff:ff:a0:d6:6d:08:e2:73:c3:6c:72:84:9d:60:87:30:38:4d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892843788777A43273322096510EA10880E7E5EA
Validity
Not Before: Jan 27 12:09:13 2025 GMT
Not After : Jan 26 12:14:13 2026 GMT
Subject: CN=5FF7FD9CBF9C43D6B17BF60A65908DE2EDFCA912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:7a:90:cc:a6:3d:60:e7:e8:d8:45:d4:1d:
df:41:ab:8e:23:49:f4:af:6e:c4:32:31:93:8b:ca:
57:42:0b:ea:bf:15:d9:0e:93:a1:d7:fa:c9:09:1c:
8c:dc:4b:42:97:09:4f:04:b2:03:3b:b0:a8:a5:e6:
5b:0f:9d:3e:41:39:87:56:3a:d6:8f:7a:5c:ad:53:
99:a7:e4:87:dc:72:4e:8d:70:35:48:bd:b0:ae:7a:
be:c4:23:a8:0d:6e:f1:22:67:e9:e6:5e:f8:3d:b7:
77:c8:53:75:cb:fe:01:0c:bc:5d:46:23:77:2f:38:
9f:b0:2e:4a:2a:da:e4:5e:9e:02:bb:65:54:68:53:
b3:e4:ee:da:38:ca:57:4f:4c:6d:26:02:87:cc:2f:
f8:33:37:a6:0b:98:47:55:85:dd:4d:8d:e7:c4:65:
d1:8b:31:25:5b:04:da:da:fb:a0:f1:1e:b7:16:7c:
60:54:0b:26:26:82:d2:dc:0c:b7:7c:6f:61:59:8e:
4f:7f:89:e7:ef:5f:2f:f9:f3:16:d4:de:af:eb:3b:
12:52:aa:a9:c2:c7:0e:3b:87:aa:57:89:33:5b:cf:
08:96:1a:0e:f3:29:e5:5f:3f:08:8d:09:ee:85:c7:
bd:28:34:2f:bc:ea:aa:5f:c0:44:38:34:da:0f:6c:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F7:FD:9C:BF:9C:43:D6:B1:7B:F6:0A:65:90:8D:E2:ED:FC:A9:12
X509v3 Authority Key Identifier:
keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
ac:0d:d1:c0:0a:bf:90:b1:cd:35:06:e7:3a:48:25:79:91:fd:
ac:47:42:50:a5:bd:8c:a5:29:40:13:01:66:a7:de:ba:20:ca:
7d:a0:0a:4c:83:d4:6d:ad:41:e5:37:ec:d3:18:e6:42:8e:0f:
95:44:8b:25:e9:f3:73:10:9a:98:87:91:45:cb:73:68:05:c4:
91:d8:54:f6:78:b2:83:9d:a1:43:1f:0e:bb:9c:ff:70:66:2c:
c0:74:af:e2:94:82:70:06:9a:7d:da:ef:2f:8f:bb:af:d0:6a:
f1:c3:61:6f:ae:64:92:b7:86:5c:25:8e:ff:79:d7:44:81:a1:
8d:6e:54:95:e2:b7:fc:86:49:d2:90:07:b2:d5:f9:49:5a:83:
fc:91:1e:ba:9a:dc:57:3d:ce:84:f8:09:74:47:f2:60:06:36:
04:c9:02:a8:6f:24:ba:74:b0:00:32:69:02:b4:15:6e:a7:9e:
3c:e0:68:3a:7d:44:60:68:36:58:f4:51:a4:ea:c2:e6:35:12:
f4:b3:c8:69:0d:43:d7:4f:a0:82:c3:44:99:ec:37:9e:36:b8:
42:24:61:de:f4:e7:bc:96:4a:d1:cb:30:d2:a3:2f:e1:ec:96:
ab:95:3d:f7:84:39:5c:88:2f:b4:00:cc:ee:08:59:f9:c1:f9:
5d:63:cd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:37 2025 by rpki-client