Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa (raw, json)
Hash identifier: Cv4+F1ln272U03efG/5t3VQladOvMl7nBetVBj5s4zE=
Subject key identifier: EB:51:DA:44:E1:4D:EF:1D:D1:B5:D1:94:F6:04:73:19:B8:6D:F3:E4
Certificate issuer: /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial: 1A3896CB656F39F820D299DF912A77ED0C2FCEB8
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa
Signing time: Mon 27 Jan 2025 12:14:13 +0000
ROA not before: Mon 27 Jan 2025 12:09:13 +0000
ROA not after: Mon 26 Jan 2026 12:14:13 +0000
asID: 211380
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:38:96:cb:65:6f:39:f8:20:d2:99:df:91:2a:77:ed:0c:2f:ce:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892843788777A43273322096510EA10880E7E5EA
Validity
Not Before: Jan 27 12:09:13 2025 GMT
Not After : Jan 26 12:14:13 2026 GMT
Subject: CN=EB51DA44E14DEF1DD1B5D194F6047319B86DF3E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:62:00:94:d6:46:db:35:31:91:a3:21:b8:12:
5c:58:34:89:a5:1e:45:64:79:7a:61:41:ed:50:42:
ca:40:30:4e:33:6a:b4:24:f7:a0:bc:41:a5:bd:ed:
41:4c:f1:1d:4b:85:8c:f4:7b:2f:ed:f7:94:1d:16:
12:26:bb:d7:67:d6:2d:ff:11:8f:7f:87:d5:54:e5:
70:9b:06:17:d2:8c:63:69:6b:c3:8e:69:e5:eb:9a:
04:1d:6e:75:59:1f:f5:bd:41:30:4c:61:7a:95:71:
de:90:dd:77:d3:ea:d9:10:41:3b:38:15:8b:a0:06:
e5:5b:43:36:fd:08:48:f3:59:cb:e4:ba:fa:76:9a:
ed:22:6f:32:55:19:09:c7:31:07:1d:bc:ed:0b:3f:
f4:5d:73:8a:ff:61:2f:b5:2d:ae:15:9f:a0:e4:4f:
fc:18:d8:fd:ef:38:e7:34:88:9b:86:7f:95:56:d8:
d9:59:a1:29:f0:56:05:0c:3b:4f:a5:69:46:06:67:
ba:9b:84:23:7b:03:88:67:51:55:44:92:e5:c6:3b:
ca:b0:09:1e:73:3a:fa:24:50:27:cf:d9:9b:36:bf:
87:e0:55:cc:6e:eb:d7:e8:3e:2a:b9:45:b7:9f:52:
80:76:45:5c:91:0c:bd:ec:18:08:46:22:1e:5d:43:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:51:DA:44:E1:4D:EF:1D:D1:B5:D1:94:F6:04:73:19:B8:6D:F3:E4
X509v3 Authority Key Identifier:
keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
8c:f7:eb:50:8f:51:c5:91:31:1e:ff:02:7f:58:e2:5f:69:43:
bb:cf:76:7b:15:b7:e7:e4:c4:0d:ca:ce:ca:1c:90:5e:ee:41:
ae:4f:d5:bb:c0:b7:f8:5f:b7:73:16:ac:40:a1:ea:4f:11:06:
c6:7e:31:6e:59:08:b9:16:ee:f8:6c:16:b3:74:cd:d8:fc:21:
0c:bb:37:ff:7b:55:69:d4:20:1e:84:c6:12:6e:20:56:72:d9:
16:a5:a3:ce:bf:d9:93:d6:ff:48:19:01:42:fb:c5:3f:21:4e:
59:88:34:c5:5c:9f:5c:07:ca:85:39:b1:57:e5:2e:47:50:d8:
a5:af:39:5e:b0:e8:90:04:c7:80:26:e4:32:49:a0:2d:c5:f8:
f3:93:e2:2e:8d:31:4a:98:51:a6:ed:be:25:d3:86:14:50:ae:
bf:98:79:7e:de:77:ac:74:35:d0:c3:0e:d4:71:80:bf:b5:e2:
ea:2a:77:bd:75:32:b9:76:13:72:a4:44:a6:ac:9e:41:a0:de:
f6:02:27:0d:86:3d:de:80:ff:d3:b7:53:e6:9f:0c:fb:fd:e6:
f5:3c:9c:2f:2e:1e:a1:c3:b9:35:b7:e2:69:3a:ab:cb:dd:fc:
aa:67:3f:f9:e7:3c:14:8a:d3:f0:84:83:51:74:62:39:96:54:
41:18:68:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:02 2025 by rpki-client