Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier: bMoEMWZbUhh8o8GiNSTMS+w1AfR2oDgGEyyb/rEZ6fc=
Subject key identifier: C0:1C:16:CD:1E:79:08:CA:2E:0D:8A:B7:BE:0C:32:62:09:EB:9F:A5
Certificate issuer: /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial: 6A637E823DAE94FAAE301AECA5127391F79E5B77
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa
Signing time: Mon 27 Jan 2025 12:14:14 +0000
ROA not before: Mon 27 Jan 2025 12:09:14 +0000
ROA not after: Mon 26 Jan 2026 12:14:14 +0000
asID: 54681
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:63:7e:82:3d:ae:94:fa:ae:30:1a:ec:a5:12:73:91:f7:9e:5b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892843788777A43273322096510EA10880E7E5EA
Validity
Not Before: Jan 27 12:09:14 2025 GMT
Not After : Jan 26 12:14:14 2026 GMT
Subject: CN=C01C16CD1E7908CA2E0D8AB7BE0C326209EB9FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:85:3d:94:ba:50:46:9d:cb:0d:b8:45:af:82:
51:de:29:95:d4:2a:cc:79:07:bb:ca:2e:d2:49:ca:
70:99:34:6c:44:ab:bd:1a:3f:29:e1:6b:c3:b0:d1:
c7:3e:75:08:10:30:5f:6b:68:f9:50:da:7e:51:87:
3c:c6:62:fc:c6:24:31:2f:12:dc:d2:cb:10:64:e2:
0b:9b:1f:32:36:3b:43:42:6e:45:a2:9e:26:94:54:
3a:b0:9e:bf:69:4d:06:c2:7d:72:d6:03:93:8d:30:
3c:33:8b:7a:88:a5:9c:e3:32:3c:45:e1:67:a6:ba:
5c:16:18:bd:27:09:c0:f8:b4:95:82:be:14:80:e6:
01:aa:11:a8:db:70:fb:40:89:64:7c:b2:d8:57:73:
7f:d5:a8:75:6d:34:89:30:d1:db:a1:e0:47:b4:0a:
13:e6:8a:59:b3:d1:18:d4:cd:23:0f:ab:5f:32:f6:
39:2c:ba:cf:9e:42:d0:8a:8b:57:10:21:7d:e9:38:
0a:11:e3:30:21:6e:a0:e3:27:8a:e2:f7:c5:78:5c:
98:82:19:45:f1:ad:ea:70:c6:fd:1e:01:ca:a1:85:
33:b1:ee:95:d7:55:93:64:f5:6d:03:f6:d8:28:0b:
e6:d7:db:ed:4b:40:98:73:0a:81:e6:75:6e:b9:ee:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1C:16:CD:1E:79:08:CA:2E:0D:8A:B7:BE:0C:32:62:09:EB:9F:A5
X509v3 Authority Key Identifier:
keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
19:19:c9:aa:41:1b:a1:2a:b0:45:b3:c3:a2:75:ae:7f:9a:a8:
ad:86:99:88:6a:f5:1a:b6:66:58:33:77:30:38:5e:a9:8e:86:
98:21:b6:8c:99:a3:f1:26:ad:97:3f:f3:88:ee:7e:21:03:4b:
06:af:ff:cf:87:9d:c4:30:c7:b2:c9:c4:2c:70:44:97:b5:54:
34:19:3e:8a:6a:31:7a:af:de:3d:36:4b:ee:d2:1a:8a:7f:69:
12:11:2d:88:99:c0:c2:e5:b1:02:0d:24:59:ed:b8:26:d5:33:
38:40:1b:e8:a1:74:7f:63:5e:e4:79:5e:65:1b:2d:75:ca:ee:
65:e0:10:24:4a:67:56:17:fe:5c:87:87:1a:11:47:d8:a2:9f:
c6:58:fb:27:fd:43:05:56:2a:57:cc:4d:28:2f:50:4c:8f:58:
72:80:26:c6:cf:1d:a1:76:4c:49:94:7e:b0:45:02:9f:74:16:
6f:b2:f4:d2:3c:ca:20:d3:5b:74:2a:46:2b:55:ef:d6:52:1b:
b4:b1:92:16:e0:c4:50:0b:df:60:4d:67:4c:71:03:5a:a0:7a:
5c:be:41:63:cf:3b:01:83:8e:c9:f8:c2:96:35:dc:a3:a8:d0:
97:62:e7:ab:e6:a4:0d:9f:0b:89:b3:db:4b:c8:8e:ab:d8:8d:
a3:8d:35:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:23 2025 by rpki-client