Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa
File: 326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa (raw, json)
Hash identifier: Fg/HO/Z9W9eL+BDVpuGWMg3NEbeVuv/2m8W8++QI8zY=
Subject key identifier: F5:82:EB:DB:0C:3F:3A:62:A4:A6:F8:71:77:A6:2A:74:87:F6:BB:D3
Certificate issuer: /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial: 55C538CB974381AA4AEEEBC9AE87704D7A0C7857
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa
Signing time: Mon 27 Jan 2025 12:14:13 +0000
ROA not before: Mon 27 Jan 2025 12:09:13 +0000
ROA not after: Mon 26 Jan 2026 12:14:13 +0000
asID: 60743
IP address blocks: 2a07:54c0:ffee::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c5:38:cb:97:43:81:aa:4a:ee:eb:c9:ae:87:70:4d:7a:0c:78:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892843788777A43273322096510EA10880E7E5EA
Validity
Not Before: Jan 27 12:09:13 2025 GMT
Not After : Jan 26 12:14:13 2026 GMT
Subject: CN=F582EBDB0C3F3A62A4A6F87177A62A7487F6BBD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:18:fd:06:b2:f4:11:7e:52:a0:10:8d:07:
a8:ec:1f:32:f8:66:a3:7b:58:38:05:ee:04:83:df:
7a:c8:30:73:67:31:5a:f1:fb:8f:38:19:c6:58:19:
a5:67:f5:6a:f6:5b:91:e2:88:14:f7:11:27:1e:95:
e8:47:97:f5:74:9d:52:fd:b4:33:11:5c:d3:4c:50:
73:5d:4f:a0:37:a6:cd:4c:64:61:dc:a4:2d:29:ef:
08:dd:9c:45:29:ff:a2:be:fb:e6:33:72:82:9c:29:
79:d1:f8:cd:28:48:93:f0:ae:4e:8a:bc:14:7a:3e:
a8:e9:05:3b:77:eb:17:30:23:5c:00:b4:4e:ab:02:
d3:a5:aa:91:77:07:c9:32:b9:01:cf:2c:72:61:44:
87:9f:88:49:3f:eb:2f:fc:1a:c0:69:e3:85:e0:d1:
ba:21:ba:2c:f7:40:ae:65:9d:85:15:dd:26:e2:5a:
fe:11:88:84:92:62:84:9a:1f:eb:6f:fd:d7:79:08:
8c:f9:34:d8:79:e6:15:f4:4f:c0:93:f4:d6:2d:f8:
c7:eb:bb:d6:ee:59:23:f4:3e:ad:a9:1e:80:90:b8:
5e:29:62:72:92:1f:9c:09:0a:76:23:79:4c:26:8b:
9e:12:cc:f0:25:c3:51:b5:a7:a0:a9:9f:f3:9d:1f:
39:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:82:EB:DB:0C:3F:3A:62:A4:A6:F8:71:77:A6:2A:74:87:F6:BB:D3
X509v3 Authority Key Identifier:
keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c0:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
60:7f:db:49:a9:ef:82:e8:ac:62:80:30:8e:ef:46:e4:e1:20:
b8:d4:d4:a4:73:c8:19:6e:ae:58:a9:eb:e1:d5:9b:b3:d9:85:
e7:2b:4d:fe:b9:ac:35:e1:e1:7e:f7:bb:e2:fb:9e:81:f8:5e:
4f:24:42:93:58:2a:83:7d:2a:61:cf:5c:aa:cf:8a:09:18:18:
f2:39:8d:a5:43:f3:ae:4a:ff:f0:43:dc:f3:f5:b2:a7:9e:41:
41:28:b1:a5:cc:48:d8:13:fe:55:a0:d1:d8:b9:51:4e:8a:84:
85:c5:11:bc:92:59:59:da:32:5f:79:3a:e4:61:06:4b:2f:b6:
2f:08:9a:30:1d:d0:d4:d3:9a:54:8f:30:39:90:19:85:48:72:
8d:4d:a1:71:96:8d:f5:89:71:82:40:15:90:e9:55:5b:32:8d:
04:3c:14:bd:85:b6:db:85:a5:00:21:87:8f:b5:7e:c8:49:8c:
64:9c:bb:1b:96:13:c1:f5:f3:52:17:f2:3b:b2:1c:66:1b:29:
49:e8:8f:81:b0:ea:26:5a:75:2b:22:0f:61:49:39:b7:76:13:
26:2e:02:97:1c:bb:9a:da:3c:16:12:ac:5c:e9:e6:bc:93:b2:
f0:0e:17:1c:c9:d2:16:3b:73:3e:ff:6b:ca:5b:ce:51:cb:21:
9b:5b:f4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:53:19 2025 by rpki-client