Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/1/326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa
File: 326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier: 22BiUIqOHAzDkTZwKHMtE+Vpka5MZG5LYp6+VhQMqPA=
Subject key identifier: 40:CD:70:3F:83:41:28:A6:AE:9A:20:D7:AD:58:4B:BF:68:02:91:C6
Certificate issuer: /CN=92E50433A3DEA8210EFF1182AA2F5208427AAEC6
Certificate serial: 6A0013A101F98D98C80C78379D2869351B14FA94
Authority key identifier: 92:E5:04:33:A3:DE:A8:21:0E:FF:11:82:AA:2F:52:08:42:7A:AE:C6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/92E50433A3DEA8210EFF1182AA2F5208427AAEC6.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/1/326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa
Signing time: Thu 24 Oct 2024 21:03:26 +0000
ROA not before: Thu 24 Oct 2024 20:58:26 +0000
ROA not after: Thu 23 Oct 2025 21:03:26 +0000
asID: 54148
IP address blocks: 2a07:54c1:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:00:13:a1:01:f9:8d:98:c8:0c:78:37:9d:28:69:35:1b:14:fa:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92E50433A3DEA8210EFF1182AA2F5208427AAEC6
Validity
Not Before: Oct 24 20:58:26 2024 GMT
Not After : Oct 23 21:03:26 2025 GMT
Subject: CN=40CD703F834128A6AE9A20D7AD584BBF680291C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:26:2c:b3:63:16:1c:d3:21:12:23:48:45:
e1:8b:f8:ad:b0:8b:11:32:f2:d4:a7:6b:f7:e4:91:
80:0c:8f:39:fb:33:2f:4e:ac:7c:ff:89:99:d8:de:
77:c8:6d:6e:25:a5:2d:3e:18:42:8a:fd:d3:06:08:
a2:59:d9:49:3c:86:f7:8f:0a:29:bd:62:e3:54:81:
ff:71:c9:d9:36:e0:92:bf:a3:ac:2b:25:d2:ce:20:
a1:56:64:79:27:33:ec:e0:fa:42:c5:09:27:31:f5:
3c:2d:10:5a:74:90:57:04:4f:53:e1:2d:66:01:0e:
b1:45:68:9a:6c:38:60:2c:53:4e:bb:05:71:12:2f:
72:3c:7c:3b:37:48:3d:cb:93:f7:55:ff:67:90:20:
2f:23:4d:e7:39:d4:4e:32:e4:4d:39:fe:32:bb:a2:
1d:e1:a4:b1:2c:52:33:6c:eb:7e:66:c1:32:1a:c6:
e6:3a:ab:08:5a:45:e3:11:af:aa:c6:2d:c0:06:08:
49:86:6e:2b:bb:30:a4:ef:2c:ae:37:a6:e7:d1:5a:
da:66:4f:db:97:87:06:60:05:26:ae:e9:8d:59:b4:
01:34:9c:22:1b:82:a1:5a:f0:6d:3e:3e:6a:34:36:
b5:6e:68:d7:2e:65:73:69:41:aa:93:c6:46:0b:23:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CD:70:3F:83:41:28:A6:AE:9A:20:D7:AD:58:4B:BF:68:02:91:C6
X509v3 Authority Key Identifier:
keyid:92:E5:04:33:A3:DE:A8:21:0E:FF:11:82:AA:2F:52:08:42:7A:AE:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/1/92E50433A3DEA8210EFF1182AA2F5208427AAEC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/92E50433A3DEA8210EFF1182AA2F5208427AAEC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/1/326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:dead::/48
Signature Algorithm: sha256WithRSAEncryption
a9:72:c9:66:54:cb:f9:99:e5:f7:ff:b4:ac:d7:24:df:9d:7d:
05:b3:c2:d8:45:c6:0f:d1:49:63:66:0f:51:7a:6f:7f:69:e0:
e7:dc:c3:77:86:9e:cc:93:76:ae:5d:e8:e1:52:5d:0e:c1:d7:
7a:74:39:47:0c:26:ae:da:e5:d7:bb:2a:5e:8e:a8:82:40:5c:
64:39:33:af:18:7c:15:fb:0f:eb:24:56:c7:af:db:06:9c:15:
23:f6:b0:2a:2b:20:04:66:2e:00:1a:f3:e5:14:fb:d7:21:1d:
34:2e:1d:82:37:47:14:31:3b:b1:b9:11:e5:3b:c3:e6:20:03:
bd:92:f6:9c:30:10:34:19:9f:3a:51:c7:aa:1c:4c:88:6a:27:
ba:0f:d0:fd:7e:b8:ee:6f:84:5d:f2:80:ff:7f:67:99:ec:63:
02:78:32:24:b4:62:f3:7a:f1:af:4d:8d:40:8e:6b:66:ea:8b:
91:df:c7:40:d0:b3:93:60:6f:42:15:88:cc:84:9b:0f:97:d3:
69:f1:68:33:92:4d:7e:f8:b8:92:28:38:d3:7c:c1:73:d6:b5:
f6:df:a7:c2:f8:58:65:53:6d:7c:b1:01:9f:f6:18:6f:cc:f6:
e2:71:3f:44:08:39:54:3e:38:8f:c8:1c:85:6b:ce:8a:e6:68:
d3:ef:e8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:08:38 2025 by rpki-client