Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031613a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363031613a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: mciPY9p2OJtsNokwB35TGGgq2SZztXNr+BL8DBv1KCE=
Subject key identifier: 11:E1:56:2F:F3:80:3D:73:CD:52:D5:AB:10:12:AA:E3:CB:14:6F:91
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5660BD9494D30BA1F2107BC7A61F7BE4465F8076
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031613a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sun 23 Feb 2025 07:57:25 +0000
ROA not before: Sun 23 Feb 2025 07:52:25 +0000
ROA not after: Sun 22 Feb 2026 07:57:25 +0000
asID: 401507
IP address blocks: 2a14:7584:601a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:60:bd:94:94:d3:0b:a1:f2:10:7b:c7:a6:1f:7b:e4:46:5f:80:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 23 07:52:25 2025 GMT
Not After : Feb 22 07:57:25 2026 GMT
Subject: CN=11E1562FF3803D73CD52D5AB1012AAE3CB146F91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:0c:5a:ca:90:c5:b2:97:81:c2:bd:07:46:
e2:24:bd:49:30:36:3f:5a:b4:60:6f:68:2a:e1:c4:
11:e1:e0:c4:4a:35:89:10:cb:10:27:72:3f:37:bf:
7a:b7:2c:6c:85:d4:b1:11:ce:40:30:49:b4:dd:fd:
d1:f3:99:a5:0e:f2:ad:7d:5e:ff:98:59:90:1e:d2:
ba:9b:d9:fd:7e:0a:40:8a:f2:53:de:12:54:29:ba:
1d:29:9c:11:14:d8:a2:ea:c5:be:d8:77:2e:c9:18:
10:23:e6:4d:3f:4d:1d:ff:d8:12:6c:c3:3c:b4:e7:
31:68:9e:04:aa:ab:82:f2:21:8c:ef:3d:93:04:0f:
4b:8d:0d:03:78:c0:e7:65:48:4b:94:3b:86:14:18:
83:37:15:f2:46:dd:d9:71:30:91:13:59:92:0f:f1:
35:0b:ea:21:31:ee:9d:3b:a4:b3:57:dd:36:47:b7:
c5:ca:a7:c7:9a:ad:40:56:f1:c6:0e:b3:23:ec:2d:
aa:3d:57:d9:d5:a5:fe:86:a0:04:a1:58:d1:3f:e7:
65:0d:52:5d:08:32:d8:4b:8a:ed:11:01:ab:59:90:
2d:d6:cd:24:ea:2d:c4:44:8d:4d:bf:44:14:db:75:
f2:f5:4f:0c:2d:c6:a8:5c:4f:0e:dc:5f:b0:9f:77:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E1:56:2F:F3:80:3D:73:CD:52:D5:AB:10:12:AA:E3:CB:14:6F:91
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031613a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:601a::/48
Signature Algorithm: sha256WithRSAEncryption
7c:59:f8:b6:42:69:a8:8e:dc:5c:7e:9e:dd:89:14:e4:72:58:
2b:e5:7d:87:9f:a3:90:9c:fb:0b:57:8a:cb:40:9c:21:3c:98:
5c:a6:53:3f:a6:e3:da:e2:d7:87:0c:e0:8c:be:60:3b:ce:9e:
a0:db:e6:46:d6:24:4a:12:0a:1f:ba:55:56:65:c3:de:ec:99:
db:01:ca:af:15:d9:ef:82:ae:be:13:b2:03:6d:e7:e7:d2:49:
c3:35:1e:de:ef:f8:b2:17:64:a9:4a:3b:92:c6:a8:ff:e0:d2:
07:36:13:b5:59:27:0f:b1:71:57:0c:4d:1b:19:80:16:ee:dc:
3f:1b:61:94:d8:b0:73:4d:bd:9d:56:83:de:19:0e:20:c7:a8:
1d:05:33:cc:d5:84:1a:e8:8d:59:b1:b4:21:b0:7d:26:7e:d7:
3d:a0:7a:6a:17:e1:f1:0e:7b:3f:81:54:6e:61:eb:b9:df:da:
16:1b:bf:0c:a3:3e:18:1f:23:3c:48:43:fe:4a:ed:7c:a4:b0:
a1:6e:32:4e:ca:aa:58:67:48:83:c0:ab:9b:b5:75:48:78:23:
d6:5f:19:73:b4:b2:ea:fd:7c:88:45:67:02:b0:a7:e9:24:33:
1e:47:8b:36:d3:3c:d0:64:23:c4:d5:f3:57:be:95:85:e3:27:
fe:7e:79:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:36:56 2025 by rpki-client