Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031623a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363031623a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: ZBGTHLNWGFYJ9RVi1s3ufObJvDdNQy+2mqU7YQDVq0s=
Subject key identifier: 6B:D5:F4:E4:B1:F7:76:9C:64:0B:E9:93:FC:C4:F3:B3:14:1D:18:6F
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 35A881F75FA99520FD1475E4D8A16B9B9B617462
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031623a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sun 23 Feb 2025 07:57:25 +0000
ROA not before: Sun 23 Feb 2025 07:52:25 +0000
ROA not after: Sun 22 Feb 2026 07:57:25 +0000
asID: 401507
IP address blocks: 2a14:7584:601b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a8:81:f7:5f:a9:95:20:fd:14:75:e4:d8:a1:6b:9b:9b:61:74:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 23 07:52:25 2025 GMT
Not After : Feb 22 07:57:25 2026 GMT
Subject: CN=6BD5F4E4B1F7769C640BE993FCC4F3B3141D186F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:f5:79:27:05:b1:cf:45:69:52:93:ea:c0:
d3:13:23:d7:44:93:58:06:cb:9b:74:27:2c:61:e9:
c2:85:d5:e0:9e:24:9a:da:61:61:04:18:32:1d:be:
88:c2:a9:07:2b:27:14:cd:0d:3f:c6:6a:37:52:2d:
d1:02:1b:71:b3:d0:20:b0:c7:72:d6:11:3a:18:63:
9a:ad:e5:f8:29:07:ef:c3:a1:9f:1f:63:52:a6:a2:
cd:6c:bc:87:94:44:86:5b:10:99:d8:e0:b3:37:88:
39:91:de:6b:36:16:14:95:1d:10:e0:af:41:b6:ab:
14:2a:53:00:50:8b:9f:81:cf:8c:4d:f5:92:87:24:
ad:f4:d9:01:58:c8:ef:ef:af:da:aa:70:e7:c3:c4:
6d:85:f2:f1:70:6b:33:32:a4:ec:1a:94:97:59:37:
0c:06:34:51:53:b0:5e:66:b1:86:98:a1:e3:50:47:
0f:db:2c:c6:8d:06:99:e7:36:f4:6f:c9:23:5a:65:
29:52:9d:2a:86:79:7f:88:bd:18:fb:27:e1:ae:f4:
bb:cc:d2:2a:12:be:44:0d:0f:65:18:61:4d:05:5a:
5c:ef:76:af:61:50:34:d7:b3:b2:2b:d1:94:4c:ad:
27:63:d0:d1:2c:4e:a1:8c:b8:cf:b8:3a:14:5f:db:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D5:F4:E4:B1:F7:76:9C:64:0B:E9:93:FC:C4:F3:B3:14:1D:18:6F
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031623a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:601b::/48
Signature Algorithm: sha256WithRSAEncryption
2a:f5:55:e2:6c:32:04:7b:04:cc:c7:4b:26:b0:35:f5:0d:40:
ba:b3:7a:36:71:ac:e3:cc:e6:be:6f:2c:06:3d:5f:3d:42:f2:
06:41:12:c3:68:91:75:73:9f:01:72:82:0f:c8:c7:40:a0:32:
ff:d1:67:03:79:56:8e:6c:d2:87:6b:95:2f:23:6c:73:8e:59:
9f:97:74:3a:4a:c5:9d:36:f0:03:31:e2:d5:af:e1:69:b4:d5:
8a:96:0e:cc:f0:54:ce:f5:1b:d1:1f:70:42:47:c5:8d:0a:5d:
f2:ec:ca:ea:2c:75:b7:17:46:38:50:66:78:35:4c:07:20:2d:
aa:fd:2c:50:b2:56:11:4e:d7:8d:01:84:34:48:9b:57:cc:fd:
f4:e5:8d:93:49:b9:70:33:54:fb:b0:03:18:a9:c0:93:02:a4:
31:53:d7:74:08:e6:78:ac:09:40:ac:0f:5f:87:c0:7c:85:8c:
7a:c6:a7:15:db:82:8c:da:ee:ab:9a:df:59:79:4c:95:c7:86:
9d:8f:f1:60:b2:86:d6:09:a8:1f:3e:f9:40:ea:f1:7c:69:05:
76:ae:7b:fe:b3:57:5c:60:0b:81:66:dd:5e:91:fe:05:78:e1:
03:c1:91:1c:68:c7:fc:82:bb:f1:47:73:48:fb:58:8b:65:5a:
76:d9:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:35:36 2025 by rpki-client