Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031633a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363031633a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 47dS+/6ufdfwNgKNAvOZOpB6MXYlpa54yo3ZLBPOdyA=
Subject key identifier: 1A:A1:42:50:DA:67:72:F7:D2:AB:F2:45:6C:A4:A6:B0:EA:2C:7D:DA
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 1334D794D545D35F31506907213CB3EE04FD89B9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031633a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sun 23 Feb 2025 07:57:26 +0000
ROA not before: Sun 23 Feb 2025 07:52:26 +0000
ROA not after: Sun 22 Feb 2026 07:57:26 +0000
asID: 401507
IP address blocks: 2a14:7584:601c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:34:d7:94:d5:45:d3:5f:31:50:69:07:21:3c:b3:ee:04:fd:89:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 23 07:52:26 2025 GMT
Not After : Feb 22 07:57:26 2026 GMT
Subject: CN=1AA14250DA6772F7D2ABF2456CA4A6B0EA2C7DDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:3a:61:40:5c:54:94:c9:ed:c0:cf:96:96:
f4:71:cb:1a:c8:7b:53:90:be:3a:60:9f:17:d9:f7:
34:0b:df:6d:7a:7b:86:ab:b2:15:fb:12:b9:44:1a:
0e:f4:08:98:06:61:e2:25:85:a2:70:de:a0:b2:02:
4c:6a:e0:78:50:cd:e8:ac:6f:f8:6a:62:ad:86:f7:
ce:ec:ce:23:a1:20:02:4c:1d:f3:5f:41:47:7d:e6:
cc:79:f0:05:60:c3:79:06:e3:e8:8e:d8:da:be:2b:
88:f0:a7:17:13:73:22:53:82:b1:23:d1:e9:ab:ae:
8f:9b:31:4c:cf:a2:83:fb:70:47:8f:4a:75:4f:01:
66:3a:3e:f9:0a:bf:9a:a4:31:f5:3f:94:64:7c:ae:
0a:a8:a1:39:06:5d:4f:d8:ca:aa:c9:f0:24:b2:f6:
60:f4:f5:5a:d9:b1:a4:d8:13:fc:b6:4f:a6:15:23:
39:79:a5:5d:eb:fc:a3:d0:52:72:fd:93:b4:73:6b:
8d:36:b7:33:5e:c2:c5:2c:1a:27:7f:05:d9:31:18:
60:78:40:86:44:dd:f2:57:59:b1:82:87:c6:a8:86:
41:03:6b:9a:d0:c5:23:9c:59:98:d4:fe:0b:7a:39:
76:6c:c3:48:40:de:08:3a:b1:50:b4:47:62:9c:f4:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A1:42:50:DA:67:72:F7:D2:AB:F2:45:6C:A4:A6:B0:EA:2C:7D:DA
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363031633a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:601c::/48
Signature Algorithm: sha256WithRSAEncryption
b3:b2:ad:79:8b:98:6b:ef:b0:49:8a:17:56:3f:c7:b1:ae:4a:
ed:f8:6d:e3:10:78:12:b0:70:c9:6a:22:6d:ca:03:cd:15:1b:
42:ca:a3:f1:49:5c:e2:44:9c:d6:5e:cb:7d:cc:df:2b:ab:47:
ec:14:e3:7d:d4:11:6a:b8:05:1b:33:21:fd:f2:9b:d0:a9:bc:
e5:fd:e2:51:39:c4:9e:b1:e9:c7:f0:1d:4c:51:52:79:e6:6a:
8e:41:23:9e:97:80:eb:38:56:c0:29:3d:2c:93:40:e8:87:1f:
e2:43:d5:c5:a5:b3:4e:0c:59:74:41:b7:59:d8:42:45:cd:e3:
e6:e9:16:27:22:b8:ce:ad:bc:c4:cf:c1:c8:ed:35:68:3c:38:
9b:c8:89:56:7e:be:75:7d:98:93:40:c4:ba:ac:a9:7d:13:8b:
7c:be:0b:ea:c3:b6:17:a2:cd:a4:18:d5:94:29:84:a1:a9:e2:
44:b7:fa:02:ee:40:ca:2d:fe:f3:78:85:a6:0e:84:61:60:3d:
66:cd:1e:a1:ae:c6:89:17:b7:1c:9c:f0:53:1b:cf:79:d3:8d:
9d:3a:b4:00:e2:16:cd:fe:99:78:3e:40:32:8c:dc:5c:e6:05:
9b:42:37:1d:03:3b:65:1a:07:78:7f:06:19:ed:d1:a3:34:e5:
7d:d5:31:a4
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUEzTXlNVF018xUGkHITyz7gT9ibkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAyMjMwNzUyMjZaFw0yNjAyMjIwNzU3MjZaMDMxMTAvBgNV
BAMTKDFBQTE0MjUwREE2NzcyRjdEMkFCRjI0NTZDQTRBNkIwRUEyQzdEREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd3zphQFxUlMntwM+WlvRxyxrI
e1OQvjpgnxfZ9zQL3216e4arshX7ErlEGg70CJgGYeIlhaJw3qCyAkxq4HhQzeis
b/hqYq2G987sziOhIAJMHfNfQUd95sx58AVgw3kG4+iO2Nq+K4jwpxcTcyJTgrEj
0emrro+bMUzPooP7cEePSnVPAWY6PvkKv5qkMfU/lGR8rgqooTkGXU/YyqrJ8CSy
9mD09VrZsaTYE/y2T6YVIzl5pV3r/KPQUnL9k7Rza402tzNewsUsGid/BdkxGGB4
QIZE3fJXWbGCh8aohkEDa5rQxSOcWZjU/gt6OXZsw0hA3gg6sVC0R2Kc9JgtAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUGqFCUNpncvfSq/JFbKSmsOosfdowHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzAzMTYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGAc
MA0GCSqGSIb3DQEBCwUAA4IBAQCzsq15i5hr77BJihdWP8exrkrt+G3jEHgSsHDJ
aiJtygPNFRtCyqPxSVziRJzWXst9zN8rq0fsFON91BFquAUbMyH98pvQqbzl/eJR
OcSesenH8B1MUVJ55mqOQSOel4DrOFbAKT0sk0Dohx/iQ9XFpbNODFl0QbdZ2EJF
zePm6RYnIrjOrbzEz8HI7TVoPDibyIlWfr51fZiTQMS6rKl9E4t8vgvqw7YXos2k
GNWUKYShqeJEt/oC7kDKLf7zeIWmDoRhYD1mzR6hrsaJF7ccnPBTG895042dOrQA
4hbN/pl4PkAyjNxc5gWbQjcdAztlGgd4fwYZ7dGjNOV91TGk
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:36:16 2025 by rpki-client