Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063313a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363063313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: y5d/TFuNhgD+P8M1vtDx+Uvfh0y5RMwtGoPdcmISSgs=
Subject key identifier: 2A:A4:94:E7:90:7D:EA:D2:FE:85:4A:51:13:A5:71:D1:D5:4F:69:55
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 509198E4B61E0D2C1C09C32F9F6FC1714D181BB4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063313a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sat 22 Mar 2025 15:21:22 +0000
ROA not before: Sat 22 Mar 2025 15:16:22 +0000
ROA not after: Sat 21 Mar 2026 15:21:22 +0000
asID: 401507
IP address blocks: 2a14:7584:60c1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:91:98:e4:b6:1e:0d:2c:1c:09:c3:2f:9f:6f:c1:71:4d:18:1b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 22 15:16:22 2025 GMT
Not After : Mar 21 15:21:22 2026 GMT
Subject: CN=2AA494E7907DEAD2FE854A5113A571D1D54F6955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:3c:d4:95:a9:ba:9a:fd:57:fd:24:8d:55:
d1:47:11:b5:a8:0f:d3:48:d8:68:e9:c2:9b:e7:e3:
de:13:d5:82:df:e3:bb:73:c7:12:42:a9:1b:4a:f9:
78:27:92:ec:d2:2f:01:cd:05:f1:3f:6b:2c:9e:54:
e9:9b:d3:66:25:c3:cb:16:fe:cc:9b:a3:46:81:a2:
00:03:50:24:0f:d7:c4:16:6b:93:2f:2a:f9:fc:1d:
cd:7f:c9:ee:fa:8b:99:56:78:bf:cd:e9:0a:c4:9a:
1b:57:6a:f5:72:1c:81:0c:73:1a:49:f9:4e:a4:99:
21:26:e9:32:b2:ee:28:4d:54:04:9a:d2:90:23:59:
02:fb:50:22:85:11:40:0c:ce:e5:b5:f4:68:71:d5:
ca:e8:16:e2:e3:7a:45:17:8c:e7:14:b1:c2:fc:18:
b4:66:f7:02:bd:4a:b2:53:4b:76:7d:2d:96:36:00:
f0:86:65:e1:ea:22:80:a5:1a:25:03:e1:c4:ce:a6:
ec:ce:f1:03:b7:38:fe:78:ea:13:f2:9f:bc:22:11:
0d:4d:0b:46:eb:ba:ee:2b:a2:fe:3f:58:46:b4:2c:
f1:1d:c6:9a:e9:3d:34:7a:da:0c:6f:5e:90:33:dd:
db:05:6c:3a:30:20:86:6c:b6:d8:66:64:82:e6:40:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A4:94:E7:90:7D:EA:D2:FE:85:4A:51:13:A5:71:D1:D5:4F:69:55
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063313a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60c1::/48
Signature Algorithm: sha256WithRSAEncryption
a3:b0:e8:b0:f4:21:02:4c:99:c9:b1:2a:42:e5:50:92:dd:4b:
1d:6e:bc:74:0f:eb:cf:37:54:58:09:bf:fe:7e:de:dc:77:59:
6d:f5:77:d6:0d:5a:9e:cc:90:b0:db:5a:f2:58:0e:39:98:59:
87:2b:0d:b8:06:fa:b2:2d:d3:dc:86:a4:ad:06:7c:32:22:aa:
8b:e5:28:1d:c3:09:35:e2:42:e8:a5:a1:88:d8:ac:fe:73:79:
a8:6b:d0:57:e6:d3:20:e5:43:93:c1:bf:65:3b:79:aa:25:95:
02:1f:88:40:f1:a9:e2:2b:c5:fb:d9:a2:f8:8e:e8:b4:97:6f:
6f:eb:92:b3:a3:4e:7c:2a:cc:24:b7:86:af:91:2a:74:ba:04:
4a:57:1d:79:6c:1a:98:e0:53:f8:d4:47:49:e3:cc:fd:de:a7:
a2:fb:00:83:a2:a7:b2:1e:31:f8:a7:58:90:78:89:01:ed:c3:
9d:50:fa:32:3e:f7:70:7e:f6:4a:94:ce:e5:6f:32:9e:5e:4f:
f3:5b:70:52:a7:d8:f6:00:cb:e0:e0:e3:cc:88:d2:9c:ef:65:
f7:05:0b:7d:bf:ec:42:a5:e0:c2:2b:04:f1:37:48:47:0b:c8:
aa:6c:6a:b6:cd:e3:92:c1:23:69:3a:3f:fc:e8:99:a0:2b:f9:
ef:54:35:af
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUUJGY5LYeDSwcCcMvn2/BcU0YG7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTAzMjIxNTE2MjJaFw0yNjAzMjExNTIxMjJaMDMxMTAvBgNV
BAMTKDJBQTQ5NEU3OTA3REVBRDJGRTg1NEE1MTEzQTU3MUQxRDU0RjY5NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT0zzUlam6mv1X/SSNVdFHEbWo
D9NI2Gjpwpvn494T1YLf47tzxxJCqRtK+XgnkuzSLwHNBfE/ayyeVOmb02Ylw8sW
/sybo0aBogADUCQP18QWa5MvKvn8Hc1/ye76i5lWeL/N6QrEmhtXavVyHIEMcxpJ
+U6kmSEm6TKy7ihNVASa0pAjWQL7UCKFEUAMzuW19Ghx1croFuLjekUXjOcUscL8
GLRm9wK9SrJTS3Z9LZY2APCGZeHqIoClGiUD4cTOpuzO8QO3OP546hPyn7wiEQ1N
C0bruu4rov4/WEa0LPEdxprpPTR62gxvXpAz3dsFbDowIIZstthmZILmQIMhAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUKqSU55B96tL+hUpRE6Vx0dVPaVUwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzA2MzMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGDB
MA0GCSqGSIb3DQEBCwUAA4IBAQCjsOiw9CECTJnJsSpC5VCS3Usdbrx0D+vPN1RY
Cb/+ft7cd1lt9XfWDVqezJCw21ryWA45mFmHKw24BvqyLdPchqStBnwyIqqL5Sgd
wwk14kLopaGI2Kz+c3moa9BX5tMg5UOTwb9lO3mqJZUCH4hA8aniK8X72aL4jui0
l29v65Kzo058Kswkt4avkSp0ugRKVx15bBqY4FP41EdJ48z93qei+wCDoqeyHjH4
p1iQeIkB7cOdUPoyPvdwfvZKlM7lbzKeXk/zW3BSp9j2AMvg4OPMiNKc72X3BQt9
v+xCpeDCKwTxN0hHC8iqbGq2zeOSwSNpOj/86JmgK/nvVDWv
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:33:38 2025 by rpki-client