Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063323a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363063323a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 33bZPJLAT0IGFsYSx7eKzfWxi8GBMCxrv9oOXRYZ+gQ=
Subject key identifier: 2B:37:FF:2F:88:09:8B:08:E0:81:CF:62:96:D6:7F:0E:45:32:4E:4C
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7D55C074D34537213F4A4308B27A78EB18F551FA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063323a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sat 22 Mar 2025 15:21:23 +0000
ROA not before: Sat 22 Mar 2025 15:16:23 +0000
ROA not after: Sat 21 Mar 2026 15:21:23 +0000
asID: 401507
IP address blocks: 2a14:7584:60c2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:55:c0:74:d3:45:37:21:3f:4a:43:08:b2:7a:78:eb:18:f5:51:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 22 15:16:23 2025 GMT
Not After : Mar 21 15:21:23 2026 GMT
Subject: CN=2B37FF2F88098B08E081CF6296D67F0E45324E4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:25:70:18:47:6f:4b:ed:7d:ba:f5:a8:d6:
85:43:eb:2a:69:7a:2b:3d:ab:67:86:a8:66:74:0a:
3d:39:29:f2:6f:b3:e6:72:92:0e:b7:03:5a:d6:c6:
63:d3:31:52:b7:f2:14:a4:61:1a:0e:5b:13:bc:17:
3c:c7:2f:72:a3:63:5b:1d:dc:06:a0:f0:0f:7e:23:
94:c5:91:57:5c:8a:aa:52:a0:35:e3:2a:74:5e:14:
41:ff:f2:87:c1:26:8d:f8:c6:57:3f:bd:42:5f:71:
8d:3e:c2:1d:38:4d:b4:b0:8e:93:99:47:71:78:5f:
50:d8:26:6a:24:e2:67:77:c7:3d:95:6f:4b:b0:38:
1b:2b:70:82:d2:a8:21:2d:88:84:35:ff:db:eb:e7:
5e:36:61:8d:b6:d8:ee:d0:79:d4:f3:73:3c:be:fc:
d8:1d:92:5a:83:2e:82:58:c1:f2:30:dc:a7:f9:8a:
8c:72:d0:e6:5c:cc:09:01:00:8f:b9:ae:ba:b5:e1:
73:3a:bc:d4:04:59:ea:e7:b1:67:46:ee:dc:63:39:
09:05:6f:13:d7:bc:78:98:db:c0:16:ca:5b:b8:c1:
01:3d:e9:e6:3e:14:17:42:2b:39:57:e3:09:ad:40:
83:5f:d4:34:8c:80:ca:71:93:f9:fd:70:36:20:b0:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:37:FF:2F:88:09:8B:08:E0:81:CF:62:96:D6:7F:0E:45:32:4E:4C
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063323a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60c2::/48
Signature Algorithm: sha256WithRSAEncryption
00:6c:53:10:fb:94:02:f6:20:01:96:82:83:b6:4d:f1:a1:31:
00:72:de:6a:0f:b9:4b:c6:e2:59:9c:9f:3e:6b:60:d0:82:4d:
0c:34:9d:d7:aa:6e:71:13:4b:9e:e4:b9:7d:cc:f8:8a:e3:1c:
22:99:0d:9b:ab:f3:96:18:95:88:94:77:a7:d3:0b:30:02:7c:
99:a8:59:d5:1e:e5:99:50:9c:df:14:b4:90:46:a4:8f:00:55:
7e:81:8d:c6:96:66:08:51:dd:37:a0:f6:05:70:a8:a7:1d:af:
b2:3b:e4:fb:bd:90:0a:e4:c8:f5:d5:b0:7a:ca:3e:fa:7a:e6:
d3:49:c8:86:ac:ed:e2:a8:6f:76:95:89:6a:93:9b:ed:0b:4f:
0c:d3:28:12:ab:42:d7:6f:b0:81:bd:93:0a:8b:00:f6:76:4d:
f6:01:3f:d8:20:fd:75:53:ac:a1:8b:27:bd:44:48:67:14:3c:
74:d3:67:9f:82:a2:3e:53:f9:65:34:1a:76:2d:dc:9e:4d:5e:
e5:38:22:ba:bc:44:70:61:c5:81:d5:6b:40:a5:b3:4e:2c:00:
7e:06:32:f6:10:eb:7c:78:d6:62:85:28:05:30:54:35:c8:47:
20:5a:bf:b0:39:e3:36:a5:19:75:e1:17:f0:3a:15:09:49:d3:
b2:e6:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:35:37 2025 by rpki-client