Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063363a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363063363a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: LEnmhz9Fem2bzF9UdtNmeblC8PgzYwVc44x63updvZM=
Subject key identifier: E9:00:94:D7:07:AA:E6:B6:77:9A:4D:BD:94:E2:5E:94:25:BA:DC:52
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 55983C53DCB13AE2EC37AAD078B9F4FA310F5028
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063363a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sat 22 Mar 2025 15:21:26 +0000
ROA not before: Sat 22 Mar 2025 15:16:26 +0000
ROA not after: Sat 21 Mar 2026 15:21:26 +0000
asID: 401507
IP address blocks: 2a14:7584:60c6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:98:3c:53:dc:b1:3a:e2:ec:37:aa:d0:78:b9:f4:fa:31:0f:50:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 22 15:16:26 2025 GMT
Not After : Mar 21 15:21:26 2026 GMT
Subject: CN=E90094D707AAE6B6779A4DBD94E25E9425BADC52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:e5:bc:65:32:2e:60:3e:9d:2c:b2:c0:0c:
23:37:34:42:63:c4:62:44:ff:79:5b:68:6b:5f:31:
8c:4d:ce:33:37:b6:40:76:84:48:19:d7:fc:4c:dc:
e0:7b:f0:cd:c9:03:18:75:1e:83:54:5b:9d:13:14:
67:b5:9c:fb:47:73:0d:01:2b:f1:ab:3f:6b:fc:aa:
31:e6:7f:12:3f:a2:c6:d4:0b:21:06:20:46:df:40:
55:3f:23:89:64:40:50:4b:b8:14:0a:90:b0:84:a8:
93:97:40:6b:34:70:b5:55:35:3e:be:c8:f5:e5:87:
8b:9e:69:eb:1b:45:bf:93:5d:d3:59:29:2c:06:7c:
e9:6f:fa:cc:78:7e:4e:98:6d:a6:56:72:5c:ea:96:
e5:92:dd:a1:69:4c:b8:b8:86:54:03:cd:72:21:3c:
4f:6c:c1:32:e9:8e:3a:d2:94:6a:48:1c:20:c0:fb:
27:fa:21:17:37:16:77:b8:72:32:33:f4:eb:05:23:
6e:57:90:e5:e0:c0:fd:cf:21:0c:d7:46:b9:b6:06:
dc:d0:a3:ec:65:1c:3d:e2:90:04:80:ec:a8:03:89:
75:c6:65:fc:d8:66:1b:53:4e:2c:19:cb:7e:23:be:
31:e8:39:61:25:3b:75:3b:ff:a6:6a:d4:45:5b:b4:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:94:D7:07:AA:E6:B6:77:9A:4D:BD:94:E2:5E:94:25:BA:DC:52
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063363a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60c6::/48
Signature Algorithm: sha256WithRSAEncryption
00:41:b5:a4:1a:ed:48:a3:b2:87:68:f8:21:3d:12:f4:15:48:
e6:34:46:4d:fd:92:88:e2:04:51:af:43:c6:b5:a9:f7:0f:54:
6e:71:0a:a3:3b:4b:be:45:7c:62:51:12:3a:86:69:26:3a:18:
31:c6:72:23:0e:cd:a5:ac:f4:da:56:bb:e3:a3:91:e7:69:76:
4a:45:5e:72:dd:29:d8:a9:05:fb:ed:db:4d:36:36:62:ac:37:
59:01:86:77:ca:db:19:2a:06:14:b1:63:68:47:c0:fc:6d:7d:
aa:b7:a6:02:06:60:79:b7:df:30:82:e8:fa:03:b2:47:95:7f:
26:f6:5c:fb:09:0a:cc:44:ad:72:f4:55:e2:94:f1:84:3b:38:
73:1a:b5:e3:43:c5:d8:a5:9a:56:bf:e0:70:83:01:eb:a9:b6:
4e:f6:7f:c1:b6:b3:2d:da:c3:a7:37:d2:d0:99:48:9d:49:1c:
08:f1:47:bc:00:e3:5c:4a:24:e1:0c:b4:39:dc:47:e7:5d:92:
4b:b3:07:37:f1:6f:ab:5f:6b:f1:b6:87:39:86:ea:4d:e7:bf:
a2:a5:07:17:ef:5c:8f:28:01:44:c1:55:11:2c:db:cd:5b:d1:
0b:c5:af:f2:b2:bd:b3:45:4a:46:c2:99:35:3e:4e:21:1c:7d:
74:4e:4f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:35:37 2025 by rpki-client