Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063373a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363063373a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: jIBht7JDlRguG9cBhmcu5upwWr0WJXNv5F8Tg8D1/4o=
Subject key identifier: 05:A6:5E:46:BA:1F:57:00:98:4D:55:AD:27:90:AD:87:7E:B1:98:15
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 11E914C9F5658E19DDEF08126560D333C1F1A564
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063373a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sat 22 Mar 2025 15:21:27 +0000
ROA not before: Sat 22 Mar 2025 15:16:27 +0000
ROA not after: Sat 21 Mar 2026 15:21:27 +0000
asID: 401507
IP address blocks: 2a14:7584:60c7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e9:14:c9:f5:65:8e:19:dd:ef:08:12:65:60:d3:33:c1:f1:a5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 22 15:16:27 2025 GMT
Not After : Mar 21 15:21:27 2026 GMT
Subject: CN=05A65E46BA1F5700984D55AD2790AD877EB19815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:a8:51:e4:46:0d:d1:aa:96:dc:31:df:8a:
a4:f3:47:0a:5e:e5:c1:29:91:b0:af:09:54:5d:5d:
e1:6d:39:c4:c8:1b:42:4f:1b:2b:e4:b7:ea:52:7c:
fb:63:4d:23:08:47:a1:2c:d9:66:d5:6c:54:4b:c3:
da:ce:67:61:3a:db:21:53:e3:a3:3b:2b:7f:af:f8:
d2:ca:9f:43:42:ca:ea:da:6d:07:d5:d2:7f:3c:db:
75:e5:0e:cb:23:f4:ea:9b:67:40:4a:21:09:d7:62:
06:c8:f7:f9:13:2f:04:0d:03:99:06:66:21:dc:8a:
ba:cd:15:82:31:b9:44:0b:61:fe:ca:bf:08:06:67:
ca:41:93:af:88:91:cb:4e:c5:45:5b:e5:50:0a:43:
00:31:9d:ca:b1:14:02:7e:46:b3:1a:ff:a3:86:b0:
06:95:62:45:52:5c:06:e3:82:ed:4e:f2:c8:45:2f:
12:c0:73:6d:0c:9d:88:e0:53:12:76:ed:a1:89:9a:
c4:66:ab:b4:b2:e0:29:f9:5e:f8:6e:fa:2a:1c:48:
48:32:0d:1e:97:68:ff:bc:77:13:ef:96:aa:93:fd:
c7:08:9c:cc:fd:8b:9e:20:e0:4e:fe:27:f0:5e:94:
c7:7f:23:96:7e:cf:21:c5:26:64:6b:dd:7b:17:4a:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A6:5E:46:BA:1F:57:00:98:4D:55:AD:27:90:AD:87:7E:B1:98:15
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363063373a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60c7::/48
Signature Algorithm: sha256WithRSAEncryption
23:a6:89:f8:14:95:15:4d:74:83:55:0f:9e:48:65:31:e9:c4:
5c:4f:73:5c:e0:42:40:c2:79:be:00:b4:70:ae:f2:a9:b1:b8:
5e:5e:58:b0:cc:86:e0:ef:55:f7:99:9d:a9:c5:e2:6a:47:ca:
e1:00:2e:97:bd:1c:79:89:72:e7:8f:84:11:7f:5b:14:99:e9:
d1:17:67:b0:61:b1:39:91:85:83:88:0e:22:c4:6b:37:a0:37:
3b:2d:4c:e5:e3:9b:95:6a:d7:a9:67:0d:4a:02:d4:36:55:f0:
17:ad:35:9c:a8:46:0c:00:dc:25:d3:c4:1c:59:24:49:a9:6e:
fa:8d:78:d4:3a:41:98:b5:f1:2f:14:2d:9a:85:70:89:2e:ba:
89:47:3a:65:18:32:66:3e:50:c2:23:78:5e:0a:17:c9:e8:ac:
f0:cd:f1:29:76:79:30:5b:b2:ff:e5:cf:8d:01:ca:b8:46:d3:
37:3d:b0:05:5b:d6:cc:99:6c:bb:3e:d7:61:09:33:3c:86:7b:
1c:f8:5a:76:8a:a7:ea:b1:68:94:ba:56:d8:a5:06:5f:68:91:
b4:b8:e1:2b:c0:43:2f:48:81:a3:ea:c9:24:91:82:27:d7:2b:
af:3d:e6:a2:fd:7c:42:20:bd:01:83:54:5c:3f:58:4d:41:02:
f1:2f:c2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:36:16 2025 by rpki-client