Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062653a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363062653a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: 7bN/A7SeU8ZD/eaLosluCMZPGdB0VTur/5PmUWK7VoY=
Subject key identifier: 6C:E6:56:20:4F:FA:9C:BD:76:E1:00:78:17:88:BA:D6:DA:78:5E:B6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 43E78610A5D2BC242740D8223CD079278A92C80B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062653a3a2f34382d3438203d3e20343031353037.roa
Signing time: Sat 22 Mar 2025 15:21:20 +0000
ROA not before: Sat 22 Mar 2025 15:16:20 +0000
ROA not after: Sat 21 Mar 2026 15:21:20 +0000
asID: 401507
IP address blocks: 2a14:7584:60be::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e7:86:10:a5:d2:bc:24:27:40:d8:22:3c:d0:79:27:8a:92:c8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Mar 22 15:16:20 2025 GMT
Not After : Mar 21 15:21:20 2026 GMT
Subject: CN=6CE656204FFA9CBD76E100781788BAD6DA785EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:9b:f8:04:d6:9e:41:83:c4:15:fd:ca:ca:
ff:21:0b:5b:0c:02:2f:63:f6:20:20:19:08:3d:ef:
a8:91:69:35:e6:93:61:63:2e:2b:f5:df:d4:bc:59:
ac:40:2c:3f:a3:3a:1d:76:65:db:e3:1a:c3:59:b9:
d9:9a:6d:a2:aa:19:4c:53:9d:ca:bd:af:6d:06:b7:
40:44:91:64:27:de:22:31:45:9b:e8:e3:3b:16:12:
03:e3:48:29:f7:59:bd:92:2f:cd:de:3f:27:6f:62:
10:3b:cc:52:84:92:4e:2d:68:cb:26:df:d8:d1:5e:
a5:ce:15:51:90:c7:19:e4:2c:0f:22:8e:73:fc:c8:
60:74:5a:6b:79:26:bf:4b:b3:09:e0:cd:f1:49:aa:
ef:99:81:eb:ad:3a:2b:f1:f4:e8:1d:8f:d0:cb:8f:
83:3c:60:4a:e2:44:c6:99:2c:52:72:c9:b1:2b:89:
7a:45:be:34:ee:65:a9:c9:a6:1a:3c:6f:e9:a6:7d:
f5:69:56:91:8e:3b:0a:30:68:e2:76:af:1c:34:01:
67:b3:98:21:86:fb:d9:fe:e1:41:41:76:e5:61:58:
dc:51:77:0c:1d:cc:93:9a:03:99:91:b1:24:46:36:
38:05:1f:2f:09:28:28:85:0e:46:6f:f3:3f:1c:a2:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E6:56:20:4F:FA:9C:BD:76:E1:00:78:17:88:BA:D6:DA:78:5E:B6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363062653a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:60be::/48
Signature Algorithm: sha256WithRSAEncryption
14:13:4c:04:6f:86:34:2a:d9:b7:14:ba:ef:0a:e3:d3:35:76:
b5:0d:59:83:8c:07:01:94:53:e8:86:c5:3a:af:41:9c:5f:dd:
9d:56:1e:de:6e:76:4f:92:df:25:82:b3:f3:6a:d9:6f:72:b2:
7e:7d:7f:1b:9a:1c:b3:f3:54:ab:5b:33:b3:3f:d0:16:8a:56:
ee:9e:0e:e7:ce:35:ce:88:4e:7c:4f:be:92:5e:20:f9:ff:8a:
9a:1a:d0:07:91:38:62:85:f0:60:c5:37:21:0e:a4:cd:7e:b0:
14:1a:fd:01:65:c5:8f:ab:d0:6c:50:97:d7:7e:59:e9:2a:33:
7b:40:21:93:1a:9b:4b:6b:6e:08:59:63:c4:77:81:35:54:8b:
70:84:22:eb:d6:85:2b:08:e2:3e:21:30:77:23:9d:bd:e3:69:
d4:06:97:4d:51:94:c6:f3:74:58:9a:54:e3:bc:db:f2:24:11:
53:d1:5a:b1:77:32:d6:45:d2:02:87:0e:d5:18:0b:89:0f:cb:
65:56:95:f2:4b:22:de:ef:67:2b:e1:19:e6:04:80:40:24:35:
25:97:57:0f:cf:ee:33:c9:31:1f:f5:01:cc:d4:b0:c8:d4:00:
bf:ee:b5:ce:f2:04:2b:e3:8c:8a:56:b1:59:e9:f8:71:71:fa:
d2:e1:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:12:19 2025 by rpki-client on console.sobornost.net