Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363231303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: aZ8JmiSvSZjE4rFX8+y4a47vN4rADCcBuzJ2VPWdCeA=
Subject key identifier: 63:E7:47:D1:16:70:AD:B7:4A:05:D3:CA:F5:38:85:0C:2D:14:53:07
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 34E27E909CB389EB649D842411BCA6E3D0449C38
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231303a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 24 Dec 2024 21:07:12 +0000
ROA not before: Tue 24 Dec 2024 21:02:12 +0000
ROA not after: Tue 23 Dec 2025 21:07:12 +0000
asID: 16909
IP address blocks: 2a14:7584:6210::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:e2:7e:90:9c:b3:89:eb:64:9d:84:24:11:bc:a6:e3:d0:44:9c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 24 21:02:12 2024 GMT
Not After : Dec 23 21:07:12 2025 GMT
Subject: CN=63E747D11670ADB74A05D3CAF538850C2D145307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:29:bb:29:0c:15:f2:bd:c4:46:e7:0c:91:
73:52:fc:81:e0:3c:4f:28:f3:74:56:84:da:18:d1:
d2:c4:50:52:e5:b5:26:ad:3c:e9:e7:81:72:80:fd:
65:dc:53:71:6f:15:eb:0f:89:58:8c:39:05:5a:72:
ee:21:64:6f:bd:5c:94:0e:e8:ba:84:77:cf:d7:74:
1f:34:50:d1:db:6a:55:59:de:a7:b8:87:a8:d6:c1:
ba:ce:f1:60:0a:22:fd:a4:ec:25:c0:fa:cc:40:4f:
d2:53:b8:af:28:38:f1:60:cc:ff:81:13:5d:aa:bc:
7b:b2:9e:15:72:cb:0a:64:56:e7:a5:b3:d6:b0:c6:
94:36:e4:57:64:a1:62:59:a3:c8:d5:dd:89:a2:64:
a2:b8:df:9d:a7:9c:5d:a0:79:95:33:62:7d:fa:ae:
c2:b4:b9:ff:9c:80:3a:90:73:de:d3:c1:bc:c5:27:
2e:ae:18:a0:a5:dd:19:41:18:bf:88:d9:ce:29:db:
30:ef:61:9f:36:f9:4d:cf:e9:e7:5c:04:7b:09:5b:
29:fc:c4:27:4d:a0:10:1a:f5:da:fd:1b:2b:15:63:
54:45:1f:e0:dc:dd:a8:8f:bc:79:71:a9:e2:3e:be:
e8:a2:07:93:03:3a:98:58:b1:12:4d:74:97:27:ea:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E7:47:D1:16:70:AD:B7:4A:05:D3:CA:F5:38:85:0C:2D:14:53:07
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363231303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6210::/48
Signature Algorithm: sha256WithRSAEncryption
4d:92:2c:19:48:e6:81:97:b4:e7:92:1e:b3:56:5a:7e:2d:67:
57:87:04:99:1e:86:4c:71:30:2f:36:22:01:9f:5f:ca:91:ec:
55:ed:9e:3c:76:74:94:ec:ac:11:58:31:86:ed:93:cb:a9:48:
67:7e:6e:a9:72:a0:76:ea:ce:72:07:f0:55:8f:fa:06:45:4b:
ba:cc:40:16:9b:fd:d0:e5:2d:b4:c4:a1:11:1e:37:b5:ef:34:
9b:78:63:52:2e:08:62:e3:52:2c:cf:8b:33:d8:2a:6a:66:c7:
ce:d5:26:92:1f:9a:b0:72:1b:56:ec:59:85:36:7d:d7:d5:d4:
ac:2e:ee:a3:76:d0:b1:f2:83:6e:f7:55:24:53:4c:f0:96:3f:
d9:74:c0:cb:be:3e:b2:14:cb:b5:1e:51:0a:a0:ae:26:b3:d3:
79:20:57:ac:bd:87:df:12:38:56:df:f6:65:42:b4:0a:b3:47:
b0:83:ae:72:99:4b:3c:49:67:9e:5c:b2:e3:7c:e8:33:35:94:
b5:dd:20:cb:4d:09:49:de:5f:6a:89:c0:cf:74:65:02:f3:21:
d7:96:32:44:6c:24:b2:73:5e:02:8d:10:ca:4b:cd:d4:53:6a:
2f:75:1b:89:3e:09:11:7d:fc:01:56:90:ac:85:91:29:16:4a:
4a:fa:95:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net