Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653138623a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653138623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: c2mdHVNQe9PaDvRSTknES3/+K78OSEqzwpeQi3/SDoY=
Subject key identifier: B1:62:D9:C8:97:42:22:1B:49:AB:9E:70:25:A1:DB:58:2D:D0:3D:16
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 7A559C0212B69E8DCC62E66946C8659B510C306D
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653138623a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:08:58 +0000
ROA not before: Tue 01 Jul 2025 17:03:58 +0000
ROA not after: Tue 30 Jun 2026 17:08:58 +0000
asID: 396968
IP address blocks: 2a0f:6287:e18b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:55:9c:02:12:b6:9e:8d:cc:62:e6:69:46:c8:65:9b:51:0c:30:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:03:58 2025 GMT
Not After : Jun 30 17:08:58 2026 GMT
Subject: CN=B162D9C89742221B49AB9E7025A1DB582DD03D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:70:d2:e7:70:2e:50:93:cf:4a:20:3f:9b:
87:83:4c:ad:b2:05:70:54:3a:4d:85:2a:d8:88:a0:
9b:32:1e:76:e9:1f:42:ea:be:b5:62:e0:57:c1:84:
b6:9b:f0:08:60:09:56:79:60:f8:1c:03:29:f2:23:
f4:43:cd:b1:0e:22:18:b0:f9:71:b0:9d:ed:ee:37:
84:2e:08:db:90:73:f1:87:cd:dd:be:18:03:b9:53:
03:4b:25:71:06:f5:8d:7a:72:28:17:1d:e6:88:43:
c2:2e:5c:71:35:d4:5e:6d:be:99:a5:09:c1:c0:96:
35:3a:9b:52:f1:f3:08:ad:42:9b:03:34:dc:b8:fc:
99:fc:49:d9:cd:20:be:b3:07:b9:65:3e:03:76:46:
c3:c3:82:a1:ac:71:9d:09:e2:4e:24:bb:4a:9d:88:
e0:2e:e0:e0:5d:af:2b:9f:4e:e1:1e:42:50:73:54:
0e:57:ee:87:c5:c8:e9:fc:10:65:22:43:a5:60:64:
c4:89:2b:87:4f:24:0a:ab:4e:c4:69:69:10:af:86:
a3:3e:bb:4f:6b:9f:4e:48:e6:c2:39:2f:dd:55:fc:
96:65:3d:69:72:40:47:35:d7:4d:87:7f:e0:67:11:
ec:be:bf:7a:65:cd:dd:1a:f4:36:65:1f:b2:20:52:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:62:D9:C8:97:42:22:1B:49:AB:9E:70:25:A1:DB:58:2D:D0:3D:16
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653138623a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e18b::/48
Signature Algorithm: sha256WithRSAEncryption
47:c0:88:d2:53:77:bc:3f:f1:78:b3:d7:3e:c0:0b:26:09:4a:
82:4c:c8:2a:ab:9d:37:15:df:51:bf:54:a6:17:6d:31:f2:f4:
b0:41:32:62:32:a2:30:3d:a7:e3:39:38:d4:bb:b3:37:5a:18:
73:4d:70:a5:89:c0:04:b1:62:69:b1:9a:d1:17:11:49:cd:4e:
7f:d7:d0:2c:31:34:f4:60:4e:e4:95:98:06:72:1e:7b:ae:b6:
2e:2e:d6:4e:d3:0a:a4:2a:09:b8:f0:e9:fe:4c:45:59:38:91:
9c:7c:ca:74:c2:aa:b9:61:1c:b4:3b:95:81:f0:87:3b:a6:7c:
15:d7:a3:16:4a:ed:4c:90:2f:82:16:46:1f:f6:51:f3:b3:d8:
4b:70:e0:46:d3:99:5f:88:c0:23:14:85:71:bd:57:a0:e1:b5:
fb:b8:aa:80:f0:dc:ed:43:8f:80:64:da:1b:d7:b1:b3:94:6a:
c0:57:31:d2:0c:08:b6:57:4d:79:04:70:cb:ac:a5:8e:bb:33:
f9:49:0f:0b:89:3b:16:3b:40:2a:7c:60:f6:70:e0:ca:ad:94:
3c:e9:01:5e:df:69:1f:e6:a5:58:be:31:ce:6c:00:0b:d0:b6:
f2:dd:c7:c9:9b:dd:c2:04:63:95:5a:df:22:96:2e:c5:89:ed:
63:6e:4c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:20:08 2025 by rpki-client