
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653165633a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653165633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: KWpvHktyXLMfFQAyLv7z4Lpgv4nsr2EmY8+k/KSNnA8=
Subject key identifier: 0B:E3:C0:46:6D:CE:AC:28:51:3E:01:4C:86:37:4D:03:33:DF:83:6A
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 4C6AB1C3F28C7635479FEC3F3323C1E4E1A2553E
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653165633a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:09:03 +0000
ROA not before: Tue 01 Jul 2025 17:04:03 +0000
ROA not after: Tue 30 Jun 2026 17:09:03 +0000
asID: 396968
IP address blocks: 2a0f:6287:e1ec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:6a:b1:c3:f2:8c:76:35:47:9f:ec:3f:33:23:c1:e4:e1:a2:55:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:04:03 2025 GMT
Not After : Jun 30 17:09:03 2026 GMT
Subject: CN=0BE3C0466DCEAC28513E014C86374D0333DF836A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:cf:4f:d8:6c:c8:a3:6b:3e:1d:73:43:4d:
3e:d5:16:47:99:ab:6a:39:2a:7f:da:5d:86:72:34:
fa:a0:37:ee:3e:38:00:05:9d:d6:ae:37:e6:95:f4:
7c:41:13:7a:bf:35:8d:dc:f0:90:13:a6:69:92:3d:
6c:9b:39:18:e6:e8:28:c3:c3:7c:ef:d1:eb:a2:ad:
39:32:57:25:f5:51:f1:40:34:1c:56:fc:23:78:9d:
76:ac:d0:d8:ad:4a:dc:c7:d7:da:f8:30:42:30:a8:
37:b6:36:6e:04:7d:fa:d1:30:26:92:31:39:b6:27:
09:d6:d0:4e:9d:57:5b:d3:0c:24:b0:ef:09:f1:3e:
a5:3c:e8:41:e5:97:52:a2:b6:8f:1e:3c:b3:e3:e2:
d9:81:04:77:84:a6:90:83:80:be:29:47:a9:09:bd:
d9:08:e0:67:45:f2:59:03:3b:7c:d0:04:65:b3:1d:
7a:f7:f7:99:c1:32:e9:e5:25:19:5b:f5:13:d3:2a:
0a:93:46:8e:87:2f:e7:24:40:30:09:59:f9:86:28:
4e:c5:2f:e7:28:8b:b2:34:d5:be:e7:ee:57:d6:aa:
c9:56:83:3f:f3:4b:0c:15:d1:66:ca:fe:af:8e:82:
dd:43:7b:6d:58:bd:4b:ff:8c:2c:06:92:91:ec:e6:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E3:C0:46:6D:CE:AC:28:51:3E:01:4C:86:37:4D:03:33:DF:83:6A
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653165633a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e1ec::/48
Signature Algorithm: sha256WithRSAEncryption
21:c3:9c:19:66:dc:f9:07:c3:9c:5b:77:54:4e:c7:57:b0:b1:
3d:a8:ce:d5:03:08:9e:ad:c7:f6:7d:d8:8b:c7:9a:66:22:28:
a6:35:83:b0:e8:8d:cf:fc:33:31:ef:51:39:65:32:a4:d0:47:
d0:98:84:fb:aa:23:a0:ad:61:c6:7b:21:25:b5:9b:51:ca:0f:
24:f0:0f:fd:c9:05:c1:02:ca:9b:19:df:35:2c:60:53:a0:40:
57:7c:c6:75:da:f1:9f:09:78:ce:2a:c3:60:8d:1f:8f:f9:1a:
a5:6c:29:cf:98:a3:3d:16:83:47:5c:11:38:a9:9d:4d:c4:8d:
43:cf:67:5d:f8:9b:ff:6b:81:e9:6c:10:ca:3f:6e:44:4e:42:
37:65:09:32:62:9d:ea:6c:82:5c:06:d2:3c:10:28:5b:0f:a2:
29:77:b7:16:8e:cb:6c:5e:62:44:74:ff:97:a0:72:03:aa:71:
56:24:8f:3c:d3:bf:e9:bd:ac:d6:eb:77:ca:d5:5a:ce:8b:84:
d5:cf:45:41:e3:ae:3b:7c:8c:51:6e:6a:7a:7b:b9:74:83:03:
8c:95:ce:c3:b4:86:ea:6f:54:c5:bc:45:a7:21:b9:2c:f1:1c:
b7:a3:bc:93:aa:85:a8:4d:3b:6f:3c:b5:c1:48:6f:ed:1b:e5:
dd:ae:2d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:31:27 2025 by rpki-client