
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: OyxkMzEOsiKIYOPts2Q8ynzF4rbMXE+jmGN4Z6CcxfY=
Subject key identifier: 89:3D:16:D0:45:3A:BC:96:B7:47:7E:B3:26:7B:88:C0:4E:7A:72:2F
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 359D611E279EAABFA2E2DC2CE6796C7A6ECA0E20
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:08:04 +0000
ROA not before: Tue 01 Jul 2025 17:03:04 +0000
ROA not after: Tue 30 Jun 2026 17:08:04 +0000
asID: 396968
IP address blocks: 2a0f:6287:e27a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:9d:61:1e:27:9e:aa:bf:a2:e2:dc:2c:e6:79:6c:7a:6e:ca:0e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:03:04 2025 GMT
Not After : Jun 30 17:08:04 2026 GMT
Subject: CN=893D16D0453ABC96B7477EB3267B88C04E7A722F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:18:9a:fc:a5:9d:71:c8:db:70:86:8a:74:4d:
32:3a:e2:86:82:02:7b:d3:f4:f2:63:4a:53:ed:7b:
f3:9c:7d:4f:a1:b4:38:45:76:a7:24:ba:c9:5b:49:
5d:03:aa:68:23:e3:c9:5b:e6:5c:93:ad:b7:95:8e:
e9:11:fa:91:71:0d:48:a7:26:76:40:00:1d:2d:5b:
90:9c:e4:34:4c:cd:d7:2d:7b:9d:ef:da:a7:b9:f6:
e8:c6:d3:af:8c:09:19:c2:69:4e:81:c5:11:9a:93:
ce:22:d2:16:bf:cf:6d:08:03:e1:e8:47:79:9b:e7:
30:01:66:92:9f:b0:12:d8:34:a7:5c:e0:de:d5:36:
4c:34:3e:20:4b:2c:bd:4e:7f:c6:51:dd:21:a8:5f:
c3:ae:68:f5:f9:90:d2:4e:ce:1b:b8:7a:24:96:95:
7f:c0:55:b8:b1:88:1d:0c:a4:06:39:c0:57:00:aa:
62:dc:1f:dd:0a:e0:07:3e:04:80:68:e9:79:df:49:
73:34:cd:b4:6c:b2:25:3e:c9:71:c6:81:2e:cc:41:
c1:9d:11:4e:88:28:e4:c2:c8:5b:b2:7f:19:33:c9:
b1:ab:e0:b0:8c:1c:d6:c3:1d:4c:96:1c:22:a1:dc:
1f:d8:56:37:d6:a6:c9:53:c5:cc:ae:2f:7a:5c:a8:
04:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:16:D0:45:3A:BC:96:B7:47:7E:B3:26:7B:88:C0:4E:7A:72:2F
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e27a::/48
Signature Algorithm: sha256WithRSAEncryption
1b:0f:f7:7b:9e:b4:58:aa:5e:e2:10:39:b5:1b:c0:3f:22:3d:
37:0d:e4:c5:01:74:71:49:14:69:34:0f:f0:90:89:c2:7e:6a:
91:5f:7a:22:3a:eb:48:8c:a9:b3:60:02:5f:74:49:de:2a:4c:
c4:c4:e1:4c:59:50:49:44:b1:7d:2c:25:c1:d3:d5:2a:f7:07:
ff:3c:bf:a3:fb:cc:e2:a1:59:96:76:6d:7f:d3:43:d5:ea:77:
ba:92:6d:0b:cc:8d:82:4d:e7:61:4a:57:7f:4d:db:b0:54:ae:
c9:68:b8:40:40:49:d4:a7:a4:97:c1:01:c8:4d:5a:86:8f:97:
ad:20:a2:39:15:8c:b2:d2:1f:3c:b5:72:ef:3e:0e:7e:59:25:
2b:af:0e:61:21:e4:96:d1:f9:91:68:56:a1:69:9b:bc:08:4c:
b5:2a:1a:73:3a:d8:1b:13:15:6c:eb:4f:aa:1b:27:51:ad:63:
5d:b0:cd:76:a5:61:78:cf:fd:5f:25:23:5e:63:c4:dc:1b:a6:
65:32:e8:ff:30:ba:10:16:6f:4d:25:91:81:47:ca:b9:df:08:
52:00:3f:fc:5a:11:cf:91:23:be:94:b0:d7:97:a4:aa:b7:ca:
a3:4e:4e:44:4f:41:56:3f:5d:28:48:2c:e1:15:57:aa:c3:23:
cc:ba:da:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:15:44 2025 by rpki-client