Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653261393a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653261393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: t+KZhIR9yRJ5H99LmmdIEsgfLnxEcDokqbzZC12cqL4=
Subject key identifier: 9F:4A:74:22:5A:37:77:C6:16:3D:EC:11:8D:78:60:3D:BB:CE:D3:EF
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 403CEACD6864245F50320BE7158CD072B0D72CD7
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653261393a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:08:00 +0000
ROA not before: Tue 01 Jul 2025 17:03:00 +0000
ROA not after: Tue 30 Jun 2026 17:08:00 +0000
asID: 396968
IP address blocks: 2a0f:6287:e2a9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:3c:ea:cd:68:64:24:5f:50:32:0b:e7:15:8c:d0:72:b0:d7:2c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:03:00 2025 GMT
Not After : Jun 30 17:08:00 2026 GMT
Subject: CN=9F4A74225A3777C6163DEC118D78603DBBCED3EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:f1:36:4a:42:91:de:54:71:79:01:cf:6f:
c2:0e:a9:a5:91:90:d1:5e:7c:3e:2b:7e:bb:05:13:
cf:1d:39:6f:0b:1b:1f:b5:90:c4:b8:a0:63:48:af:
61:00:82:3b:e9:9a:6b:14:c9:1e:5c:a8:8f:bb:61:
95:21:7f:d2:32:41:90:73:2b:89:9d:eb:5b:72:1e:
ac:57:cb:38:ed:2d:7c:03:0b:b2:be:dc:e5:c5:89:
7b:7b:9e:4d:7f:f3:82:86:f2:e6:06:9d:a4:67:25:
b1:ac:cb:a2:3e:db:bb:6c:b0:b4:1d:2f:59:cf:e3:
27:19:c6:f2:db:68:86:a0:1f:fa:b0:27:85:1c:26:
16:e1:90:4d:ea:d0:48:a5:2f:f6:5d:13:d2:63:13:
1a:ae:84:64:20:51:b9:b6:20:3c:05:e5:ad:2a:52:
db:9e:36:c5:68:15:e0:64:aa:4b:02:d6:01:4a:c9:
0a:a4:68:5b:0e:c0:d1:7c:44:e0:56:6a:71:6d:6e:
be:d4:22:a4:ae:e1:8b:40:53:37:46:82:64:04:b3:
6b:52:a1:57:3f:af:59:df:7f:4e:b2:31:79:8e:5a:
6e:fe:56:40:5d:7b:d3:ad:40:e3:f1:72:87:d2:62:
76:18:17:4a:21:a5:b7:5e:83:2f:25:78:19:e3:b1:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4A:74:22:5A:37:77:C6:16:3D:EC:11:8D:78:60:3D:BB:CE:D3:EF
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653261393a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e2a9::/48
Signature Algorithm: sha256WithRSAEncryption
5a:64:fc:0a:5f:45:48:9f:cd:3a:0b:9f:ce:0d:6e:9f:8b:5c:
72:67:1e:c2:3f:90:de:cb:11:b3:a8:b6:d4:cc:c5:2b:60:4a:
04:e3:71:a7:7b:b6:65:f3:c1:c1:3c:36:0e:95:2a:03:fc:10:
63:82:fa:e7:b3:16:91:5d:c5:98:57:fa:ed:9e:a1:5e:a2:c0:
0c:46:0c:7b:b1:95:42:6d:c2:64:89:a4:c7:e9:4d:f4:99:9d:
37:f5:10:58:c8:4e:6c:d6:f7:4d:83:b4:50:1f:91:54:72:69:
e0:69:43:a4:e3:18:6f:d7:d3:4f:ed:f0:13:66:a4:f0:86:e5:
4d:20:6c:e9:ec:8c:d7:d7:f4:99:73:2e:1f:2b:07:bc:4e:4b:
6e:6b:f5:55:93:af:17:72:81:0d:70:e8:8f:ed:f8:74:5c:a4:
ed:f1:d4:d1:d0:49:d6:1f:be:d1:e7:0f:40:c2:4b:8a:f2:6a:
e7:5c:6e:0d:6e:ce:c3:b9:e7:87:07:72:ca:d9:50:5a:ca:d3:
f9:ff:d5:51:05:9d:69:a7:01:74:01:9c:49:04:91:cb:97:68:
d6:2b:81:3d:d8:21:c4:d1:35:00:54:51:7e:df:53:e4:83:cb:
b7:b8:ad:43:f8:33:7a:1f:79:bd:14:8f:b0:fa:f9:4a:1b:2a:
3d:7f:08:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:41:10 2025 by rpki-client