
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653266393a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653266393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: z/aOXcrTJCMPeRIgDFveg40dYeJAddreVbQ+Vn/tMPo=
Subject key identifier: 80:B7:8C:FF:2E:D9:5D:42:AA:23:0B:98:96:5A:B2:10:7D:AC:F9:AC
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 0AAC985535118152DF273DA656DDE0B15EC92D71
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653266393a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:08:04 +0000
ROA not before: Tue 01 Jul 2025 17:03:04 +0000
ROA not after: Tue 30 Jun 2026 17:08:04 +0000
asID: 396968
IP address blocks: 2a0f:6287:e2f9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ac:98:55:35:11:81:52:df:27:3d:a6:56:dd:e0:b1:5e:c9:2d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:03:04 2025 GMT
Not After : Jun 30 17:08:04 2026 GMT
Subject: CN=80B78CFF2ED95D42AA230B98965AB2107DACF9AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:0f:8b:b9:7c:f6:ec:03:53:3f:1c:a2:b0:
a5:e8:84:b3:0a:a1:34:8e:7d:f6:8a:33:b5:9f:64:
f3:ef:99:3b:91:61:45:fb:06:46:28:14:85:2c:10:
57:02:42:63:c6:34:59:16:35:90:12:5e:a2:80:95:
28:d4:0f:49:0c:f0:d7:31:82:2c:43:85:56:5d:9f:
03:9c:d5:76:cd:5e:2c:f2:76:bb:a1:95:73:3b:2a:
60:30:69:58:9d:41:49:e5:62:a9:a5:69:58:f7:e8:
f9:89:75:6e:91:ad:18:c8:c7:f1:dd:33:1f:46:84:
6c:44:70:c3:c4:09:98:5c:c4:7d:7f:20:b8:b4:a6:
21:fb:4d:a8:86:97:dc:78:a8:46:8c:45:78:ab:79:
c5:18:50:d9:3d:e2:97:01:95:50:a8:88:43:17:1a:
5e:3c:de:e1:9e:e6:22:a1:24:0b:c9:bd:74:d5:60:
6c:4f:8b:e6:7e:e3:7e:68:b8:60:9a:26:5c:68:10:
56:3f:52:74:17:ba:01:f6:57:54:56:18:64:bf:42:
27:a7:cc:e9:2f:13:48:e6:bf:98:47:b0:ec:53:ce:
39:05:aa:11:44:43:29:f5:1e:2f:11:78:e9:1b:b1:
c8:f2:70:e2:dc:0d:e4:a1:d6:dd:f8:27:b8:92:40:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B7:8C:FF:2E:D9:5D:42:AA:23:0B:98:96:5A:B2:10:7D:AC:F9:AC
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653266393a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e2f9::/48
Signature Algorithm: sha256WithRSAEncryption
8c:6a:83:ed:aa:f3:d1:d9:b3:e1:58:1b:49:24:58:da:5b:5a:
ed:b1:88:2c:ba:f0:5a:65:20:b5:83:be:2b:03:1d:22:10:c1:
98:4d:31:f8:0f:c7:2f:2e:b2:98:f4:25:2b:19:f7:27:15:b9:
44:27:9c:18:24:49:33:ce:ad:58:93:2b:87:ff:6e:db:f6:07:
35:3e:8c:cd:fa:ea:d2:69:85:19:f9:fc:9b:68:99:43:f0:8a:
d8:86:2a:88:47:57:5b:ee:7f:a8:fb:3f:02:98:d8:a1:2e:0d:
b9:68:7e:7e:a6:da:34:ac:ed:da:89:c3:9f:bd:28:04:7e:62:
86:1d:73:ac:b2:9c:3c:7e:7f:45:12:96:9d:e8:85:8e:df:dd:
e5:dd:0b:7a:32:b6:cb:10:45:1b:f9:5f:f0:51:15:14:61:c6:
ef:28:85:bb:cb:9a:cc:3c:2f:c2:13:03:a2:af:5a:0b:3a:d9:
5a:9e:d7:5b:f7:55:20:87:7f:2d:6e:3c:63:75:ed:e4:f7:ab:
18:26:e6:fb:40:e0:92:e4:8f:44:65:4d:4a:e7:b9:ea:4e:b4:
5c:ac:97:eb:ac:fd:1a:76:b2:2c:94:34:f2:db:fd:05:f8:8e:
05:0f:9d:a4:a5:12:01:d3:dd:a7:d3:45:7e:a3:9d:65:de:15:
98:45:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:49:45 2025 by rpki-client