
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653431313a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653431313a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: P6QbvZF1Lk1DpaVav+tgV/Fwj6FZns3twY+Ah3weoWc=
Subject key identifier: 31:09:E8:1C:45:D9:6D:43:C7:EC:C2:89:77:05:40:A6:55:4D:D9:7F
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 308EE766DFDF4E04F94BDE570F11825D59489434
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653431313a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:07:15 +0000
ROA not before: Tue 01 Jul 2025 17:02:15 +0000
ROA not after: Tue 30 Jun 2026 17:07:15 +0000
asID: 396968
IP address blocks: 2a0f:6287:e411::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:8e:e7:66:df:df:4e:04:f9:4b:de:57:0f:11:82:5d:59:48:94:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:02:15 2025 GMT
Not After : Jun 30 17:07:15 2026 GMT
Subject: CN=3109E81C45D96D43C7ECC289770540A6554DD97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:1a:3d:06:35:59:f7:4d:b1:eb:45:10:8d:
47:cd:44:21:16:28:1a:71:de:da:d9:13:d5:a0:c8:
67:6e:05:9c:4f:79:2a:4f:d3:34:bc:60:c1:12:16:
0e:6d:c1:cf:42:d5:cc:74:1e:08:ee:5e:fb:ef:4d:
0b:37:1a:b5:00:02:67:d9:a7:78:c0:9d:13:93:5b:
4e:b7:45:88:0d:85:51:52:04:70:a0:a6:01:99:72:
45:ed:1b:34:41:23:79:b7:b1:60:ed:74:78:a8:fa:
9a:09:9f:5c:be:3b:ee:70:e0:f2:af:29:d0:0c:bb:
b6:62:20:4e:b8:92:0f:79:6c:22:1d:dc:b2:20:26:
f7:4a:ea:22:da:cd:58:3a:e1:a7:be:ee:41:0b:9c:
5c:ec:0d:0e:46:18:d4:61:e8:03:3a:37:ff:b1:d3:
24:5f:6a:b0:c9:47:4f:1e:a1:e2:b4:dc:13:41:ef:
2e:4d:e8:98:b6:36:bb:37:76:c8:0b:cd:93:37:ae:
b4:c6:9a:11:5a:f0:8b:24:60:15:20:9f:16:44:6b:
c6:b9:ac:b8:82:16:22:34:f5:03:9f:9b:b3:f7:89:
95:12:3c:27:1b:a8:87:82:85:e6:eb:83:88:6a:2c:
87:e8:ee:d0:f3:13:20:82:91:45:67:c9:22:82:8b:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:09:E8:1C:45:D9:6D:43:C7:EC:C2:89:77:05:40:A6:55:4D:D9:7F
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653431313a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e411::/48
Signature Algorithm: sha256WithRSAEncryption
b7:84:20:2e:52:8d:bb:e6:4f:d2:9b:60:6b:fe:ce:1c:3f:c0:
f5:ed:d6:0a:f7:86:76:13:2b:bf:8d:2a:35:61:2b:77:39:3e:
7d:35:ff:eb:a7:db:19:5c:21:3c:f8:d9:e7:9a:54:5a:84:42:
f8:ad:f6:d2:4c:97:68:88:98:f5:25:09:3c:4a:de:5b:e2:19:
3d:66:1a:eb:0e:a5:39:db:a5:0e:1e:33:6a:8b:d0:c5:87:ed:
9b:52:c4:3e:d2:2d:ed:66:77:02:ce:45:06:fd:ae:b2:03:85:
1e:26:72:c6:98:f3:31:d2:2b:00:ea:ac:1f:e5:73:25:0a:3d:
0d:6b:88:b8:b1:7b:9c:83:cd:c8:87:8a:07:11:65:ac:9d:de:
f3:64:6e:69:77:15:a1:e9:ee:3f:17:e7:77:26:c0:07:54:a5:
5b:8c:e6:32:39:ce:6f:eb:75:24:f0:89:f8:4c:d4:a0:97:fe:
da:58:18:4a:a0:83:b4:ce:bd:8b:ed:b4:15:07:0f:44:6e:0e:
8c:3d:da:ce:c8:17:4e:e8:77:02:e8:03:0d:36:c5:6e:df:33:
3c:56:de:58:de:f0:78:90:de:b6:ab:9d:a5:a4:d4:06:b9:e7:
46:0f:f7:6d:bf:f9:68:4d:46:bf:b9:f0:b2:df:6b:72:d2:a1:
7e:62:c6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:23:05 2025 by rpki-client