
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: JV2mV4UpU/MLg9LNRxGGjyOvMfyMQ5yWQf6+yGIxrXM=
Subject key identifier: CB:E7:DB:FE:35:F8:12:9A:07:7E:4E:1E:55:1E:8A:2E:00:07:9A:AF
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 614D298C35023377F22257FC1D0C74636FC4950A
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:08:01 +0000
ROA not before: Tue 01 Jul 2025 17:03:01 +0000
ROA not after: Tue 30 Jun 2026 17:08:01 +0000
asID: 396968
IP address blocks: 2a0f:6287:e4a6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:4d:29:8c:35:02:33:77:f2:22:57:fc:1d:0c:74:63:6f:c4:95:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:03:01 2025 GMT
Not After : Jun 30 17:08:01 2026 GMT
Subject: CN=CBE7DBFE35F8129A077E4E1E551E8A2E00079AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:1b:30:e1:1e:54:1f:86:e0:34:10:5a:16:
a6:0e:fd:1b:f9:92:c5:fc:06:21:1f:cf:ce:c3:93:
53:9b:ad:7c:54:f6:fb:e2:31:5c:e9:1c:30:b7:65:
a6:a7:8e:d2:e3:2a:f5:8a:dd:e6:47:16:ec:77:31:
c7:f8:b3:a8:07:8b:2f:a4:49:72:be:62:c2:0d:81:
f7:8b:e6:c4:2f:ab:cc:05:19:5d:bc:38:09:a5:f1:
73:d2:8b:6b:fa:5c:c3:72:7c:d1:5e:9e:0f:a3:9b:
ca:06:10:35:01:5d:b3:b5:a9:9e:fc:51:cf:07:92:
36:c5:97:61:d3:72:0b:4a:c0:c0:00:d0:32:02:13:
5a:23:1b:a4:2b:ae:d0:f9:ab:15:ba:33:ac:26:99:
6d:34:a3:8e:f2:e6:4e:8e:e1:58:77:25:05:31:1c:
8b:37:a6:3f:63:73:81:ae:a5:45:58:d4:ed:9d:7e:
64:1a:37:26:57:89:a9:db:21:f7:4f:b2:ab:6f:b5:
24:1f:a9:c0:e9:2f:82:8c:91:ec:da:0a:c8:17:09:
c8:45:ef:20:7f:1e:11:b2:14:36:1c:fb:de:b3:9a:
82:1e:b4:2c:ba:73:13:89:e3:e6:b8:bf:0d:61:b6:
7b:68:4a:25:99:9a:83:79:4d:5c:4e:af:e9:fc:a5:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E7:DB:FE:35:F8:12:9A:07:7E:4E:1E:55:1E:8A:2E:00:07:9A:AF
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e4a6::/48
Signature Algorithm: sha256WithRSAEncryption
3d:9a:80:1d:a2:f6:a6:f8:ea:de:a2:71:39:0e:b3:9e:f9:95:
79:60:d4:fe:04:c0:09:cb:f2:a5:aa:f4:0a:2a:32:57:8f:c9:
3f:95:86:ab:6e:5d:0b:e4:59:e0:42:60:ac:a8:3f:dc:c0:f6:
82:a7:5a:58:bf:15:dd:07:34:3a:33:9a:16:ee:01:ae:fc:07:
9a:dd:b0:76:96:69:35:aa:7e:ec:85:d8:49:5c:7b:a4:d8:5b:
fc:c5:1c:ae:5c:d4:08:63:92:3c:e5:54:52:87:85:8d:3c:08:
1b:7b:8e:2d:90:cf:71:8b:0f:59:75:fd:5d:25:61:22:4d:eb:
9a:1e:db:76:fa:88:b4:0c:cf:3b:15:61:91:3f:4c:46:04:ac:
55:eb:55:7f:09:97:1f:7c:75:bc:75:97:83:67:e8:b1:13:dc:
c9:cc:a9:29:6b:b5:a5:1a:b7:24:82:58:b3:a8:dd:49:8f:32:
74:34:57:4a:dc:0d:9c:bc:32:14:f3:bd:11:30:e2:f6:9b:01:
36:48:3a:98:70:85:9a:45:59:85:0e:4c:e5:d2:99:32:dc:06:
e1:c3:9c:65:6d:c7:32:bc:40:35:68:03:06:5a:69:cd:0c:78:
ec:29:d4:26:f4:85:19:0e:87:b3:89:51:7f:b1:70:76:d3:e6:
c1:21:57:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:25:58 2025 by rpki-client