Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653663323a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653663323a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: iWFO72TeXPIX4CgBcA/cLpGn8SCGMjVfez3uWyl6ZyU=
Subject key identifier: C0:81:24:13:2C:AF:98:5A:FD:96:7F:C0:F6:1A:3B:00:93:FA:85:97
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 42E79EB83522650EB456008171DD5FF012E1180B
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653663323a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:07:15 +0000
ROA not before: Tue 01 Jul 2025 17:02:15 +0000
ROA not after: Tue 30 Jun 2026 17:07:15 +0000
asID: 396968
IP address blocks: 2a0f:6287:e6c2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e7:9e:b8:35:22:65:0e:b4:56:00:81:71:dd:5f:f0:12:e1:18:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:02:15 2025 GMT
Not After : Jun 30 17:07:15 2026 GMT
Subject: CN=C08124132CAF985AFD967FC0F61A3B0093FA8597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:53:8e:a6:ad:ec:d3:bd:c7:25:a9:2b:ca:
8c:03:90:2d:c0:e2:08:e4:4b:0c:fb:71:5d:32:6c:
37:b6:55:7f:a5:d3:83:ae:3b:a2:33:e8:5c:b3:52:
d5:79:6e:4e:4f:df:46:5c:77:31:94:b4:e9:a4:2c:
cd:80:6d:e0:c6:8c:52:f2:bf:0f:6f:24:24:f2:78:
bd:9b:b4:16:96:2a:08:b7:98:6d:59:8c:06:fb:07:
3c:d3:f9:40:ec:fc:d8:da:6c:19:96:ff:bb:e8:fa:
60:c1:ad:d8:01:60:66:53:bc:db:17:1d:f3:bc:eb:
f4:c4:fb:f1:a6:b6:44:58:a8:cc:cc:5c:56:eb:5d:
12:00:7b:54:ac:5c:c3:b2:c6:6a:9e:26:7b:be:1b:
0a:a8:6a:13:f0:44:2d:81:50:b3:ee:18:98:9d:dc:
c4:a1:97:f3:24:e9:15:f3:ed:14:a3:47:34:48:3f:
6a:69:ca:87:17:90:e9:c4:53:29:1a:db:5b:8c:8f:
f0:5e:29:f8:b8:18:9c:55:b7:0c:92:b7:a6:25:5e:
e8:12:1b:ff:b8:85:95:08:c0:60:f0:9d:b8:0c:9b:
12:43:8c:4b:e9:72:ae:01:e6:0b:b3:4c:67:db:db:
9d:36:09:84:80:18:02:38:e1:39:a8:5f:d5:0a:ba:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:81:24:13:2C:AF:98:5A:FD:96:7F:C0:F6:1A:3B:00:93:FA:85:97
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653663323a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e6c2::/48
Signature Algorithm: sha256WithRSAEncryption
aa:ed:a1:d7:71:6a:33:93:8e:01:be:b2:79:b8:09:49:a3:f7:
83:a2:ca:99:b7:f1:ff:bd:af:f0:c8:1e:5f:eb:53:1e:30:4a:
e9:ad:0e:af:b0:64:41:6b:a0:93:84:a9:b0:a4:0a:a5:71:d3:
83:a2:6d:9a:5b:26:28:05:aa:8a:cb:74:68:5e:bd:54:e0:8a:
e5:c2:ab:7c:77:c2:cc:f9:4f:f5:8f:a4:7d:58:91:2c:f6:58:
8c:a7:ed:dc:46:44:70:14:f7:ff:6d:8e:b4:b9:3a:7d:b5:1f:
27:08:0d:ab:a1:6e:8c:6d:06:5f:22:f0:c9:91:c2:de:b0:30:
d8:fe:60:58:5c:8a:fd:0f:55:96:d6:ef:6e:49:31:62:88:94:
43:32:b0:72:a7:27:37:5d:0e:fe:21:a7:c5:df:f4:62:e9:f9:
35:2a:99:4b:e0:ee:89:0e:f7:fd:f8:9d:f6:3b:7f:77:8f:bd:
70:19:76:00:4f:bd:30:32:0c:22:93:23:6b:48:84:12:dd:79:
6e:23:95:cf:1f:db:64:50:78:50:67:17:36:79:2c:91:1c:bb:
78:db:3b:4d:25:50:cb:24:d7:59:f2:83:7f:5d:3a:d2:2a:b6:
32:7e:65:35:e7:9e:7a:48:51:75:e3:d4:e7:95:58:03:91:5f:
31:f2:c0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:56:03 2025 by rpki-client