
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653665393a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653665393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: kafUFnkvGlpM41jEOyJYh6qk6r0M8lzgHwzKhsfutDY=
Subject key identifier: 52:AC:38:DF:E8:CB:70:78:D3:EE:7C:E1:BC:23:EC:A6:97:49:8D:70
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 544B7765A00ED2EEF0093C71E0E66C6316B6A492
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653665393a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:09:11 +0000
ROA not before: Tue 01 Jul 2025 17:04:11 +0000
ROA not after: Tue 30 Jun 2026 17:09:11 +0000
asID: 396968
IP address blocks: 2a0f:6287:e6e9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:4b:77:65:a0:0e:d2:ee:f0:09:3c:71:e0:e6:6c:63:16:b6:a4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:04:11 2025 GMT
Not After : Jun 30 17:09:11 2026 GMT
Subject: CN=52AC38DFE8CB7078D3EE7CE1BC23ECA697498D70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:71:fe:4b:a1:36:73:22:6b:62:69:58:df:1c:
b5:d5:f7:bc:3d:1f:03:66:5a:df:82:c5:48:64:46:
63:49:e2:b2:89:35:46:48:ac:ec:39:b7:4b:80:7c:
4f:a3:95:f8:c8:64:18:66:47:ea:4a:f9:ce:e3:a0:
66:88:ad:28:91:cd:eb:21:50:2e:6c:05:4e:58:be:
d0:2b:94:f0:4d:a2:25:5e:c1:f7:01:ec:b4:03:2b:
04:b0:9a:bd:aa:a8:52:e7:ad:d7:95:a9:6e:e2:1f:
94:6f:48:8b:31:28:8a:4d:1b:f6:9e:46:4c:b8:8e:
c3:4d:5d:2e:5b:47:bd:3c:87:a6:97:83:5f:83:3c:
cb:13:d4:70:d4:dc:3b:f5:8d:3f:49:31:e2:da:b6:
30:cd:a1:89:2f:77:29:2f:3f:75:f2:8f:70:68:89:
5e:1a:3d:fe:ca:f1:25:7a:8c:d0:8c:7a:b1:07:50:
2e:f0:f2:6c:e4:10:ff:31:28:0f:9d:b4:31:66:b5:
eb:ce:40:f0:7a:84:a3:dd:4b:a3:20:bb:7a:3a:37:
0a:2a:e1:3f:f7:90:af:4c:ec:0b:4a:33:3a:87:8e:
9c:93:9a:ad:9e:2d:c1:0c:7a:13:bc:3f:60:8f:37:
d1:2e:f2:ef:a2:0b:bf:f6:fc:78:96:cc:c6:d3:b3:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AC:38:DF:E8:CB:70:78:D3:EE:7C:E1:BC:23:EC:A6:97:49:8D:70
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653665393a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e6e9::/48
Signature Algorithm: sha256WithRSAEncryption
25:bb:51:ea:1d:37:1a:9e:c2:f3:7b:0f:3d:35:a4:8a:fc:41:
55:6c:30:ef:65:64:e6:3b:4c:6f:ba:15:5f:e8:b6:b2:cf:75:
1c:b0:73:13:05:ab:55:fe:5d:e2:ba:10:0b:65:60:8d:56:68:
ac:32:57:b6:a9:65:f0:42:61:86:b0:e0:d2:f4:36:42:a1:c4:
5d:47:e8:67:13:42:46:07:1c:93:47:6e:19:7a:17:1b:27:e4:
a3:ec:7e:91:69:f7:70:7e:5a:dd:5c:9c:be:49:fb:c5:50:2e:
38:17:f8:2c:18:20:cf:16:1e:ad:ba:ed:28:70:20:b4:3f:44:
ef:59:11:53:e9:4f:ba:67:90:07:5c:a4:75:4b:b0:29:02:c4:
1a:e9:0b:9d:14:98:a6:c5:68:af:a0:a4:e0:a6:49:6a:6f:55:
e1:b9:5a:04:64:d6:88:eb:f8:ac:e3:8d:c0:e4:27:91:3a:0a:
95:64:0f:00:26:8d:0c:02:a1:81:bd:c3:1f:28:21:f6:ce:6b:
e2:20:cd:d6:f3:4b:92:3e:2d:96:27:ea:29:c5:af:15:b6:a1:
f7:46:78:fc:3e:12:18:5a:a6:ff:c7:e7:e8:a1:f2:26:bb:ca:
8a:5d:68:63:60:8c:b4:1b:db:c7:88:19:73:60:a1:93:80:87:
27:d6:db:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:45:35 2025 by rpki-client