
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653739393a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653739393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: y7b190BnZ87dbU0fK4TcmYG5qciJjbSPb2ut5hnrHEU=
Subject key identifier: 09:E5:09:D3:2C:D0:BA:1A:6F:16:BB:51:89:35:A6:B9:17:27:B0:F0
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 2C36F865F3E80BB9C357780F5E1E4C915AB5BB05
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653739393a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:07:20 +0000
ROA not before: Tue 01 Jul 2025 17:02:20 +0000
ROA not after: Tue 30 Jun 2026 17:07:20 +0000
asID: 396968
IP address blocks: 2a0f:6287:e799::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:36:f8:65:f3:e8:0b:b9:c3:57:78:0f:5e:1e:4c:91:5a:b5:bb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:02:20 2025 GMT
Not After : Jun 30 17:07:20 2026 GMT
Subject: CN=09E509D32CD0BA1A6F16BB518935A6B91727B0F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:44:fa:39:28:95:c1:c6:01:fb:a1:f3:d0:
3c:75:c2:08:cc:1d:fd:1a:0b:32:dc:cb:f4:ed:f9:
a5:c5:87:17:4c:40:16:21:7f:8e:cb:f5:ea:e5:54:
83:70:8b:8e:50:3c:ba:1e:ee:60:5f:1f:fa:e8:4f:
21:77:36:8c:58:69:65:db:5e:9d:64:d2:b5:d9:3a:
37:b9:6d:44:8d:c7:9d:d3:8b:40:dc:c8:fb:bb:af:
a3:47:de:1d:4b:6c:7e:85:eb:b9:63:f2:40:8b:d6:
9f:47:26:b2:b9:53:21:4d:66:2f:75:48:08:39:6f:
ce:49:99:6d:de:c0:77:5b:63:25:74:88:f3:3b:f5:
37:f6:d4:db:10:3d:c5:21:14:2a:6b:a4:e7:1a:1e:
43:e7:bb:e8:1e:d4:07:0d:ef:cb:d3:77:35:34:60:
5e:63:ec:c6:46:09:39:77:b2:d6:da:48:50:0a:aa:
38:e3:31:f8:5b:a6:4e:a3:d5:13:ed:f9:78:64:ad:
d3:7e:7d:1c:28:d1:3c:be:3c:ad:77:d3:2c:ac:f9:
32:77:7a:3c:0d:b1:b4:5a:d6:25:da:03:8c:f9:05:
df:41:62:84:38:bd:b9:b9:e3:d4:1b:eb:79:5f:de:
f7:b2:c4:c5:a3:62:a9:cd:d2:04:9a:b0:61:46:33:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E5:09:D3:2C:D0:BA:1A:6F:16:BB:51:89:35:A6:B9:17:27:B0:F0
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653739393a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e799::/48
Signature Algorithm: sha256WithRSAEncryption
5e:0e:1c:78:39:ba:23:1c:50:63:09:89:df:c3:f4:25:70:4c:
06:21:b5:31:cb:3c:7f:6a:84:da:70:ce:84:d4:2e:47:13:a5:
b3:d1:77:7c:9a:fa:00:d3:52:a3:61:82:65:11:26:51:61:7b:
c7:40:77:00:89:f9:97:5c:50:6a:39:ea:92:73:1e:8a:e5:bf:
1d:74:fb:ad:17:8b:e8:65:3c:d9:4b:0b:f1:ae:ba:fc:f8:59:
f1:94:40:4f:d1:5b:e2:f5:26:78:59:ce:a4:7a:97:17:6e:66:
69:1d:54:ac:f9:40:3f:c2:6e:92:a4:82:21:ef:96:ef:b2:90:
9d:6f:cf:c4:26:a5:0d:eb:39:99:93:0c:63:31:37:37:0d:36:
59:51:6b:16:b9:2f:60:09:3b:0f:93:ee:f9:8f:cd:4f:cc:78:
83:fe:03:e3:98:cd:de:43:3e:2e:ed:52:2a:ef:08:af:64:56:
31:76:38:28:f0:18:af:0e:01:df:97:09:d5:16:52:59:58:05:
06:b3:7f:fb:d7:85:90:40:cd:49:30:1b:c8:d8:12:7a:ac:65:
01:25:28:73:7c:30:93:4c:d4:b1:90:e3:fe:d7:9b:8f:61:b7:
6d:96:48:96:a1:06:29:f7:7e:2b:d1:16:c5:4f:f5:34:ad:c3:
58:eb:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:48:54 2025 by rpki-client