
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653765393a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653765393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: fCeUcDOjGW7Jw/FZu2+1Lu7ybxnMKAzKZ1Mr2UYCLL4=
Subject key identifier: C2:88:02:5A:FA:2F:98:A4:BF:46:F7:0C:44:35:23:C3:1F:43:F0:07
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 19949AD71B35FB7D597075EE4EEDE10FF2E8018F
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653765393a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:07:19 +0000
ROA not before: Tue 01 Jul 2025 17:02:19 +0000
ROA not after: Tue 30 Jun 2026 17:07:19 +0000
asID: 396968
IP address blocks: 2a0f:6287:e7e9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:94:9a:d7:1b:35:fb:7d:59:70:75:ee:4e:ed:e1:0f:f2:e8:01:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:02:19 2025 GMT
Not After : Jun 30 17:07:19 2026 GMT
Subject: CN=C288025AFA2F98A4BF46F70C443523C31F43F007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:87:35:37:39:0b:30:bb:7f:18:79:27:f9:28:
7f:c3:a7:37:a5:3e:42:67:8d:9e:7d:f8:b5:e7:81:
7a:3e:25:29:27:27:ef:30:fb:9c:e7:de:56:d1:23:
89:40:24:0d:47:6f:fd:bd:34:62:0e:dd:a7:25:9a:
38:2c:54:25:1e:e7:f5:e2:39:39:7c:09:f8:de:e0:
6b:84:85:eb:4e:37:c8:84:0f:39:0b:27:aa:ac:0d:
e1:3a:d8:98:1d:eb:db:cd:a6:1c:2a:17:bc:cd:b0:
35:4e:9e:48:1f:fe:a5:1e:21:be:4c:98:ca:73:31:
78:99:fb:89:5d:9d:c4:b6:b9:0b:ee:fa:dd:d8:51:
39:99:dd:78:ec:3c:8b:75:6e:9c:9b:2c:85:16:ef:
72:cb:28:74:2c:ec:5e:43:eb:70:e6:15:14:84:e7:
0c:49:e2:d9:38:ed:3b:40:50:49:6b:3b:0b:39:c4:
c6:58:e0:39:54:bc:09:79:8a:d4:e9:dc:56:c9:18:
4d:54:fb:5f:e3:47:2a:fb:82:8f:0c:e7:ed:8f:ed:
74:38:f4:73:4c:ce:d1:80:f7:77:55:68:4e:5a:44:
17:c6:0c:6b:e4:d5:3c:5c:ec:97:6a:78:48:b5:f7:
42:8b:5a:09:de:9d:c7:cf:15:1f:4c:5d:26:d9:62:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:88:02:5A:FA:2F:98:A4:BF:46:F7:0C:44:35:23:C3:1F:43:F0:07
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653765393a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e7e9::/48
Signature Algorithm: sha256WithRSAEncryption
2e:f6:d3:35:ad:fb:1f:b3:51:e4:32:6d:e1:0f:55:92:8d:5e:
47:e8:ab:b7:c3:12:53:ac:a1:90:24:e3:72:6a:a1:dd:c9:2a:
a9:cf:f5:f7:7c:14:9b:8e:56:a6:a7:8a:c3:da:87:95:cc:fe:
da:30:68:38:66:0f:90:12:28:b0:31:d1:19:7c:af:37:58:c1:
2d:93:71:16:4f:fa:1d:99:17:da:2b:a1:13:36:0b:fd:cc:48:
f1:60:c0:39:12:e2:32:f7:b7:8a:a6:3b:90:cf:85:5f:90:1c:
db:63:e2:71:ce:43:e7:f6:58:fd:f7:ba:79:93:1e:2c:d8:48:
5a:73:b1:2e:48:43:13:de:b1:c6:1f:fd:13:aa:20:f1:08:ee:
45:5d:fc:e6:91:2c:04:8c:cd:3e:9a:2c:08:c2:bb:01:1e:bc:
28:d8:d5:50:4c:8f:fe:0d:fd:47:bf:75:76:7e:99:d4:ea:63:
37:f3:3c:8e:0f:4f:42:4b:35:82:0d:ab:c2:73:3c:4c:1c:9f:
b2:68:ff:ed:ea:81:d5:43:b8:58:aa:bb:16:46:1e:ad:56:a9:
81:4b:5a:5f:47:b6:b3:0d:94:01:87:c7:05:a5:d2:b4:f7:28:
08:e7:0c:fc:af:09:0f:9b:86:2d:37:cd:11:fd:48:5c:8e:ce:
d9:df:93:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:46:29 2025 by rpki-client