
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656136653a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a656136653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: VZ8oTZav7DxZFv2bRXgDazmmo8/cB7xIlEHy0mVQd5I=
Subject key identifier: 3C:6C:E3:D9:1C:4D:79:78:3F:CC:64:74:35:DF:28:BB:FC:43:8B:34
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 7599F06A9BC93F4721D05F64D825055B0A093C9E
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656136653a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:09:38 +0000
ROA not before: Tue 01 Jul 2025 17:04:38 +0000
ROA not after: Tue 30 Jun 2026 17:09:38 +0000
asID: 396968
IP address blocks: 2a0f:6287:ea6e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:99:f0:6a:9b:c9:3f:47:21:d0:5f:64:d8:25:05:5b:0a:09:3c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:04:38 2025 GMT
Not After : Jun 30 17:09:38 2026 GMT
Subject: CN=3C6CE3D91C4D79783FCC647435DF28BBFC438B34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5d:11:1d:dc:c8:53:b9:8b:74:09:71:82:36:
55:c5:c4:6f:f4:9f:88:99:97:19:25:fc:24:35:d2:
9d:22:56:86:c6:ae:93:43:7f:ee:81:df:56:a5:1d:
cf:2c:56:3d:4c:80:fb:a3:87:13:2e:07:44:60:10:
88:f4:a7:67:33:a3:96:bd:ba:2b:71:b1:d1:f3:a4:
da:1f:96:9e:2d:98:eb:97:0c:62:b7:3d:0c:7d:34:
fc:e3:67:09:d9:e4:4e:75:b8:cc:f3:45:48:41:fc:
1f:a0:7e:15:96:19:53:9f:d8:0d:4f:75:13:99:2d:
49:b5:53:1c:71:da:83:9d:df:5e:df:ea:4c:24:8c:
0c:f5:89:fd:db:73:58:b1:4a:0e:17:5f:e0:f0:96:
9e:9a:57:0c:61:4d:78:bb:44:f8:1a:ee:bd:05:2f:
9e:54:0b:fe:0f:3e:17:ac:bf:06:b5:6b:ea:08:3a:
b7:14:9f:87:a0:35:c0:b8:97:bb:59:c9:6a:d3:3b:
da:fa:1b:7b:52:d7:42:f8:d5:eb:9e:08:24:f8:f4:
49:53:64:40:cf:2c:7a:ab:b8:95:20:ca:0f:e2:15:
55:7e:89:fc:4c:a3:98:3f:76:a3:58:b0:c6:e4:b7:
e9:bc:d8:92:f6:39:19:1c:36:2b:20:e1:eb:8d:a7:
76:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6C:E3:D9:1C:4D:79:78:3F:CC:64:74:35:DF:28:BB:FC:43:8B:34
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656136653a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:ea6e::/48
Signature Algorithm: sha256WithRSAEncryption
a7:74:17:1b:43:da:0e:c2:1a:cf:bc:c0:83:4d:30:8c:d0:ba:
61:2f:67:74:ac:37:b9:eb:fd:be:67:a5:ef:7f:0c:51:25:d0:
cf:ad:64:8f:ac:d7:a9:4f:14:93:c2:8e:db:6d:56:43:52:5a:
ab:e0:11:f8:5f:b8:96:c6:85:7c:69:2d:95:7a:3f:d6:4b:06:
85:90:9c:b1:e3:f6:34:3c:51:7a:ef:49:73:ef:7b:e4:41:11:
c4:54:a8:0a:1b:33:e2:9a:6a:d1:f1:42:37:c5:ba:a8:6c:86:
6f:23:97:f6:1c:dd:8e:1d:f3:f1:b7:6b:79:29:0d:f8:2e:47:
23:9a:fb:39:7b:54:7b:8c:3c:13:11:5d:6c:f5:50:6d:37:8a:
c6:4d:fb:e3:12:50:b3:00:7c:4c:e1:8e:a9:44:4e:b8:7c:98:
c5:5b:1c:5b:36:b9:47:85:06:8a:e8:ac:48:be:dd:c6:a4:41:
01:a9:b6:f9:5f:f8:b4:8a:21:a0:62:f8:9b:73:4d:62:55:59:
fb:0a:92:56:1f:67:cf:50:c5:ab:76:fc:a5:0b:39:8f:48:d9:
45:43:b6:2c:0b:00:22:ce:5b:d0:5e:5f:f9:11:c5:2d:0d:2a:
c3:21:05:d0:57:86:5a:ef:b4:45:8c:46:45:9f:90:89:34:94:
11:f7:14:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:35:45 2025 by rpki-client