
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656233663a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a656233663a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: XFAy+694BLZ7MzyN8PdlzQyqaO3ulo63+1jcajVmgzw=
Subject key identifier: 2F:4B:05:BA:B8:73:E5:C1:CF:38:05:A6:31:27:6C:30:BE:39:C1:F2
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 78F07B4DCE0C10FDD08B4838099D5B02DD5B289E
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656233663a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:07:16 +0000
ROA not before: Tue 01 Jul 2025 17:02:16 +0000
ROA not after: Tue 30 Jun 2026 17:07:16 +0000
asID: 396968
IP address blocks: 2a0f:6287:eb3f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f0:7b:4d:ce:0c:10:fd:d0:8b:48:38:09:9d:5b:02:dd:5b:28:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:02:16 2025 GMT
Not After : Jun 30 17:07:16 2026 GMT
Subject: CN=2F4B05BAB873E5C1CF3805A631276C30BE39C1F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:01:8b:6d:ca:d0:27:fc:46:d4:7c:2b:23:08:
d0:52:88:fa:9f:58:88:53:f8:3a:ed:69:39:32:36:
3a:da:65:42:1d:42:53:dc:a0:bf:6c:5c:b4:a2:54:
b0:2a:e6:13:9d:5f:b1:0a:3e:76:7b:87:75:6a:2a:
7e:b9:20:db:e1:ab:65:72:19:cf:73:06:7e:6f:46:
ac:87:80:f3:67:e2:e8:f5:8c:81:e2:33:9c:32:a7:
6b:84:fe:a4:d9:3e:0d:97:68:88:d8:6d:4b:44:2d:
9a:2e:52:62:75:d6:85:25:74:6f:37:b2:81:e1:d8:
92:77:78:3f:1c:bf:cc:1b:99:fd:e4:84:6c:bb:9d:
21:92:e6:c8:15:2b:62:8d:fe:28:e6:98:01:47:48:
27:26:06:85:77:aa:e3:7e:9a:37:dd:ac:33:4b:ad:
e3:c1:69:8d:f2:1b:2d:03:96:b8:f2:62:67:0d:d5:
73:39:de:91:f5:bc:c5:1a:aa:aa:bd:5d:dc:85:f7:
97:ff:e0:90:c5:98:01:84:f7:e4:45:d5:bf:30:f2:
e1:dd:9d:57:6a:6b:be:b4:d8:6a:e4:0d:1a:49:b0:
fd:0f:c3:fc:8f:6c:23:8a:7b:3e:fa:68:90:7a:61:
74:94:5f:0d:af:8d:b5:ef:34:de:69:99:2b:20:ad:
91:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4B:05:BA:B8:73:E5:C1:CF:38:05:A6:31:27:6C:30:BE:39:C1:F2
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656233663a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:eb3f::/48
Signature Algorithm: sha256WithRSAEncryption
27:0f:82:b9:74:d5:4a:5e:8c:b3:47:35:73:5f:2b:f6:61:a8:
27:ac:df:c6:83:f2:e9:9c:7e:90:6a:12:dd:7d:db:32:70:cf:
7c:a4:d5:ca:4b:7f:f5:2c:8c:87:61:76:8b:42:a9:7b:b5:64:
5b:14:d1:47:1f:2b:b6:3b:89:08:be:ba:f5:2f:7b:54:ac:a9:
5c:25:98:ba:b3:33:39:78:ad:38:7b:73:30:46:1d:50:a0:5d:
42:8f:de:0a:ed:84:8d:3b:66:5f:c2:fc:f7:44:ae:03:c5:73:
03:1d:9c:01:75:75:4a:e3:11:ac:b1:95:75:00:39:7b:ed:c8:
8a:bc:47:e1:b0:73:4e:10:8c:c6:f5:59:18:14:82:b9:81:e0:
0e:65:28:df:98:19:5e:42:ee:d8:a8:44:77:f8:50:55:bc:62:
e4:8f:db:5e:be:cf:e4:1d:57:9a:79:5d:5c:c2:a2:77:2d:f5:
b0:69:e0:5f:98:f9:a3:9d:6e:40:89:49:58:11:51:f8:03:a1:
3b:51:e4:18:9e:9a:82:fb:9b:ea:1d:32:f3:e7:48:49:da:a4:
1c:03:6b:8b:f9:b8:f4:29:df:c0:b5:c5:2c:4d:c5:3a:0c:89:
4f:cf:b9:a9:91:d0:b8:ae:62:1f:f9:60:b2:fb:97:41:e8:00:
9b:8d:3b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:14:54 2025 by rpki-client