
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656335643a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a656335643a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 1ce+LVIvJH4K35qLzFxOviOjvq/4kisOjLkianjwKwA=
Subject key identifier: D6:69:E3:3D:75:FC:6D:F8:CD:02:73:56:89:EB:83:EC:17:D0:F4:26
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 27F3A6F214C7702062D828CBAE995F364A1CD197
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656335643a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:08:58 +0000
ROA not before: Tue 01 Jul 2025 17:03:58 +0000
ROA not after: Tue 30 Jun 2026 17:08:58 +0000
asID: 396968
IP address blocks: 2a0f:6287:ec5d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f3:a6:f2:14:c7:70:20:62:d8:28:cb:ae:99:5f:36:4a:1c:d1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:03:58 2025 GMT
Not After : Jun 30 17:08:58 2026 GMT
Subject: CN=D669E33D75FC6DF8CD02735689EB83EC17D0F426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:c3:17:91:ce:3b:6e:97:67:4d:5b:07:e4:
e9:5a:c2:58:9d:18:5e:0e:d7:a5:ed:8a:06:2a:a7:
03:47:ac:82:2e:dc:e7:7f:15:12:9f:3b:2a:a8:8e:
1d:82:af:a7:39:a2:38:24:18:39:b9:90:cc:c5:76:
30:15:ff:df:e4:7b:a1:df:b7:bc:fd:88:33:42:1c:
cf:99:e4:8b:7b:7b:27:33:4a:ef:17:1b:b0:73:3f:
d6:f4:54:de:c8:07:ad:bf:74:26:35:6a:ca:92:2d:
0a:41:8b:f6:2f:3c:a3:02:ec:82:8e:fb:3d:07:1b:
53:b4:52:1b:3c:a8:28:38:88:dd:93:f2:28:dc:11:
97:13:ae:9e:5d:9b:2c:ee:57:6e:66:f9:fd:9d:fc:
cc:ea:eb:3e:90:d2:35:58:65:0a:7e:15:a2:f1:00:
75:1b:a1:65:ff:70:ff:52:87:44:65:c2:f4:a5:19:
9c:85:5a:70:cd:7a:83:ae:e4:b9:5c:f0:c8:f5:ad:
d3:6e:27:a0:3f:c4:33:08:fc:b5:b4:18:81:57:54:
6c:bc:d2:a6:04:99:4d:4c:9a:12:9b:92:96:fd:37:
a6:50:96:61:10:4c:26:98:65:f5:a1:be:51:46:e3:
fa:d3:58:c1:f1:a0:14:f8:62:55:4f:18:b0:56:6c:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:69:E3:3D:75:FC:6D:F8:CD:02:73:56:89:EB:83:EC:17:D0:F4:26
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656335643a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:ec5d::/48
Signature Algorithm: sha256WithRSAEncryption
3b:06:3c:02:6d:63:96:bb:d5:e1:1d:57:5a:6d:a3:f2:e8:6d:
69:b1:e9:22:97:8f:83:0b:09:52:ca:13:f1:52:e8:a8:78:b7:
f7:44:1c:69:69:fb:ee:3b:75:13:f7:af:68:e2:e5:5b:4b:95:
3b:38:be:fc:ea:c6:08:4b:25:9b:3a:fd:1d:95:3b:87:a1:6f:
6a:57:35:cf:ec:2a:af:ca:48:5a:e5:55:4a:20:8d:51:e3:9e:
a0:39:dd:94:bc:74:a8:64:8a:f1:df:bc:c9:f2:0a:f2:28:8a:
23:b2:8c:07:9b:0c:b2:d2:d1:6d:48:1e:8b:35:51:b5:ad:f1:
38:4d:23:a7:b9:4c:4b:b7:05:a3:af:38:91:63:45:ae:dc:5e:
ce:f5:07:fd:75:4a:db:69:2b:4f:82:72:10:59:14:77:7b:33:
30:d6:dc:ae:3c:90:23:9e:45:a6:a6:56:b5:a8:6e:3a:61:95:
18:ad:9b:f4:f2:4f:e6:40:16:10:91:a1:ee:df:9d:3e:79:f3:
bc:02:74:00:99:36:5a:5b:b9:42:90:0d:52:28:c3:aa:36:d0:
92:11:6f:63:ba:0b:1c:18:64:89:e2:4f:2a:a8:a7:8d:9f:82:
99:7d:69:4c:12:6f:f3:05:9f:79:60:51:b8:40:65:9e:54:ee:
cb:19:d7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:20:08 2025 by rpki-client