Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656535383a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a656535383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 1IkxWDhCaD5A1NvfNVeVejli8imP9nl7uexRo/lkhK8=
Subject key identifier: FE:AC:84:D1:1B:12:C0:CD:50:7A:00:76:D6:78:C6:D3:14:07:57:98
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 2B602CCC781642EF83FAE9CB44CA65E2A638B8
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656535383a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:07:17 +0000
ROA not before: Tue 01 Jul 2025 17:02:17 +0000
ROA not after: Tue 30 Jun 2026 17:07:17 +0000
asID: 396968
IP address blocks: 2a0f:6287:ee58::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:60:2c:cc:78:16:42:ef:83:fa:e9:cb:44:ca:65:e2:a6:38:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:02:17 2025 GMT
Not After : Jun 30 17:07:17 2026 GMT
Subject: CN=FEAC84D11B12C0CD507A0076D678C6D314075798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7a:f9:d1:12:77:f8:ca:27:f9:83:8a:dc:f2:
bc:3d:c6:2b:47:64:8a:b0:07:b6:9a:64:57:e2:6c:
a5:29:28:0b:7c:e0:2a:0c:39:00:89:f8:72:f2:70:
71:a6:98:9b:41:c0:29:ab:c5:5a:a5:d0:fa:61:c3:
6a:54:71:d3:2e:26:3a:ea:c3:72:bf:60:0d:d3:de:
17:7d:ee:e9:05:b4:e3:17:4b:3d:63:80:92:67:c7:
c5:3a:1e:43:4a:f2:a0:3a:78:5e:d5:71:6a:c5:f7:
b2:39:75:51:a8:6d:cf:68:2a:d7:0f:d8:28:3e:f4:
85:28:d4:51:6c:48:d8:52:08:05:05:ee:cd:64:9f:
86:fc:ec:0e:93:87:cd:92:7a:05:05:26:ec:22:9f:
78:87:33:18:66:9f:92:08:a5:7b:1b:10:ac:5e:da:
5d:7d:a7:63:63:ad:d8:b4:98:cb:43:e1:fd:47:17:
69:02:36:5f:f9:73:50:e1:7c:e3:17:b2:3b:ee:b9:
42:98:cf:1d:13:54:92:30:78:c0:db:a0:77:76:fd:
30:f9:55:b8:14:00:5f:0c:a5:39:58:35:cf:ee:60:
bc:05:26:6d:d7:88:a4:3f:ca:72:bc:cf:7d:f5:fc:
5c:6f:0d:5c:a9:20:03:49:8b:a0:58:dd:1b:eb:b2:
91:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AC:84:D1:1B:12:C0:CD:50:7A:00:76:D6:78:C6:D3:14:07:57:98
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656535383a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:ee58::/48
Signature Algorithm: sha256WithRSAEncryption
aa:37:c9:3a:ce:35:45:65:53:32:64:49:f6:95:9f:c5:ae:5b:
af:87:87:a0:88:0b:71:93:6b:f3:c9:80:8e:11:b9:4d:40:bc:
95:31:7e:72:30:04:8d:12:ad:8e:ef:c6:f6:e6:41:82:1c:0d:
1c:6f:55:61:28:b1:19:b2:0b:1f:b3:f5:99:c9:28:9f:79:5b:
3d:7a:20:11:01:a4:01:0b:c1:d5:e9:f7:11:6c:72:11:74:e0:
ec:c2:f4:9b:cd:de:3f:a1:24:9b:98:cc:7c:d2:0b:92:66:5e:
49:7f:81:1f:67:2e:39:59:aa:eb:dc:e0:b6:71:56:68:ac:52:
81:17:55:34:76:51:d9:51:a0:75:31:d2:db:2a:8e:2f:4d:37:
60:a6:72:40:99:55:48:bd:a4:43:10:a4:d3:e3:4c:3d:65:7c:
4b:ee:22:14:ae:31:2f:1d:9c:09:ad:3a:ac:25:bb:24:ae:06:
f2:22:72:4f:ad:2f:dc:94:5a:72:e8:ae:3d:5f:2d:28:9b:39:
8f:2f:2b:fb:ef:d3:dd:5a:b7:e3:56:ce:00:bb:0f:9e:02:91:
13:48:8d:fa:19:03:ba:17:cb:b1:3e:db:64:9d:49:26:7c:ae:
57:8d:90:5e:99:f7:3e:88:2d:a0:d6:39:01:24:0a:c0:c9:f7:
c9:7b:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:24:01 2025 by rpki-client