Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa
File: 326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa (raw, json)
Hash identifier: o7cZ+CE15FXSq9sDHJ7ahc2WYkXBKsBIWvNNcbhvbP4=
Subject key identifier: 9B:0A:FF:50:33:0B:5D:AF:FD:45:7B:AE:9E:11:6A:B1:F1:72:A6:2F
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 743BD94AA693E4651DCC3CA0DA5A062B47141ED1
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 09:12:12 +0000
ROA not before: Thu 26 Jun 2025 09:07:12 +0000
ROA not after: Thu 25 Jun 2026 09:12:12 +0000
asID: 396968
IP address blocks: 2a0f:6287:f000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3b:d9:4a:a6:93:e4:65:1d:cc:3c:a0:da:5a:06:2b:47:14:1e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 09:07:12 2025 GMT
Not After : Jun 25 09:12:12 2026 GMT
Subject: CN=9B0AFF50330B5DAFFD457BAE9E116AB1F172A62F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:38:d3:fd:fa:6e:3a:f0:ec:45:d2:21:44:
37:ad:2a:aa:e6:1d:a0:08:83:b5:4c:65:26:60:b1:
e5:01:fe:a3:8a:7e:ab:1c:9a:3e:ae:b0:7f:e4:3e:
af:7b:1f:a8:12:ce:5c:81:b0:7d:69:16:06:01:74:
dc:0d:26:d9:66:b3:9b:ee:c5:be:13:b0:03:19:0b:
0d:28:32:4e:27:d3:93:88:d2:3a:4d:65:b3:03:36:
01:50:23:93:01:62:d0:fe:84:c9:d1:8b:67:cd:88:
ce:31:2d:25:ef:96:fb:b0:8a:4a:4c:bb:37:2d:b4:
fc:ed:17:16:b7:01:99:df:4d:39:b0:8a:2b:c7:a5:
d2:1c:13:cd:bb:83:d0:65:d5:40:28:5c:83:ea:9e:
b9:2b:9b:08:ea:56:7f:e2:c3:92:03:c5:e2:b4:1d:
f8:c4:79:a4:4a:47:44:06:50:94:16:8c:ca:ed:9b:
97:a4:58:4c:b4:00:43:cb:94:dc:57:f7:5c:32:93:
90:02:9d:20:7b:0e:3a:39:07:57:0a:fc:84:11:8a:
fc:b1:9b:72:86:75:38:f8:f5:e8:9e:67:97:ab:78:
b5:38:70:1d:93:eb:1e:c7:7f:4f:87:9e:a2:d7:2a:
30:2a:86:14:ce:b9:67:67:7d:d9:38:a3:da:52:ce:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0A:FF:50:33:0B:5D:AF:FD:45:7B:AE:9E:11:6A:B1:F1:72:A6:2F
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f000::/36
Signature Algorithm: sha256WithRSAEncryption
97:e0:c4:f0:61:c1:8f:ea:cc:02:9c:9c:ec:33:78:67:7d:fa:
b9:6e:f4:e0:95:5f:b2:dc:52:54:4d:8d:49:77:75:7d:50:a4:
c5:dc:b9:c6:35:5a:a3:b0:57:d8:78:49:8f:47:d2:c5:b0:46:
49:76:ac:b6:e3:2a:d7:e6:08:51:de:1b:95:9e:80:03:7c:d4:
8a:29:3c:3e:bc:2a:b6:f2:e7:2a:3d:80:a8:f7:28:5c:06:7e:
32:1b:fe:29:94:4d:d7:a3:9a:ff:c9:75:96:8e:f0:10:60:27:
f8:9e:5a:70:b8:b3:7d:c3:5b:66:c6:39:3c:ed:dd:57:84:bc:
76:0b:64:d6:d3:65:00:4c:ad:a0:0e:1d:70:9e:4a:22:b0:e2:
3c:21:a3:6b:a2:85:6e:eb:2b:06:7c:65:d8:13:27:c0:a2:31:
db:a4:53:f4:8b:69:32:3e:c7:b8:38:e8:16:7b:25:05:e5:81:
33:15:85:96:a3:ed:a7:2d:d2:9c:58:84:1c:41:2d:12:b9:87:
1a:91:87:69:36:70:0d:e3:a1:07:ea:2b:0d:33:13:84:cf:c3:
07:4c:7c:8c:50:ef:37:9a:03:eb:a1:c9:3c:7d:ad:e3:85:17:
9b:b9:1c:39:c6:d0:32:ec:8e:38:bc:23:5a:54:c3:26:ee:15:
98:f4:dd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:23:05 2025 by rpki-client