Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663034383a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663034383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 4HcWMKKLbPF2g+jKsWX55epzsU1864MYwgBZqe+oJrM=
Subject key identifier: AB:B7:17:0B:24:7E:45:60:1E:A2:BF:9D:10:2D:84:0C:5D:FE:DE:BA
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 4B877783CE4306D3A6B561472AB6D71D7FD47D31
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663034383a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:36:23 +0000
ROA not before: Thu 26 Jun 2025 12:31:23 +0000
ROA not after: Thu 25 Jun 2026 12:36:23 +0000
asID: 396968
IP address blocks: 2a0f:6287:f048::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:87:77:83:ce:43:06:d3:a6:b5:61:47:2a:b6:d7:1d:7f:d4:7d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:31:23 2025 GMT
Not After : Jun 25 12:36:23 2026 GMT
Subject: CN=ABB7170B247E45601EA2BF9D102D840C5DFEDEBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:26:6e:53:aa:40:b3:20:dd:0c:06:0f:8f:
57:74:3c:8d:5a:74:70:fe:14:2d:2a:2e:97:3f:53:
5a:a1:39:b7:e4:09:3b:0e:f5:e9:b2:b6:fd:76:6e:
51:fc:27:89:e2:a8:7c:d2:fa:28:75:0e:9c:b3:28:
a0:45:cc:8c:e2:2c:15:8b:ad:e6:48:0b:e4:b5:33:
e2:4e:0a:b8:8a:ca:70:02:fb:56:eb:4c:8f:52:32:
33:4f:f0:a5:d9:4b:27:6e:9b:29:e7:12:f3:94:9f:
38:33:18:fe:4e:57:88:80:64:b8:79:61:25:d7:45:
ac:19:60:d7:d8:36:ad:75:bc:25:bb:45:6e:de:91:
8d:e9:08:3e:09:d4:af:a5:67:4e:d2:77:d3:3c:cb:
ef:b5:97:2b:84:27:96:e1:57:d8:c6:e2:94:4c:43:
0a:25:e3:f4:09:73:ad:79:b7:68:df:55:f6:d3:ac:
2b:3b:4f:27:09:01:20:63:90:05:6a:ff:68:02:20:
c8:ce:10:af:82:41:0b:97:04:38:2d:88:8f:0b:66:
9b:46:5e:52:90:7e:2d:24:a3:dc:d5:fe:ad:05:88:
83:f5:53:15:ce:6b:33:6c:95:39:50:1d:eb:8b:01:
0d:18:47:54:bf:c0:7e:47:59:0a:ef:89:9b:48:1a:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B7:17:0B:24:7E:45:60:1E:A2:BF:9D:10:2D:84:0C:5D:FE:DE:BA
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663034383a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f048::/48
Signature Algorithm: sha256WithRSAEncryption
9b:9e:9d:4a:fe:32:e2:aa:3d:66:a2:3f:f8:66:da:f8:86:56:
d0:fd:ce:a2:46:ef:da:dd:88:d0:1a:86:58:2a:c5:0b:fc:42:
20:76:dc:2d:f5:6c:db:bd:42:a2:22:b1:d1:04:31:80:f6:1f:
5a:1e:50:03:43:ec:95:e4:58:98:3e:a5:42:5d:ef:9b:1e:db:
67:42:69:61:4f:25:ae:01:ea:6c:88:70:c8:6b:44:7c:5e:fa:
a4:d7:c9:07:00:f9:f1:77:59:5b:c5:94:d7:f5:4a:bf:6f:23:
11:bd:7b:e5:a8:9b:52:1f:f8:47:8f:8a:77:5a:48:24:b6:3b:
ee:2b:2e:86:5e:93:c5:56:b1:57:01:83:14:d9:14:6d:e9:4c:
7f:ff:68:93:4f:74:eb:98:e1:9a:92:93:fd:d5:ff:ea:92:96:
53:b0:9b:16:6b:36:d3:ff:a4:51:bc:b8:a4:63:bd:fa:d1:1d:
4a:ba:4d:2c:4d:d4:ce:63:d5:9e:1d:2c:65:5f:ee:f6:ec:1f:
3c:9f:2b:21:82:64:20:56:99:bf:9e:4f:12:b8:5e:eb:70:a8:
9d:ab:28:30:f6:90:7d:ee:3b:a7:dd:f8:52:49:41:30:ba:e3:
b7:18:1d:46:f9:49:98:6f:3a:4f:45:23:94:56:9f:fd:61:fd:
d7:ca:70:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:36:23 2025 by rpki-client