
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663038313a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663038313a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: Y1vKDdS9IpLrQbno8dvn8RukaUoOTcnW/AMIoQ+h+DY=
Subject key identifier: 02:AC:48:88:10:47:30:01:3A:4B:7D:7F:66:15:12:E6:CC:30:A8:38
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 4A8D102374F3EFD6DC2F1823777FC022F34BFE6A
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663038313a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:36:23 +0000
ROA not before: Thu 26 Jun 2025 12:31:23 +0000
ROA not after: Thu 25 Jun 2026 12:36:23 +0000
asID: 396968
IP address blocks: 2a0f:6287:f081::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:8d:10:23:74:f3:ef:d6:dc:2f:18:23:77:7f:c0:22:f3:4b:fe:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:31:23 2025 GMT
Not After : Jun 25 12:36:23 2026 GMT
Subject: CN=02AC4888104730013A4B7D7F661512E6CC30A838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:d5:a6:26:35:12:42:f0:97:23:a2:66:99:
c2:b8:e9:18:39:04:b1:e8:5e:77:eb:48:77:62:8c:
82:d8:f5:f8:48:1c:e3:c3:b9:ab:6f:9d:be:ba:5c:
9f:d2:0d:c4:12:b3:51:fe:54:8f:8b:e6:4a:c4:b1:
83:90:9b:ed:b2:b7:95:ab:2d:87:02:b4:b2:ac:90:
b1:36:66:a0:d4:35:14:28:6d:e1:1e:c5:9f:2d:46:
17:df:6d:88:84:aa:d0:fb:6b:64:80:9b:b8:d5:c9:
20:a6:96:7d:33:6c:32:2f:c1:c8:06:8c:5f:31:1e:
50:99:fa:91:46:82:1b:b0:e4:63:82:9e:a5:86:c8:
90:1f:6e:93:8a:49:71:fe:a9:0c:47:2d:d5:05:b2:
fe:ab:39:fd:c2:fa:5e:af:0d:31:aa:91:bf:ed:38:
65:2e:56:07:a8:fd:72:d5:a3:c3:7e:e8:ed:28:1f:
aa:a0:66:42:4e:a5:16:fb:81:84:be:7b:d6:64:5c:
fe:14:04:1c:16:e2:80:de:3a:6f:8c:29:92:c9:bb:
a2:28:7f:e5:04:7e:86:8e:4b:3e:31:d0:42:0c:7d:
0c:9d:f7:f2:52:ea:bc:f0:8c:b9:57:6d:51:4d:b5:
17:e1:a6:d9:ad:a8:9b:58:73:40:6d:22:b3:36:55:
6b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AC:48:88:10:47:30:01:3A:4B:7D:7F:66:15:12:E6:CC:30:A8:38
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663038313a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f081::/48
Signature Algorithm: sha256WithRSAEncryption
b1:1c:81:5b:14:4f:01:d9:93:fa:85:49:ee:f3:19:93:2c:4a:
25:23:2a:37:84:05:9f:80:78:3e:f0:d9:db:c5:bc:e9:f5:74:
06:fd:0e:6b:30:51:81:31:86:03:34:5c:9a:06:9d:3d:af:c4:
1b:1b:ec:ae:78:e7:aa:08:f5:5b:66:19:f0:e7:55:e1:88:cb:
fe:ba:6f:62:61:73:be:94:ca:9d:ed:a6:cb:42:47:4e:5d:82:
ea:ad:a7:ff:b9:c3:d1:ee:d6:83:ea:6c:e2:2b:e9:ed:12:d5:
27:16:0e:fb:5d:6c:ee:8a:50:e8:73:dd:bb:e2:ec:28:e0:36:
6c:5e:57:2b:ac:df:1e:b9:1b:ae:2c:96:89:5f:a1:7f:28:9d:
3c:31:63:ce:d4:df:14:da:6f:e3:ba:11:fb:98:97:2d:cd:40:
2d:14:11:36:62:7b:2b:af:02:66:87:41:7c:03:12:25:32:46:
05:fe:89:41:21:6d:be:49:9b:aa:03:d8:d3:f4:87:72:22:8c:
d9:33:98:7e:0a:17:bd:be:7f:26:ab:9b:3b:fe:a7:ec:a0:60:
52:64:af:0f:24:17:2a:31:31:85:b9:3c:5d:0b:ff:b4:95:4d:
c6:8e:69:5b:15:35:ba:55:e2:07:12:97:87:37:e9:ee:74:46:
67:39:03:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:35:07 2025 by rpki-client