
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663038393a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663038393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: AVf+Wcz7pNnfQe+6cRiqgQ8tYnEEwjVz8NO23WurlmE=
Subject key identifier: 76:CA:94:C2:DA:D7:61:B5:57:11:EF:59:C7:0D:46:9D:45:78:43:AE
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 0E53585904389E7D78368D65D512E22A5ECE4216
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663038393a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 04:15:03 +0000
ROA not before: Tue 01 Jul 2025 04:10:03 +0000
ROA not after: Tue 30 Jun 2026 04:15:03 +0000
asID: 396968
IP address blocks: 2a0f:6287:f089::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:53:58:59:04:38:9e:7d:78:36:8d:65:d5:12:e2:2a:5e:ce:42:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 04:10:03 2025 GMT
Not After : Jun 30 04:15:03 2026 GMT
Subject: CN=76CA94C2DAD761B55711EF59C70D469D457843AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:c7:8b:d6:38:17:0e:09:43:0a:83:fc:a1:
74:5c:98:1f:6e:11:f9:7d:29:3c:4f:d9:23:ae:48:
35:24:e8:24:28:7c:10:24:6c:c8:0f:30:00:92:b5:
de:d4:98:b3:78:fe:1f:e5:a9:39:45:03:d5:95:95:
f1:73:66:77:be:19:7c:32:24:3e:a5:92:54:45:18:
40:08:dc:8f:28:77:54:ac:b6:bb:6f:0d:3d:ec:02:
77:8b:96:d1:9d:05:47:02:27:dd:be:24:ca:fc:f0:
c2:e0:dd:ff:40:38:6d:0b:f7:bd:f9:d1:8c:6b:7a:
89:fd:d0:8c:7d:7d:41:2c:43:ec:32:20:1d:dc:c9:
f7:18:7e:26:57:bf:c7:fd:ab:ac:6c:b8:64:be:23:
07:24:d0:4d:80:95:2a:17:80:40:4b:9b:d8:b7:bd:
76:6d:7c:0b:2c:91:69:28:83:d7:7e:31:6d:13:ed:
3c:19:53:9c:bd:fe:c0:99:c9:e0:30:e5:b8:00:92:
e1:8d:4a:a5:7f:46:05:92:12:20:62:c9:75:36:70:
08:d8:45:61:84:19:ee:5d:b2:ed:2f:10:02:15:60:
47:b9:16:49:6a:d3:16:bd:93:d0:6f:7d:cf:69:3b:
05:2e:32:a3:36:b7:0a:4e:5c:f6:e4:a4:71:e0:53:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CA:94:C2:DA:D7:61:B5:57:11:EF:59:C7:0D:46:9D:45:78:43:AE
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663038393a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f089::/48
Signature Algorithm: sha256WithRSAEncryption
6e:b2:39:47:1f:2e:1a:39:a2:1f:13:88:c4:9a:af:b8:59:37:
df:0a:ee:3f:3a:bd:0d:06:d1:34:da:0b:b6:92:81:da:1d:15:
b3:4b:e7:24:af:69:34:14:27:24:f7:25:06:64:6b:69:54:5f:
e4:89:fb:03:87:e7:45:3b:52:f5:b0:61:ae:12:f6:0c:b6:6a:
67:b7:4e:a9:88:77:7f:ec:5e:7a:ef:75:21:0b:17:f5:29:77:
8a:85:7a:8f:6d:63:8d:ee:f2:86:bb:fc:6d:43:f1:fd:0e:af:
59:4e:bb:7a:84:ac:7d:48:7f:b6:c5:dc:62:ca:a3:fe:a5:74:
e8:08:30:13:8f:06:1f:d1:04:4c:6e:46:ce:e6:5c:d9:80:1c:
75:6a:97:b0:9e:f2:62:92:57:03:e6:11:2f:c2:00:3f:3e:68:
e0:dd:fd:51:40:8e:80:53:a5:75:0a:89:95:11:5e:26:e2:08:
6f:24:e7:4b:8d:06:e0:54:74:43:b4:58:b5:28:6a:b1:fe:f2:
6d:e4:8a:da:d7:c2:15:1f:6c:44:58:1e:94:82:40:36:56:49:
7a:86:9e:45:a7:8f:b5:c4:6c:9f:b9:06:f5:92:2c:db:7b:e0:
98:af:9c:28:95:09:35:3d:19:0b:62:4a:0b:d4:37:29:d3:e3:
ef:3b:b8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:48:18 2025 by rpki-client