Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663064373a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663064373a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: lq/RoHYCovwqWdVc+M88Mr7Rt5l6nAVLiwmb3UyD0Xw=
Subject key identifier: EA:57:FA:79:D9:65:95:D9:C2:75:19:0F:A1:6E:59:A3:42:1D:FD:F4
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 603923F2D2DD6F4404B8DAD6B39272A80B3F511E
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663064373a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:37:34 +0000
ROA not before: Thu 26 Jun 2025 12:32:34 +0000
ROA not after: Thu 25 Jun 2026 12:37:34 +0000
asID: 396968
IP address blocks: 2a0f:6287:f0d7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:39:23:f2:d2:dd:6f:44:04:b8:da:d6:b3:92:72:a8:0b:3f:51:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:32:34 2025 GMT
Not After : Jun 25 12:37:34 2026 GMT
Subject: CN=EA57FA79D96595D9C275190FA16E59A3421DFDF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:b6:27:b8:df:76:30:07:c8:b9:a3:50:3a:
7d:3b:7a:ef:d0:67:f8:1f:fe:b4:cb:95:19:73:f1:
68:d2:58:69:56:0a:9f:9d:22:8d:37:9c:bf:14:00:
fe:7c:42:a3:02:37:0c:26:4e:4a:2f:d0:a5:4c:ca:
8b:bb:12:ed:e9:61:fd:86:c2:58:a9:2a:7d:b0:a2:
b7:f1:e8:ab:9f:94:43:03:04:f2:cf:7a:60:67:b8:
75:47:44:db:bc:3c:dd:ce:b7:03:9c:e3:75:cc:88:
6f:79:8e:02:d2:ce:9c:22:5c:d6:99:87:44:12:70:
7f:01:fa:8f:71:53:8e:d8:52:d5:df:f5:f6:05:2d:
92:0a:c5:4f:25:bc:1a:03:2e:7b:75:be:2f:b2:4a:
a8:a0:b0:8f:64:b6:01:f2:aa:47:59:3c:64:61:b8:
b0:47:5e:5c:72:3a:a4:ee:45:85:a7:3d:27:c9:2c:
2c:47:a3:ed:f2:b3:ea:74:20:7d:0c:8b:85:15:f8:
15:67:0b:5d:7d:25:96:87:84:f3:f8:0e:05:68:e1:
69:13:c6:ea:2f:89:cb:db:d2:22:be:e5:89:a3:d1:
ef:a8:bf:5b:8f:63:b5:1b:5e:8d:8c:07:58:39:75:
2f:9d:81:04:c1:8d:ab:aa:fa:b7:c9:24:9b:ff:2f:
95:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:57:FA:79:D9:65:95:D9:C2:75:19:0F:A1:6E:59:A3:42:1D:FD:F4
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663064373a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f0d7::/48
Signature Algorithm: sha256WithRSAEncryption
9d:cf:dd:6d:c3:b4:ea:f8:0a:71:00:f4:0e:73:a2:9a:8b:a5:
86:01:2c:53:3c:10:1e:dc:60:b9:45:06:29:4a:75:7b:ed:34:
ad:cd:a4:9f:e3:7e:8b:63:30:c2:52:5e:9b:4b:43:72:02:9c:
96:96:bb:e9:c3:ac:61:4e:75:d9:96:86:d5:8a:3b:c3:d9:63:
53:4e:13:bd:fe:15:9a:2e:fa:3b:74:6c:b0:8b:57:49:b4:84:
53:45:09:76:6c:9c:5e:5f:27:bf:86:29:86:a9:17:c5:61:7e:
69:ae:b0:88:83:d3:29:b7:87:98:b8:a2:ce:0f:11:9a:69:b2:
a3:22:18:0d:0c:40:d2:28:5a:df:09:1c:92:19:92:97:a0:82:
33:d2:2b:59:ff:79:57:24:1d:a7:d9:24:fb:91:df:07:63:89:
15:41:41:e8:99:d9:63:71:de:65:d6:90:7e:2d:d0:cc:37:fe:
08:18:2d:25:30:3e:7e:f3:d9:45:5f:c7:c5:d2:e1:fe:5d:00:
4a:1f:0c:7a:9b:01:12:61:99:61:0d:99:5e:ee:9d:d4:7e:bc:
f1:b9:c4:8f:7c:54:f4:79:0b:f8:aa:ad:e8:74:4c:60:79:dc:
6c:1b:86:00:7d:71:c8:37:b4:ac:71:67:74:c5:a0:e9:0c:cf:
de:ad:29:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:32:34 2025 by rpki-client