Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663135393a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663135393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: FlWgUjsEfq3Og5/SKUJpG2ZhmlXht2uTSLj+XZAfCnM=
Subject key identifier: F3:CE:FC:21:58:7D:A7:9C:E7:92:A4:AC:58:3E:FA:51:79:9B:3E:6E
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 59F2C024DACC7941A56DDED1153668F589BA3663
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663135393a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:37:35 +0000
ROA not before: Thu 26 Jun 2025 12:32:35 +0000
ROA not after: Thu 25 Jun 2026 12:37:35 +0000
asID: 396968
IP address blocks: 2a0f:6287:f159::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f2:c0:24:da:cc:79:41:a5:6d:de:d1:15:36:68:f5:89:ba:36:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:32:35 2025 GMT
Not After : Jun 25 12:37:35 2026 GMT
Subject: CN=F3CEFC21587DA79CE792A4AC583EFA51799B3E6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:c5:5e:30:74:77:2b:57:14:30:aa:ef:a6:
d6:7d:23:4d:48:a3:84:89:a3:3d:44:f1:ed:00:9d:
fe:1d:de:d4:94:54:60:47:4e:dc:2e:84:c0:5b:34:
72:4a:6f:90:e4:c3:0e:42:db:92:b2:c2:c6:73:10:
95:b7:ea:84:ba:39:72:8d:41:c8:d2:1b:e8:b0:25:
d1:d7:a6:c6:bd:df:ee:08:18:c6:d5:a0:07:af:40:
73:42:a3:de:d7:97:60:93:32:ea:a8:68:b5:6a:b4:
82:3d:08:d4:da:65:dc:3c:46:c5:eb:3d:2e:e2:d7:
6b:b8:36:93:ea:fd:d5:c2:be:41:78:3a:7b:03:33:
11:91:d9:25:f2:d5:25:89:27:44:ab:35:cf:01:15:
db:2c:42:66:4e:bc:f0:64:07:78:12:8a:cd:ec:38:
67:a3:3f:b5:ed:88:48:d7:97:c2:e4:7a:53:dc:64:
b4:3d:f5:ef:5b:7a:8d:91:08:3c:7a:7c:0e:32:ec:
8c:23:93:69:83:93:a1:16:6c:55:8e:4f:8b:24:66:
69:37:6a:14:c9:34:2d:a7:e1:02:b5:85:d2:d5:73:
de:13:c3:3a:ad:c7:84:46:0d:15:b0:b0:f1:e3:a0:
f5:e6:af:47:64:4b:6a:c0:b3:44:31:0c:94:87:2f:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CE:FC:21:58:7D:A7:9C:E7:92:A4:AC:58:3E:FA:51:79:9B:3E:6E
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663135393a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f159::/48
Signature Algorithm: sha256WithRSAEncryption
46:a2:a6:69:1f:a0:06:fd:9d:45:b0:4f:8b:e7:70:45:ec:37:
c5:3b:05:70:4d:51:90:f5:6f:48:d2:9c:c9:5f:4a:8a:1c:87:
ab:57:00:5a:e4:50:e3:5a:6f:d9:02:27:99:74:7b:c4:8e:31:
7e:d8:03:85:87:24:24:b4:30:fe:97:54:c9:db:af:f4:36:e5:
2d:70:13:68:c0:3f:d6:64:8c:dd:ae:f8:35:3e:f2:dc:5a:48:
e9:17:57:0d:34:78:c1:50:15:22:24:60:33:f0:d4:de:f7:1c:
f2:3d:0b:46:69:58:66:9d:be:dd:12:60:1b:33:00:05:aa:f5:
32:1c:ea:1a:5d:af:ce:84:8f:a7:26:d7:3d:65:35:ce:53:90:
db:90:bc:25:b6:47:dd:0b:4f:9d:55:f1:bf:7c:bf:c2:44:5f:
88:5a:64:22:39:12:37:df:f0:c5:9e:b3:f4:08:8b:06:25:71:
3f:5b:fa:c8:ab:9f:a6:89:8d:f6:7a:e6:f9:29:c5:45:55:50:
6f:0f:25:e6:fc:6b:cc:3a:ce:ce:16:49:92:8a:1c:49:ae:76:
5c:f9:61:7c:ab:96:b3:9c:45:de:01:ab:eb:f8:27:4a:6d:b1:
61:62:e5:6c:2b:01:8e:73:72:36:00:81:94:16:6a:de:2a:54:
af:cc:e7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:46:25 2025 by rpki-client