Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663162623a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663162623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: WpE8d1zoArqqJbj0aDzcJ6rlnbj6Etj8Kgykx/W1yIg=
Subject key identifier: 47:89:F5:20:7E:03:CA:27:68:0E:BC:70:F4:15:AB:20:C8:38:1F:B3
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 2C3B7F7A4E9BDCED6DC2E144E28A69828837AE2D
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663162623a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:55:57 +0000
ROA not before: Thu 26 Jun 2025 12:50:57 +0000
ROA not after: Thu 25 Jun 2026 12:55:57 +0000
asID: 396968
IP address blocks: 2a0f:6287:f1bb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:3b:7f:7a:4e:9b:dc:ed:6d:c2:e1:44:e2:8a:69:82:88:37:ae:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:50:57 2025 GMT
Not After : Jun 25 12:55:57 2026 GMT
Subject: CN=4789F5207E03CA27680EBC70F415AB20C8381FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:c6:7b:2d:6a:37:9b:fe:9d:ec:dd:e6:7e:
87:f4:f3:00:6d:d8:c0:b9:a6:9d:55:c8:9b:5f:3a:
16:a6:49:51:81:1a:a8:7e:4f:ff:e7:0d:3a:74:55:
5a:cc:e3:54:f4:f4:c0:55:10:00:27:29:cd:43:52:
69:8f:bb:df:96:50:1d:b7:71:e8:e2:2a:1a:f0:02:
b9:66:3e:cc:40:8d:30:5a:5e:14:34:98:ed:32:f8:
00:6a:20:f3:bf:aa:fa:85:b8:79:d2:4d:40:4d:93:
b2:ac:76:11:f3:9c:24:d3:10:1a:6f:c1:9b:d7:c9:
8e:7c:d2:df:07:ed:3d:15:3f:42:d8:c2:74:77:6f:
bc:7f:a8:41:44:d8:6a:bd:2b:6e:cb:0b:1e:35:74:
07:90:31:cd:7f:3c:4d:ec:cb:b0:6e:2d:8c:e9:f3:
af:36:87:82:9e:88:37:bc:5b:70:09:15:be:fd:ca:
9e:72:17:70:ab:92:58:56:a0:3f:e1:ee:1b:8a:01:
3c:55:50:67:7e:7d:dc:5d:5f:dc:a0:d1:b6:b3:0b:
a3:12:02:f3:de:5c:b5:d8:04:9a:41:4d:63:8a:37:
a8:29:43:a0:a4:3a:08:09:90:48:63:60:00:08:02:
ed:de:a4:b2:ba:53:20:d0:e0:08:1c:55:88:af:86:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:89:F5:20:7E:03:CA:27:68:0E:BC:70:F4:15:AB:20:C8:38:1F:B3
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663162623a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f1bb::/48
Signature Algorithm: sha256WithRSAEncryption
42:c9:7d:46:22:c6:f2:98:e1:5c:da:33:9d:4a:19:bb:6c:2c:
f0:a1:78:63:52:50:c8:8b:3c:ef:00:45:86:84:42:b2:57:cc:
85:72:56:da:10:9a:e9:ca:a5:b4:f1:3d:b9:bb:5e:07:e4:38:
cc:21:4f:ba:1a:0c:15:3b:7d:01:e6:02:49:1a:2c:3a:d9:06:
1b:a6:c3:3b:cb:a6:bf:07:2e:e8:79:2e:c5:8a:23:a5:4e:5f:
68:ee:22:8e:e2:aa:ef:0c:95:23:b6:0d:38:fa:ab:8f:b1:ec:
86:6f:b0:64:bc:33:ae:ee:6e:47:9b:da:78:80:54:74:e8:88:
0c:71:82:41:0b:d6:b9:a3:fd:3e:38:b6:b5:99:28:b3:c1:16:
21:29:48:9c:09:2a:67:26:d5:75:d2:d2:79:4d:5f:c1:61:f1:
70:f5:21:aa:4a:9f:21:55:47:a6:e2:3e:d3:07:d6:05:40:3a:
f6:46:c8:7a:9b:1e:13:4f:d8:e7:91:a6:f9:a6:23:5d:0a:cc:
63:0d:39:6b:d5:d3:8f:57:98:fe:0e:28:c8:e7:71:87:4c:36:
d0:f4:be:d9:a2:c0:4d:05:b5:4e:b4:24:53:4f:10:84:7a:f7:
46:fc:c1:27:85:3b:2e:f9:d6:71:f5:5c:70:69:3d:95:65:83:
f8:cb:ae:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:40:32 2025 by rpki-client