
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: SMjeTLRkPpBtCJb54Yt4gA2gmDK+twPXlf4cGGXI+fI=
Subject key identifier: 2D:70:32:AF:3E:9A:33:24:1D:DA:AE:E3:0A:A5:08:B7:F3:D7:BA:58
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 195F2CC3E76E47899133182DCC8E742656618226
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 04:18:03 +0000
ROA not before: Tue 01 Jul 2025 04:13:03 +0000
ROA not after: Tue 30 Jun 2026 04:18:03 +0000
asID: 396968
IP address blocks: 2a0f:6287:f278::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:5f:2c:c3:e7:6e:47:89:91:33:18:2d:cc:8e:74:26:56:61:82:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 04:13:03 2025 GMT
Not After : Jun 30 04:18:03 2026 GMT
Subject: CN=2D7032AF3E9A33241DDAAEE30AA508B7F3D7BA58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:bc:b5:9c:d4:77:51:6a:03:a9:97:13:7c:
0f:b3:9e:ed:f4:93:f6:bf:3b:a5:07:cb:1b:47:93:
13:e1:03:d4:73:4f:9d:0c:84:3f:30:7e:a1:f2:c0:
cd:e3:26:2d:5e:43:f6:7f:b0:4d:56:12:96:a8:6e:
70:cf:6a:34:30:de:0c:8d:c4:78:51:65:8f:5b:06:
67:ba:92:95:d3:69:dd:33:3f:88:f5:a2:29:23:50:
88:3f:74:38:a9:ba:69:df:57:03:d4:f8:45:98:3a:
50:c6:fc:63:9d:27:76:e4:54:0e:ac:73:8e:e7:ca:
d0:15:2a:69:73:1c:5c:99:d9:59:32:9d:93:39:f6:
df:fc:14:cb:3c:67:e7:7b:c2:2b:21:40:99:fe:76:
2b:5a:76:ff:b2:8a:27:dc:14:b1:df:a3:ee:f4:44:
6b:e3:3d:48:8f:da:fa:81:c3:e9:ad:58:00:ee:ec:
21:a6:d9:37:35:32:27:62:86:87:38:70:58:c5:a1:
9a:59:55:0e:99:2e:7d:db:89:53:44:2c:7b:18:69:
19:40:b3:b6:b3:56:a8:c6:78:63:b4:d1:11:2f:7c:
bb:93:10:1a:be:e2:bd:d2:b6:e5:84:00:a1:b3:b8:
db:69:4a:fa:6f:b6:57:12:fe:cc:0c:49:51:c6:e4:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:70:32:AF:3E:9A:33:24:1D:DA:AE:E3:0A:A5:08:B7:F3:D7:BA:58
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f278::/48
Signature Algorithm: sha256WithRSAEncryption
aa:35:be:1c:47:26:bb:82:7d:f7:89:04:13:87:76:1f:b2:1a:
b5:84:f9:9a:b0:84:15:f0:62:72:f6:b5:08:e7:1d:52:48:cf:
c0:8b:71:50:1d:25:b8:6f:22:5d:de:fc:e4:49:2b:88:8d:4a:
99:48:4d:62:2f:4c:b6:4a:af:23:4e:60:f7:32:ce:7c:c2:60:
ea:5a:72:a4:3a:5a:d3:93:6f:ef:1f:c3:e0:e5:b4:d8:10:1f:
83:b8:49:3d:f3:8e:e2:b5:57:50:56:b7:19:56:43:56:c7:3e:
04:51:0a:e2:ad:87:1e:c7:41:ed:e5:ae:4b:ee:9a:f8:f1:0f:
99:3a:41:2c:8d:66:d3:1e:0b:fb:55:c7:eb:aa:be:10:0c:3b:
42:d6:a8:63:4b:3c:a3:b4:0c:f0:53:34:29:20:b5:44:b7:98:
e3:26:db:e5:41:44:33:c0:63:cf:a3:70:ef:cc:12:99:49:31:
a9:ce:0d:00:6b:e1:dc:3b:69:05:02:ae:8e:44:c3:ab:ab:9f:
86:dd:36:6a:79:84:70:63:f7:34:8a:ac:bf:42:34:12:31:a7:
9f:11:73:cc:2b:04:10:50:2b:12:da:12:87:18:a5:d9:5e:c4:
1f:dd:08:dd:d8:79:2b:22:b5:e5:9f:f5:11:be:11:d0:31:7e:
1e:e8:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:35:41 2025 by rpki-client