Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663335363a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663335363a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: W0qChuqaMmjofLW468pEfIfqitRoeav4UwRwe+FKr/4=
Subject key identifier: D6:FB:CB:26:D0:56:7F:92:44:AF:55:94:40:3D:EF:35:D3:28:79:51
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 45297D45B22AC88476B0DBB27B8EF041BF5D3BF7
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663335363a3a2f34382d3438203d3e20333936393638.roa
Signing time: Mon 30 Jun 2025 22:25:11 +0000
ROA not before: Mon 30 Jun 2025 22:20:11 +0000
ROA not after: Mon 29 Jun 2026 22:25:11 +0000
asID: 396968
IP address blocks: 2a0f:6287:f356::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:29:7d:45:b2:2a:c8:84:76:b0:db:b2:7b:8e:f0:41:bf:5d:3b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 30 22:20:11 2025 GMT
Not After : Jun 29 22:25:11 2026 GMT
Subject: CN=D6FBCB26D0567F9244AF5594403DEF35D3287951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:04:8f:cc:e8:8b:64:74:a5:52:2a:1f:ac:
99:81:2f:ca:cd:f5:fa:6e:80:09:0d:99:e9:c8:2b:
d0:34:0d:80:be:63:eb:00:2d:ec:0d:cd:a0:06:2f:
23:f2:28:4a:07:0b:d5:a3:4a:26:27:ba:e5:4e:d6:
a1:f5:82:fb:d4:ec:24:cf:9b:4e:53:33:05:60:4a:
6c:fc:88:88:19:26:7f:05:af:79:ab:10:be:69:71:
75:aa:3e:9d:0c:7f:7f:14:ae:02:1e:41:30:26:94:
7f:4b:fc:cd:c6:fd:e3:c1:6f:1a:93:97:35:e6:46:
e7:b7:15:40:f2:86:c0:76:26:e7:89:e5:31:44:67:
80:e8:43:46:5b:95:68:cf:1e:72:d9:04:c4:d7:c1:
36:9e:4d:6b:c4:8f:4b:5b:1d:cb:c1:93:05:bd:25:
f3:50:65:19:15:31:f7:5d:05:e3:21:81:c6:b0:2f:
65:0a:55:9f:8b:63:94:cb:d4:43:0f:51:a6:7a:7e:
ba:d6:15:0e:cb:8c:54:cb:82:bc:65:69:b9:8d:38:
91:b2:bc:88:7c:a0:3d:81:81:5a:23:99:53:af:ce:
68:76:d4:7d:30:1c:b0:f5:7d:02:c5:c2:27:bd:82:
fc:ab:30:07:49:ee:69:67:03:19:7a:8d:37:ce:b0:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FB:CB:26:D0:56:7F:92:44:AF:55:94:40:3D:EF:35:D3:28:79:51
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663335363a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f356::/48
Signature Algorithm: sha256WithRSAEncryption
8b:29:e4:6a:07:07:60:00:eb:e6:1c:63:75:bc:e4:d1:c6:63:
af:77:08:4d:54:6c:a5:f9:ce:6c:cb:cd:4d:e9:77:da:1b:55:
0a:85:a3:28:8f:4b:e2:34:ac:45:10:b4:03:92:a9:20:6e:12:
d0:a1:a5:07:f8:04:bd:7b:98:a7:d8:e2:46:bc:3e:4c:94:61:
14:17:d2:5c:76:10:6f:ce:78:79:65:5b:b6:33:d6:0e:74:7d:
32:e5:d8:4e:e5:85:c9:74:68:38:03:ca:31:80:bf:ec:56:be:
87:92:da:35:14:7f:db:82:75:a6:25:14:c4:9c:16:a9:cf:40:
a7:65:48:00:6e:6a:05:e2:ed:e3:3a:28:13:19:aa:44:59:5c:
8a:15:ac:cc:90:a0:f8:4d:b8:46:9c:9f:77:97:7d:74:d6:24:
4d:e5:dc:62:ab:ea:30:64:38:b3:d4:0a:09:92:07:84:38:6d:
2d:ea:6b:5a:74:66:3d:44:67:50:08:a0:4c:e0:8e:a7:e7:1f:
46:1b:ed:d5:0f:08:58:25:cc:8e:f9:e4:aa:78:29:7e:83:b9:
b2:1f:bd:ce:36:e1:bd:94:17:21:43:f7:70:e0:07:69:c0:e1:
e1:d3:12:63:83:87:94:10:1f:03:d2:81:dc:68:e9:46:77:42:
4a:80:1d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:36:19 2025 by rpki-client