
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 0yb6iLjNvU7a85FTYysoN+gEETHYkXEpO9VD17JHnTk=
Subject key identifier: C3:72:7E:21:CB:30:C6:D5:FE:88:C5:28:85:26:8D:B5:9F:C9:BE:4D
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 1C5F5C3846AA9D0E36C46B7D840CFD0A7FDB13DB
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 03:45:31 +0000
ROA not before: Tue 01 Jul 2025 03:40:31 +0000
ROA not after: Tue 30 Jun 2026 03:45:31 +0000
asID: 396968
IP address blocks: 2a0f:6287:f43c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5f:5c:38:46:aa:9d:0e:36:c4:6b:7d:84:0c:fd:0a:7f:db:13:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 03:40:31 2025 GMT
Not After : Jun 30 03:45:31 2026 GMT
Subject: CN=C3727E21CB30C6D5FE88C52885268DB59FC9BE4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:6c:bb:cb:75:0d:e8:69:c3:88:ef:93:0c:
5b:c2:4c:20:5e:83:54:df:20:91:1f:ab:1a:4d:30:
c3:c3:73:55:1c:9f:42:3e:38:16:a3:39:f5:21:e4:
b6:57:cf:26:0d:f0:24:63:8b:e0:b9:a2:71:78:e1:
24:d9:d9:2b:6a:48:05:a3:75:50:2f:41:5e:44:cd:
c6:2b:a7:6e:c0:15:44:f3:95:39:fe:fd:6c:f7:c4:
97:d3:16:4b:2b:a7:3e:25:ae:d0:8d:9e:8d:9a:cd:
be:26:50:13:2d:a2:47:b2:6b:d2:b0:e6:65:15:f6:
b4:12:fe:70:9a:2f:cf:6d:42:07:df:a3:34:8a:b3:
80:06:83:fd:05:aa:df:fc:95:18:7b:8d:bd:87:d2:
14:cc:58:9e:df:95:7e:16:a9:ef:f2:80:e2:ad:f1:
e2:36:27:c3:32:97:65:fb:0e:99:b0:43:a3:a8:d7:
06:55:42:cf:22:f2:9b:66:6b:c9:91:db:a5:39:3e:
e3:02:b0:71:c7:88:ae:d1:1d:9a:26:fe:7f:71:c1:
0b:76:8d:05:4b:59:b4:ea:16:88:b9:5f:e8:72:aa:
82:e0:4c:90:48:96:82:ae:40:a1:b1:5e:5d:cb:63:
46:c0:8d:38:36:48:be:b9:99:9a:83:a9:3d:db:d0:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:72:7E:21:CB:30:C6:D5:FE:88:C5:28:85:26:8D:B5:9F:C9:BE:4D
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f43c::/48
Signature Algorithm: sha256WithRSAEncryption
a7:06:13:71:bb:7d:00:b4:4c:e3:23:ff:4d:6a:2c:b2:63:49:
2a:45:cd:4d:ad:0d:3d:1e:82:7e:08:3e:a5:78:87:0e:7b:10:
15:e4:96:b3:19:f3:ce:5b:14:ed:35:45:30:f8:79:af:c7:93:
0b:91:fa:b2:09:4f:77:5b:04:b6:01:1c:fb:28:04:c5:be:46:
7a:a3:41:4c:c9:c9:a6:a3:74:f3:66:fa:1f:01:eb:3d:f3:4b:
63:c8:42:cc:4b:26:a7:92:a5:42:60:a0:d5:37:24:53:4d:71:
be:81:dc:85:44:b5:d1:9c:c8:25:21:1b:e5:9b:ec:63:d8:5e:
52:bf:a8:9d:49:a6:c2:a1:4a:94:d0:b9:bb:a0:6c:e8:6c:e5:
c1:2e:33:a9:45:8a:1a:53:b5:24:dd:21:d6:95:ea:55:8b:f1:
92:3f:23:65:df:cb:a0:d2:e1:c3:d1:7b:6c:a8:98:9a:73:78:
3c:46:e1:e6:38:07:46:78:13:c9:a8:b9:50:6b:9d:29:a8:1f:
3a:d1:00:44:0a:5e:56:c9:c4:91:2d:4b:bb:78:18:79:8c:e7:
22:d7:6c:86:68:08:1e:ad:b9:6e:c3:41:f2:c9:02:73:83:e9:
cc:8e:10:3d:1c:e8:33:27:24:ad:57:1d:72:aa:01:5e:29:eb:
76:af:84:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:17:52 2025 by rpki-client