Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663466623a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663466623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 2R+04ufA3c1KU948zBHpD3ms1uES4nlxiQB7LbywfJk=
Subject key identifier: C1:B0:8C:EB:8D:AA:08:A8:C3:9C:EE:3D:25:04:32:84:29:88:E5:48
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 1A6A4E31C064336215EBB7C7BAE170AD86B71E75
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663466623a3a2f34382d3438203d3e20333936393638.roa
Signing time: Mon 30 Jun 2025 08:18:03 +0000
ROA not before: Mon 30 Jun 2025 08:13:03 +0000
ROA not after: Mon 29 Jun 2026 08:18:03 +0000
asID: 396968
IP address blocks: 2a0f:6287:f4fb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:6a:4e:31:c0:64:33:62:15:eb:b7:c7:ba:e1:70:ad:86:b7:1e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 30 08:13:03 2025 GMT
Not After : Jun 29 08:18:03 2026 GMT
Subject: CN=C1B08CEB8DAA08A8C39CEE3D250432842988E548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ba:64:e6:8a:14:e8:7d:da:81:ea:c4:0f:2d:
55:ed:d4:99:80:1a:73:1b:0a:25:b4:57:84:c7:5f:
3a:3a:c8:fa:6a:1b:ad:b8:ea:d7:52:60:ce:e5:c5:
3c:89:56:05:af:4c:12:7e:9d:50:bf:79:22:4a:aa:
f1:fd:02:28:65:37:da:37:1d:c9:bf:24:1e:2b:37:
09:1a:fb:7d:00:8f:ab:16:02:21:f4:f7:c0:45:04:
3c:2d:ad:82:7f:48:b1:01:d9:82:42:1e:37:c0:35:
e9:37:04:a9:9c:31:3f:0e:cb:53:50:d7:c9:44:4f:
1a:44:6a:7a:65:b6:bf:65:0c:0c:d6:d6:3c:a4:59:
c0:3b:b7:a8:fe:90:9e:a4:12:0e:0a:3d:d1:c5:47:
e0:e3:53:09:4a:36:90:df:ae:0e:f3:21:1e:4c:f1:
47:2a:26:80:2d:55:75:29:af:02:2c:79:17:33:d7:
cd:03:16:1f:e6:51:97:4a:c6:1a:33:14:22:95:ba:
64:b8:57:df:0e:ad:bf:55:30:09:b1:ef:90:85:77:
ce:e9:66:12:cb:e9:2f:05:02:bb:e7:c8:d0:ac:a1:
b8:6f:07:ad:99:d2:27:c3:7d:63:31:de:65:bf:d7:
0a:d8:2d:bb:ed:08:f7:76:1c:a5:60:c7:bc:1b:8d:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B0:8C:EB:8D:AA:08:A8:C3:9C:EE:3D:25:04:32:84:29:88:E5:48
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663466623a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f4fb::/48
Signature Algorithm: sha256WithRSAEncryption
5c:7a:42:61:78:13:7f:cf:fd:4a:85:6c:67:0b:df:db:43:a5:
31:f3:16:88:cd:85:9d:1e:00:f8:91:d2:88:b4:e8:1c:66:b6:
9b:d8:52:80:fe:84:d1:7a:2d:09:e0:e4:7b:1d:88:33:e1:45:
f2:d4:12:09:fe:6b:67:2b:73:e8:64:e0:12:44:85:a0:1c:5d:
d3:85:95:59:af:ff:a4:cb:f6:90:84:da:e2:f6:06:99:10:69:
a2:0e:32:50:77:47:e3:5b:70:a5:68:41:ee:f7:f0:75:1a:a7:
19:b5:a6:10:8d:7a:22:d2:23:02:96:1f:b0:41:3b:7f:c7:a1:
0b:d7:70:3b:e8:df:01:85:cf:32:d8:5c:d5:f5:7f:8b:8a:8d:
f8:75:53:c1:7c:b6:7a:5b:1e:3e:9b:e2:64:e0:42:63:c6:bf:
3d:58:be:dc:89:99:c7:6a:7f:58:10:da:d5:bc:66:99:9d:d4:
46:fc:df:cd:2b:c9:ae:16:5d:2b:5b:b5:74:c1:57:f9:3f:62:
48:7d:c8:97:9e:15:6a:18:e5:69:8e:e8:bf:ea:36:36:24:cf:
16:50:e8:14:ab:1f:da:e5:49:e6:9e:41:c5:8e:11:9a:73:4b:
13:a8:76:d2:95:81:eb:6d:a2:4c:e8:23:d3:09:10:67:a8:b5:
ab:96:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:20:08 2025 by rpki-client