Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663466643a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663466643a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 2agsWiocudUCRtpJiaIfkGKlOSckQN1VlPIo1O/MxBY=
Subject key identifier: 51:9D:DB:38:0F:71:73:B4:E8:92:A1:31:F5:80:CE:10:D0:03:6F:B0
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 1092A59A86D74AD755750F16E41F927A9C0BABCD
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663466643a3a2f34382d3438203d3e20333936393638.roa
Signing time: Mon 30 Jun 2025 22:25:12 +0000
ROA not before: Mon 30 Jun 2025 22:20:12 +0000
ROA not after: Mon 29 Jun 2026 22:25:12 +0000
asID: 396968
IP address blocks: 2a0f:6287:f4fd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:92:a5:9a:86:d7:4a:d7:55:75:0f:16:e4:1f:92:7a:9c:0b:ab:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 30 22:20:12 2025 GMT
Not After : Jun 29 22:25:12 2026 GMT
Subject: CN=519DDB380F7173B4E892A131F580CE10D0036FB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:8c:8f:7d:21:70:e0:bd:94:31:81:1f:3b:
87:9b:83:ad:12:fe:b8:26:7e:3f:8c:eb:59:89:d3:
f0:31:a2:c4:67:c7:ad:37:2a:5c:54:ab:dc:e9:59:
45:90:b4:d7:16:65:62:69:91:49:f4:9a:7f:a0:82:
d7:53:5e:24:46:fd:36:b0:c6:38:f2:c7:6a:6a:de:
88:b3:e4:d8:4f:a7:11:92:13:51:c2:42:c3:09:56:
17:0d:ab:f5:b8:ee:61:80:ae:51:d3:47:29:ac:78:
ec:df:1f:04:51:78:8a:39:6b:cf:3c:c6:4f:9d:8f:
69:94:e6:d8:a5:e6:cc:df:17:d6:3d:95:11:0b:5e:
21:1d:ff:6c:ed:14:cf:47:e7:24:29:7a:09:e1:ed:
f6:18:d7:1c:b2:56:62:e2:34:67:20:07:64:76:aa:
f0:26:00:69:0b:4c:c4:ad:6e:4f:e7:3a:f5:d8:04:
56:b5:d9:f2:9f:d5:f6:c1:97:24:98:b4:27:a8:a1:
01:bf:08:28:1a:dd:40:c1:26:e3:56:17:5b:50:80:
58:fd:4f:f9:c2:63:c4:f6:5a:97:d3:02:c1:b7:4c:
ec:47:a1:fb:55:44:71:23:c2:1e:04:f3:1d:23:8d:
5d:13:28:33:bc:69:53:48:87:21:3a:34:c0:b9:88:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9D:DB:38:0F:71:73:B4:E8:92:A1:31:F5:80:CE:10:D0:03:6F:B0
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663466643a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f4fd::/48
Signature Algorithm: sha256WithRSAEncryption
aa:69:18:85:48:f6:97:b5:8d:0d:2a:0b:b3:50:80:29:5a:45:
2b:d6:5b:fa:22:4f:17:45:14:a0:10:1c:8d:0a:4a:cf:11:96:
6b:b1:1e:2e:77:a8:a2:59:51:25:28:9b:64:ab:e6:28:8e:01:
25:55:e9:0e:cd:56:06:d5:84:de:ae:0f:1f:4f:5e:47:57:25:
1a:b9:0a:bb:85:43:cd:bf:be:d9:3c:00:70:39:db:28:a9:75:
06:57:24:8d:38:82:e0:b3:ad:90:07:e7:2c:60:64:69:7c:53:
f0:9d:ad:cf:4d:87:f0:d3:b2:2b:ef:de:b7:bd:13:ad:0e:a1:
20:5e:21:b2:0c:83:dd:0e:40:2c:b1:72:ad:6e:0f:59:fb:00:
54:f9:96:57:a1:0a:8d:39:b7:c1:91:e7:8b:73:be:2e:b6:ff:
37:fb:0a:4d:b4:3f:01:c3:b1:f7:d6:70:5f:e5:be:48:f2:ab:
ab:73:7c:4a:d2:23:11:99:57:63:eb:0b:f7:a6:91:06:15:83:
7b:4d:e1:c4:ff:64:c2:5e:08:f3:18:e5:ee:34:dc:fe:d5:77:
73:83:41:16:34:a7:89:b6:bd:19:22:12:a4:67:84:60:37:15:
5c:94:9c:ba:58:d0:d7:33:85:57:2a:50:18:de:38:a9:62:43:
d9:fe:56:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:26:42 2025 by rpki-client