Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663537353a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663537353a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: ODanryt6ycGYxlkDoIxYUyBz9bzlzDqdAbtaLirPKHA=
Subject key identifier: 17:E4:3A:16:3D:65:A1:E8:0B:A8:05:40:5A:93:79:41:7C:02:ED:99
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 07C7FA436C9D53FBD5E167C364E000A095BA32DB
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663537353a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 13:25:16 +0000
ROA not before: Thu 26 Jun 2025 13:20:16 +0000
ROA not after: Thu 25 Jun 2026 13:25:16 +0000
asID: 396968
IP address blocks: 2a0f:6287:f575::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c7:fa:43:6c:9d:53:fb:d5:e1:67:c3:64:e0:00:a0:95:ba:32:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 13:20:16 2025 GMT
Not After : Jun 25 13:25:16 2026 GMT
Subject: CN=17E43A163D65A1E80BA805405A9379417C02ED99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:40:b5:e5:20:3e:97:4e:13:d2:54:f7:3f:
3e:87:7c:bb:16:84:96:41:ea:fc:a9:05:c0:7d:9d:
03:d4:f5:a0:99:3d:ab:06:fe:9f:19:67:d0:96:d7:
20:33:eb:9f:1a:49:79:5e:0a:d6:c6:54:eb:52:14:
72:36:56:95:0a:09:b4:af:b6:f2:ab:17:94:e7:95:
1e:2b:9f:74:c9:58:37:cd:1f:ca:6a:05:5f:03:63:
02:73:6d:08:c9:78:79:25:35:43:e9:30:f9:3f:8f:
28:b0:b4:70:30:0f:66:8b:a4:f1:1a:78:c2:3e:4b:
2f:32:fe:b6:99:f7:d0:45:bf:6b:50:ee:90:00:8b:
49:f9:c9:7d:e0:31:ce:cd:2e:80:5c:54:07:f7:e5:
6d:22:2b:05:f0:80:61:c6:a6:32:2b:4a:60:c0:73:
7d:18:04:8c:ed:c0:c0:5b:ea:17:94:91:c4:a4:48:
a3:4e:49:79:e1:f3:4f:2c:ad:67:a7:96:f6:6b:5b:
73:c2:f1:fd:21:21:48:f9:43:28:59:fd:5c:e4:53:
56:e7:15:78:61:80:53:dd:ab:22:a7:d6:8e:bb:89:
1d:11:db:cc:9d:5c:05:4d:66:a4:28:2e:34:7c:af:
56:41:29:43:ec:6f:05:5d:e1:e9:98:1c:39:62:9d:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E4:3A:16:3D:65:A1:E8:0B:A8:05:40:5A:93:79:41:7C:02:ED:99
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663537353a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f575::/48
Signature Algorithm: sha256WithRSAEncryption
41:ea:a4:b6:21:74:6d:27:96:0e:eb:3c:db:81:ba:a8:f2:0c:
e4:4d:7b:e2:d1:d1:0e:a1:f0:a5:12:91:5a:58:ba:d7:c9:74:
99:81:30:99:a4:c9:90:36:88:90:ce:18:ac:10:af:54:42:31:
b4:e9:b7:1f:fa:51:6c:c0:46:38:97:7e:39:3f:f8:50:31:4b:
c3:4c:b0:74:5f:10:b4:24:d9:78:10:3a:ce:ce:ef:e7:3d:24:
db:a1:9f:21:b5:f2:4e:a3:03:06:35:5c:c6:3c:e7:61:c7:f9:
32:d7:aa:5f:a3:89:60:5d:13:ae:10:5a:07:5c:46:c5:a4:98:
3a:a0:77:f0:56:a0:a3:68:5a:ec:62:f9:cf:72:36:e4:d4:4b:
1b:74:79:d1:66:12:04:15:a5:2d:f9:3b:03:be:4f:3a:e2:bc:
a1:e0:64:e1:9e:55:cc:5d:e6:0a:81:c6:c2:3d:93:45:1c:3e:
84:97:85:7a:34:67:4f:bc:d5:cc:c7:b6:20:2b:c1:ba:52:39:
38:9f:55:a9:86:3f:64:e9:e4:5e:25:da:ab:5f:49:bf:65:29:
dd:9b:6a:16:1f:99:c5:7d:b9:26:f9:1f:89:bd:08:2f:1b:22:
33:8e:a0:27:4e:3e:0d:bf:cc:d1:80:44:ea:cd:79:6b:f2:d4:
99:76:e6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:30:21 2025 by rpki-client