Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663564313a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663564313a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: K+xIwurNDApIPTOlJ+RJQk2aVbFjv04yCtOO7MqjGfE=
Subject key identifier: 7C:70:D3:17:71:F9:F1:79:82:D2:BF:B8:23:C0:69:19:84:77:59:FB
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 057631BCD3E999310285785DA9048DAAF179A17D
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663564313a3a2f34382d3438203d3e20333936393638.roa
Signing time: Mon 30 Jun 2025 08:18:03 +0000
ROA not before: Mon 30 Jun 2025 08:13:03 +0000
ROA not after: Mon 29 Jun 2026 08:18:03 +0000
asID: 396968
IP address blocks: 2a0f:6287:f5d1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:76:31:bc:d3:e9:99:31:02:85:78:5d:a9:04:8d:aa:f1:79:a1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 30 08:13:03 2025 GMT
Not After : Jun 29 08:18:03 2026 GMT
Subject: CN=7C70D31771F9F17982D2BFB823C06919847759FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:43:7f:80:9f:12:92:fe:78:a8:31:cd:39:
85:3e:3c:7a:23:34:53:8f:fd:51:f4:38:98:49:49:
8d:d0:14:94:c3:96:2c:29:8d:79:dc:04:8a:ef:52:
af:f2:6a:ee:f6:1b:f9:21:63:aa:b9:b5:0a:3b:83:
e8:89:3a:ba:33:3c:f9:23:70:bd:fe:4f:f4:0f:02:
2a:d7:46:1c:76:5c:c7:c5:fe:6a:a7:4b:6d:3d:81:
92:c8:95:77:c6:64:f3:ac:64:e0:40:42:8e:69:85:
b3:f8:22:4c:fb:86:9f:9e:df:95:0d:39:44:b4:36:
1c:75:66:32:1a:5a:62:57:2e:bf:3a:de:9a:11:e6:
6d:60:98:b6:d7:1d:b6:83:c6:6a:c3:7d:e8:66:c8:
73:00:d2:ab:9d:f4:ce:e9:24:28:14:da:67:79:f4:
f9:88:ee:de:3e:1c:cb:b1:76:51:b1:49:90:46:03:
2e:fe:cc:ba:98:e4:7e:2e:ae:6f:41:24:4b:10:84:
4e:c9:83:99:2e:94:05:75:1b:83:7f:1a:4b:5e:33:
7e:d2:9d:74:87:e1:31:f1:12:39:56:9f:91:d2:d1:
7e:82:49:db:41:57:a0:a1:b9:6f:1e:b5:84:b7:f0:
d6:94:ca:a5:72:c4:fb:c5:18:83:61:62:aa:04:43:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:70:D3:17:71:F9:F1:79:82:D2:BF:B8:23:C0:69:19:84:77:59:FB
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663564313a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f5d1::/48
Signature Algorithm: sha256WithRSAEncryption
b4:ae:63:f5:50:bc:0e:63:a3:cc:58:68:c3:1a:5d:24:5f:ad:
c3:78:0c:b2:fa:b0:24:81:23:27:7a:64:cb:a6:3b:3f:77:97:
7a:2f:dd:d3:ad:97:01:7d:b6:38:45:c5:a8:e9:5d:36:d1:31:
ea:27:61:83:f3:e6:11:03:19:4d:eb:fc:2a:aa:7e:f1:a1:84:
9a:b9:f0:50:df:76:23:09:cd:41:1f:b4:76:f2:1e:01:d3:90:
3b:f6:bd:1d:6f:af:99:06:57:1b:31:14:03:a1:99:33:4d:ce:
5f:b9:18:56:51:5b:e9:cf:ae:c1:42:16:bf:57:16:a2:ae:5a:
27:15:96:a2:81:3f:be:b6:e6:4d:99:fd:7b:b7:2f:db:d3:46:
10:43:fd:83:12:a7:f4:45:fc:6d:2b:98:ad:cf:4b:f0:c5:c1:
04:c4:14:81:e4:3c:78:ba:f4:36:11:00:1b:e5:af:bf:1b:6f:
c0:23:a6:1f:14:78:2e:d5:8b:dc:d8:a1:18:a9:5f:80:d2:4e:
75:5c:73:76:ec:3e:d6:0d:20:f6:39:5a:a6:02:03:be:e2:f9:
4d:bd:ef:3d:95:e2:98:46:e1:30:15:fc:14:2a:6d:72:d4:c7:
8b:14:7c:b9:db:d2:79:4d:c7:c1:63:94:93:3b:e1:55:db:bd:
76:51:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:24:01 2025 by rpki-client