Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663639363a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663639363a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: tP3bn1ASON373B3bnTZN+VRuMy3aF7UrbIJsVKFAn3s=
Subject key identifier: 39:D6:0B:A3:59:1F:B2:70:1D:65:4F:29:05:98:96:A9:A3:7B:9A:41
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 4A43E35AF83CF8114356F3FEABBAC1B619417ED6
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663639363a3a2f34382d3438203d3e20333936393638.roa
Signing time: Mon 30 Jun 2025 22:32:03 +0000
ROA not before: Mon 30 Jun 2025 22:27:03 +0000
ROA not after: Mon 29 Jun 2026 22:32:03 +0000
asID: 396968
IP address blocks: 2a0f:6287:f696::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:43:e3:5a:f8:3c:f8:11:43:56:f3:fe:ab:ba:c1:b6:19:41:7e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 30 22:27:03 2025 GMT
Not After : Jun 29 22:32:03 2026 GMT
Subject: CN=39D60BA3591FB2701D654F29059896A9A37B9A41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:f6:50:32:a9:9e:29:9a:6e:c0:5a:a6:ae:
74:3a:ea:88:e0:56:f0:e3:ea:cb:d4:cb:69:35:31:
73:ba:86:b5:49:59:44:e5:fc:0a:06:4b:e0:07:45:
8c:e9:10:7c:f2:4c:35:0c:ef:fc:28:2e:b5:ba:e0:
52:ff:b1:5d:a8:ff:4d:5e:6a:ce:b6:1a:53:20:6f:
b0:d5:d4:b8:e5:51:a1:8c:f7:b9:6d:1b:dd:6a:eb:
cc:fd:39:af:e2:77:d9:66:24:ad:40:73:ff:a3:9b:
ce:ba:6a:45:17:eb:0a:bb:1f:05:37:9f:5e:f0:1d:
de:f0:30:f8:a5:46:fe:c9:c3:77:3b:6f:ce:3d:9b:
8a:52:90:a7:27:79:c9:d0:a3:77:77:7b:4b:1b:ba:
26:24:5d:9b:a7:75:e2:75:be:b7:31:d1:b9:15:b2:
7e:2d:f7:75:ec:45:7c:e5:d5:3d:c8:13:a2:55:8c:
b5:41:13:12:c5:64:57:ac:f2:c7:1c:6f:ec:9f:00:
55:6b:a9:31:22:cd:be:2a:5e:84:64:5c:95:24:87:
88:80:84:af:20:76:33:97:15:fd:99:94:7d:e4:1f:
32:1f:8c:54:e8:9e:bd:28:76:b4:24:8d:ff:7e:4c:
df:eb:46:66:47:a7:42:7b:1d:0b:c9:7b:63:7f:0a:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D6:0B:A3:59:1F:B2:70:1D:65:4F:29:05:98:96:A9:A3:7B:9A:41
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663639363a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f696::/48
Signature Algorithm: sha256WithRSAEncryption
2c:01:23:30:94:26:cf:29:17:a1:26:9f:a9:6c:e0:79:c0:65:
22:e9:1e:67:e7:2e:d0:76:26:ec:c5:89:a7:bd:a0:bb:b9:87:
d3:4e:6f:71:f4:86:12:c8:66:d2:18:3f:29:78:21:ac:51:a7:
82:5d:b6:3c:95:40:cd:2e:ba:5d:04:a3:1c:5e:f1:89:55:57:
5d:1a:25:6a:5e:19:5c:78:4e:db:24:54:a2:4e:3e:29:f6:b2:
cf:01:b5:71:bd:6d:13:40:ba:71:46:7a:40:20:0b:d0:c6:36:
4d:b4:8d:cc:4b:fa:47:b3:b5:44:ce:0f:f2:23:0f:e0:5f:0e:
ff:45:f3:bb:f2:02:25:1e:e0:bc:4d:ef:1e:ee:a2:40:f3:a7:
db:71:20:95:4d:d4:ee:52:34:56:a8:05:7c:51:5f:35:e1:c2:
08:1e:b4:ae:37:ac:1c:8d:95:3a:b3:c1:e3:b3:d7:58:fc:19:
55:74:cb:3b:2d:61:b3:52:a3:9b:14:2b:4a:ee:b3:ce:7f:82:
b0:1c:78:41:8e:d8:7d:8a:dd:d5:d1:63:51:0d:cc:04:3d:ec:
ac:06:00:d0:93:e2:6d:83:db:6c:71:97:df:f9:38:3b:39:c7:
a0:ee:4b:84:1a:c4:9e:9f:95:01:9c:85:bd:be:45:fa:8b:58:
47:5b:30:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:32:37 2025 by rpki-client