Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663664633a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663664633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: TGRw+B5a9k0Acd4zUYlZsZopM6NMtxeNw0u140L5iuk=
Subject key identifier: 15:97:73:2F:06:08:2C:CD:70:35:D0:B6:7D:23:83:7E:35:FE:E2:FC
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 668DD20CE39C3DAAAEFC53378595A2397BFDAC95
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663664633a3a2f34382d3438203d3e20333936393638.roa
Signing time: Mon 30 Jun 2025 08:18:04 +0000
ROA not before: Mon 30 Jun 2025 08:13:04 +0000
ROA not after: Mon 29 Jun 2026 08:18:04 +0000
asID: 396968
IP address blocks: 2a0f:6287:f6dc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:8d:d2:0c:e3:9c:3d:aa:ae:fc:53:37:85:95:a2:39:7b:fd:ac:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 30 08:13:04 2025 GMT
Not After : Jun 29 08:18:04 2026 GMT
Subject: CN=1597732F06082CCD7035D0B67D23837E35FEE2FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:6b:16:b6:e7:f4:95:39:bd:c8:cc:1c:77:
4c:1d:0f:ef:74:ea:ee:b5:63:29:a6:1d:52:10:13:
69:a4:4d:cb:71:84:d0:36:ae:d0:7a:9b:49:23:d2:
29:a3:14:73:30:ba:b9:7d:87:06:fe:65:b9:06:73:
1f:1c:57:ac:16:94:c2:7e:b8:a0:95:20:ff:3d:3a:
8d:53:0c:38:1c:e1:dc:e6:28:ea:42:ad:7e:f7:59:
aa:fb:0d:b2:d3:1d:f9:32:eb:3c:16:df:7e:89:ac:
78:3a:8b:93:46:c7:f9:56:fb:9f:8e:e4:a4:4d:69:
9f:3b:ff:b1:88:c8:46:77:9f:ad:42:61:39:6b:d5:
f2:c2:0b:b3:7c:20:06:5a:f5:3d:11:59:ab:78:da:
5a:e9:34:05:1d:5f:11:a0:37:3a:b4:26:aa:6f:eb:
45:21:12:46:3f:80:1f:d6:51:31:b7:48:eb:49:1d:
05:05:68:96:51:97:4f:6b:65:e5:66:99:c4:cc:99:
01:6e:3c:c3:6c:dc:3c:e8:b3:47:8f:3f:e8:72:d1:
98:e1:20:59:a7:8f:dd:7b:5f:66:37:c7:8a:3e:fd:
76:f9:1d:9d:eb:9f:4d:b8:a9:55:a6:92:78:eb:ad:
54:d0:0d:88:f7:ae:7e:a2:39:b9:71:ff:cb:75:b2:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:97:73:2F:06:08:2C:CD:70:35:D0:B6:7D:23:83:7E:35:FE:E2:FC
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663664633a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f6dc::/48
Signature Algorithm: sha256WithRSAEncryption
29:09:77:e9:ae:06:1e:d0:2e:0b:53:17:4e:13:80:8d:66:1a:
e3:c8:6e:1f:e7:0b:a2:02:71:47:e8:a5:4c:93:b7:2e:71:04:
e0:72:b7:99:b1:69:c5:3c:a3:34:67:e1:0b:aa:f1:39:45:3e:
e6:97:47:80:e7:93:6b:f4:34:23:40:15:17:4b:71:43:8c:03:
01:8e:bc:fb:0c:ae:a8:4e:72:22:b1:5f:53:4c:f7:c6:06:c3:
53:50:9f:1e:1b:a2:d9:66:56:bf:dc:79:48:d9:00:ad:59:44:
59:7b:ec:4a:46:bd:6c:7b:82:46:18:f0:ab:0f:09:9e:b6:a2:
e8:d7:ff:4d:57:e1:b7:28:6c:d8:39:b0:ed:44:92:f2:5e:74:
17:59:68:5e:b9:85:4f:8c:7c:fe:b8:55:2a:47:f4:0e:77:70:
d9:8c:1c:dc:f8:7d:09:b6:51:ee:2a:ff:05:6d:3e:36:e9:3f:
b9:cc:04:d4:d7:c8:9e:fc:fe:19:b4:42:7e:a6:2f:f9:52:40:
de:77:91:9c:d1:1c:20:83:be:44:50:63:de:83:af:f1:7a:31:
e1:36:33:db:10:7b:be:e2:18:28:94:88:af:47:c1:c2:b4:ca:
be:50:11:61:f6:1d:8c:de:ba:a3:1d:3f:dc:eb:9c:aa:1c:44:
83:29:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:15:44 2025 by rpki-client