Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663665633a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663665633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: yeSpTQ6LoJEDvwONgzOFvZmDkupUdAL/QdQZGYUJqcY=
Subject key identifier: 8D:CC:BD:ED:59:50:CE:A9:48:44:87:EF:1B:B7:B6:DF:90:B9:D5:EB
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 18F80CC4D40CB491A7B4B2A4B630478DD5D079
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663665633a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 04:15:03 +0000
ROA not before: Tue 01 Jul 2025 04:10:03 +0000
ROA not after: Tue 30 Jun 2026 04:15:03 +0000
asID: 396968
IP address blocks: 2a0f:6287:f6ec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f8:0c:c4:d4:0c:b4:91:a7:b4:b2:a4:b6:30:47:8d:d5:d0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 04:10:03 2025 GMT
Not After : Jun 30 04:15:03 2026 GMT
Subject: CN=8DCCBDED5950CEA9484487EF1BB7B6DF90B9D5EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c5:a4:89:f6:f5:ca:db:22:b9:39:30:bb:d2:
b7:a6:54:f5:07:bf:89:87:09:4b:23:97:0a:e2:e5:
dc:35:01:8f:17:33:8d:33:33:44:a3:03:57:85:7e:
69:d6:c3:4c:b7:40:21:93:54:58:49:f3:19:3d:9e:
fa:14:1a:0f:e5:7c:18:3c:21:41:63:6b:72:e0:90:
99:9d:10:5d:87:8b:99:c0:ef:07:94:44:e3:e5:20:
2c:cb:e4:f6:2c:91:08:75:a2:ac:6b:6e:41:7d:9e:
f1:bf:93:77:3b:a0:dd:f2:66:69:42:8a:73:ab:4e:
ac:8f:88:48:03:69:9f:89:a5:74:ed:0f:53:c3:f3:
14:97:11:23:c1:4a:84:ad:57:5d:6d:16:f3:f1:24:
6e:b4:67:7a:89:c8:40:5c:f6:1c:70:a1:ed:a4:77:
43:24:6c:94:8a:a9:fa:23:57:25:a7:38:f4:a6:24:
0c:43:ea:85:35:34:df:89:42:9d:0d:e4:d0:2d:0b:
19:75:1e:00:a4:2c:c2:1c:e2:66:8e:f0:16:6d:1c:
0e:d3:82:73:99:c4:93:f4:b3:22:7a:32:6c:54:14:
53:10:d9:e5:67:6f:b3:29:b8:b0:a2:43:ea:63:09:
77:3f:20:2b:4f:9d:f9:96:33:72:ad:d7:4b:ad:52:
3a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CC:BD:ED:59:50:CE:A9:48:44:87:EF:1B:B7:B6:DF:90:B9:D5:EB
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663665633a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f6ec::/48
Signature Algorithm: sha256WithRSAEncryption
b6:bf:da:93:5b:33:67:51:27:39:6d:a4:c4:c5:12:1c:4a:44:
99:bd:2a:d5:8e:dd:15:68:13:91:5d:37:47:4a:8e:57:c9:42:
40:9d:8e:35:a0:d8:24:35:72:8f:87:ac:25:12:08:91:67:1e:
43:a0:d9:36:08:69:ca:04:5c:67:05:1a:a5:41:b5:31:78:f8:
77:6b:14:3f:63:1e:ea:e5:46:6e:3f:00:ff:d9:33:89:96:6f:
84:ca:21:b9:e2:81:21:ad:c2:37:e4:a5:13:8b:a5:2a:60:a5:
bc:20:85:36:b9:08:fc:b0:1e:c3:68:42:29:e3:87:f3:0b:10:
69:24:e6:4e:b5:44:49:9f:25:c9:23:10:16:78:50:b2:86:2c:
4f:87:67:dd:82:c9:40:9c:05:a7:35:53:bd:05:a1:32:62:8d:
ed:7f:85:54:c4:4d:ae:e0:c4:21:b1:01:c2:5b:fa:7b:b1:63:
f3:fa:10:d3:ff:13:f1:5b:b6:37:16:88:df:55:d3:06:d3:7e:
5a:4a:a3:e7:24:a6:be:a7:e3:83:45:59:53:b8:f9:bf:f0:2f:
05:8d:1c:18:3e:66:62:a1:41:99:74:85:db:18:d4:09:cd:50:
af:ad:54:3b:7f:f4:7d:e6:86:25:55:4e:a9:e6:b2:45:b6:a1:
c7:aa:76:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:43:05 2025 by rpki-client