Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663766303a3a2f34382d3438203d3e203136393039.roa
File: 326130663a363238373a663766303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: jhOULBLoLktsDms2c4IAN3XGzeDwgOQrTcgpGo/c7XM=
Subject key identifier: 4A:BB:BE:DC:82:7F:0B:26:5A:99:12:88:20:5A:2E:71:86:AE:CD:5C
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 319E1A55E79E2F50073FD782B5E0E9BDAB8BE45A
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663766303a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 26 Jun 2025 12:10:56 +0000
ROA not before: Thu 26 Jun 2025 12:05:56 +0000
ROA not after: Thu 25 Jun 2026 12:10:56 +0000
asID: 16909
IP address blocks: 2a0f:6287:f7f0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:9e:1a:55:e7:9e:2f:50:07:3f:d7:82:b5:e0:e9:bd:ab:8b:e4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:05:56 2025 GMT
Not After : Jun 25 12:10:56 2026 GMT
Subject: CN=4ABBBEDC827F0B265A991288205A2E7186AECD5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:4e:99:61:9e:3f:94:85:14:92:d5:8c:46:
cd:04:28:c6:2c:b5:91:d8:23:e3:41:95:f8:8d:f7:
7c:b8:29:ea:69:73:a8:d9:b5:31:70:1d:f2:68:59:
8e:06:01:a0:73:6c:36:f9:01:24:ef:ff:ef:fc:ca:
14:5b:38:bc:b2:03:e1:29:95:c7:16:29:c0:7d:23:
26:50:fa:0a:66:50:a8:c9:f3:3a:72:b9:5f:7e:1d:
eb:2c:52:67:44:86:62:06:73:c1:55:f9:bf:75:b3:
8c:2b:d5:08:5c:c4:cb:6e:65:05:80:6b:86:92:2b:
29:59:ca:17:ce:95:0f:99:5f:90:34:cf:2c:74:cf:
7c:53:17:ce:2f:35:1a:c4:c5:b2:d5:65:86:5b:b3:
a1:96:df:55:40:63:ef:e3:28:f1:7d:25:22:81:da:
59:25:27:bf:18:57:b9:a9:aa:a1:a5:53:f1:54:19:
66:4b:e3:51:2a:fa:8c:2f:b5:b6:6c:7a:ba:13:24:
50:e0:52:38:5f:4d:c4:59:64:40:d2:f4:7c:42:af:
a0:3d:da:b1:12:b7:59:38:68:5a:29:84:cb:42:36:
59:11:ec:f9:36:d8:17:99:7c:2b:79:fd:66:58:a6:
8d:99:b8:fe:76:38:c7:cf:3e:9c:ce:fe:22:45:9e:
14:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BB:BE:DC:82:7F:0B:26:5A:99:12:88:20:5A:2E:71:86:AE:CD:5C
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663766303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f7f0::/48
Signature Algorithm: sha256WithRSAEncryption
26:b7:3c:9d:b9:ba:6a:ed:d8:03:9a:e6:21:92:c0:14:27:cb:
a4:a9:81:ad:66:c7:7b:96:71:70:9e:ac:5d:c4:9f:88:7c:7f:
25:98:c8:36:50:f0:68:fc:f5:fc:89:73:11:04:5b:a3:32:4a:
a9:28:da:82:1d:0e:2b:11:15:d0:34:0f:46:58:95:f2:60:8f:
a3:a7:d9:b4:5f:1d:22:8a:d6:96:47:95:db:95:47:a5:e3:62:
07:3a:51:a3:44:a3:6d:07:31:9d:c0:b6:26:e1:8a:30:db:93:
b6:d0:ef:f0:6f:b0:e1:21:bd:c4:de:36:9c:36:30:96:cb:a3:
ec:2a:28:ca:46:0c:cf:bc:95:ce:9f:78:ea:7e:52:e2:14:5f:
7f:57:61:01:fe:3b:3e:02:c4:08:ed:29:48:71:02:58:13:56:
6b:19:44:da:f4:a6:a1:ce:ac:0a:0b:5a:4c:50:ad:14:01:b9:
5c:22:60:df:65:21:27:cd:9d:05:88:e0:3a:1d:11:7e:f4:05:
e6:8a:91:db:b3:54:7e:7c:51:65:36:55:8d:ff:d5:be:ff:2a:
a0:7c:14:a9:1b:ee:1a:92:7b:49:51:16:a3:58:df:ce:22:b1:
b3:7a:c0:7a:9b:4e:7f:8d:3f:7e:d0:0a:7c:d8:09:4c:3d:b2:
46:95:8c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:45:17 2025 by rpki-client