
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663831313a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663831313a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: F5zksKnNcEy1bjx8iXvub7loWf88CZS9JqPADpNxBOs=
Subject key identifier: 95:92:08:C9:12:56:D5:7F:66:C3:B4:05:9B:04:5E:69:0C:57:A2:BD
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 19AF06CBC7457E680F252854C6891847B8F6AEFC
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663831313a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 04:18:02 +0000
ROA not before: Tue 01 Jul 2025 04:13:02 +0000
ROA not after: Tue 30 Jun 2026 04:18:02 +0000
asID: 396968
IP address blocks: 2a0f:6287:f811::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:af:06:cb:c7:45:7e:68:0f:25:28:54:c6:89:18:47:b8:f6:ae:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 04:13:02 2025 GMT
Not After : Jun 30 04:18:02 2026 GMT
Subject: CN=959208C91256D57F66C3B4059B045E690C57A2BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:5a:4b:4e:9b:88:1d:48:59:59:7e:25:4a:
70:17:64:cd:70:e1:90:24:9b:f9:bf:a3:d3:ff:3f:
49:76:ff:c5:51:d9:b5:ef:ae:b1:1d:41:87:96:44:
99:c6:1f:c3:a3:60:7a:cb:07:b0:4e:38:c4:ed:d0:
27:ef:23:74:0c:04:74:ae:62:02:af:8e:f3:a4:7e:
35:87:e1:5f:96:ab:c7:d0:80:4e:a1:6e:51:1e:f4:
9c:2b:a9:81:92:b9:91:e8:fe:ae:03:2c:e9:42:2b:
e2:1e:d5:81:9d:70:fa:70:b3:65:c3:85:e5:24:8f:
60:19:f0:5b:b3:e2:6d:99:c5:f8:a3:c6:18:e8:d6:
f4:bb:76:0a:6b:43:c4:49:97:7f:53:ed:d7:c7:9b:
b1:cf:5e:58:ad:2d:9d:89:84:b0:82:f8:a9:91:5e:
bc:7d:d5:20:82:d8:a7:5f:5b:96:37:2c:3c:f9:63:
41:ab:24:e5:00:48:eb:50:08:2c:99:f8:88:21:f0:
9c:3d:85:96:2b:41:07:17:ea:f3:63:ec:f4:d9:cf:
b8:54:90:4c:d9:cb:e4:bf:3f:c0:c4:6a:73:9c:f9:
a2:87:52:9e:8f:41:11:61:8a:4b:1d:5e:8b:e6:06:
eb:47:7e:8c:f1:55:65:8f:3c:0a:a6:ce:70:27:d2:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:92:08:C9:12:56:D5:7F:66:C3:B4:05:9B:04:5E:69:0C:57:A2:BD
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663831313a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f811::/48
Signature Algorithm: sha256WithRSAEncryption
be:7a:18:5b:a4:55:5d:8f:5f:fc:e2:0c:a5:56:8e:c6:d3:50:
f0:b8:b1:5c:e9:3d:61:e9:7c:f6:23:17:3b:e7:47:9e:68:4a:
d2:ea:18:4b:8d:fd:da:a5:47:31:f1:a4:e0:b3:76:09:24:91:
f6:e9:e8:b4:d3:35:c6:32:d3:26:11:f4:2e:db:7e:2f:d5:1e:
78:4b:17:4a:2e:81:a0:37:6f:6f:f8:5b:7b:4b:57:38:81:61:
de:1b:24:cf:c6:0d:9e:46:cb:d9:9b:69:1c:6a:fb:9a:ba:9b:
a8:4e:b2:52:5a:c7:17:10:31:c8:e7:7a:eb:bd:54:05:bf:2c:
49:ec:24:de:b0:85:fe:b6:89:94:8f:3f:da:06:58:ee:32:95:
20:87:5d:f7:4c:8a:5c:0e:08:f7:63:be:40:90:50:92:1b:f7:
ac:2a:ae:d4:50:73:51:29:a1:ed:37:6b:b6:bf:04:56:f9:0e:
f7:9f:ca:46:26:39:bb:15:c1:32:81:da:71:80:5c:d4:52:ef:
39:eb:3b:f0:41:f4:f1:52:21:5a:8a:40:a4:8c:0c:e6:37:72:
bf:46:2f:d2:71:e0:6f:96:01:0a:b5:da:ac:08:51:2c:e4:5e:
4c:ba:2d:57:6e:d9:9f:d3:02:bd:11:92:74:1c:c2:a9:ff:c7:
33:ff:9d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:19:23 2025 by rpki-client