Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663932303a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663932303a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 1FzNedW5aWyYmaybwOaYgtMzezZclWniTBzIFevxN5A=
Subject key identifier: 99:A5:A0:CF:21:B2:1F:0B:9E:E9:97:E4:42:6B:DD:82:B3:56:E3:0B
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 4A32BCCF48B8A09786BFDC0AA23A3CD56E674441
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663932303a3a2f34382d3438203d3e20333936393638.roa
Signing time: Mon 30 Jun 2025 22:25:11 +0000
ROA not before: Mon 30 Jun 2025 22:20:11 +0000
ROA not after: Mon 29 Jun 2026 22:25:11 +0000
asID: 396968
IP address blocks: 2a0f:6287:f920::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:32:bc:cf:48:b8:a0:97:86:bf:dc:0a:a2:3a:3c:d5:6e:67:44:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 30 22:20:11 2025 GMT
Not After : Jun 29 22:25:11 2026 GMT
Subject: CN=99A5A0CF21B21F0B9EE997E4426BDD82B356E30B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:d4:f6:7d:0b:40:e1:44:63:81:b5:d1:43:
52:78:88:8b:b9:1b:8e:9a:8a:09:aa:9f:00:f2:0c:
73:a3:b5:ac:29:03:85:30:bb:f4:bb:e5:cc:95:c9:
41:c5:d4:dc:45:92:61:3b:0d:ea:32:2f:cd:6b:7b:
71:cf:8d:a4:bc:05:96:ae:41:3d:ef:be:89:81:4d:
97:39:0a:bd:92:05:46:d1:77:87:55:0c:76:6b:2d:
ce:9a:7c:41:14:c8:8d:4a:b4:f0:a6:e8:45:39:1c:
bf:cc:c5:20:97:95:b5:65:4d:f4:0b:3d:3e:5a:92:
15:2d:f5:6a:6a:6a:c7:9b:1e:ab:16:72:32:bf:67:
9f:7f:48:42:e2:ad:dd:a1:77:56:84:01:55:de:9e:
ae:32:74:27:fd:81:3b:49:3a:cb:bb:9d:fc:2a:c3:
67:b5:55:28:9f:e0:16:32:c2:da:3e:e0:5d:e2:5f:
63:dc:36:28:08:c5:00:dc:80:fb:e7:8c:79:6a:8a:
de:1f:10:2e:5c:5e:78:46:8a:39:b3:3c:d9:da:78:
52:c4:59:5d:77:c6:ee:2e:7a:60:34:26:0c:92:fc:
6f:05:03:dc:b6:5b:92:d7:a6:64:be:b5:ab:b7:63:
e3:7e:fb:3b:3d:f7:1c:cf:0d:2d:2a:bc:b2:80:df:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A5:A0:CF:21:B2:1F:0B:9E:E9:97:E4:42:6B:DD:82:B3:56:E3:0B
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663932303a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f920::/48
Signature Algorithm: sha256WithRSAEncryption
28:c5:3b:89:b9:bd:38:cd:23:cc:d3:e8:0f:0e:d6:14:bc:bb:
7d:fd:c5:1f:b9:ec:dc:ac:b0:a8:21:6a:d5:bf:58:05:ca:80:
c7:bb:a0:49:ee:d8:a9:f8:71:a4:b0:1f:f5:b3:46:12:d8:6f:
10:ff:35:35:19:11:d4:97:f2:32:59:08:6c:f9:ae:8f:4f:b2:
9b:85:a3:00:eb:a7:9d:a3:76:46:6d:4b:6a:c7:92:04:4a:e5:
24:02:c1:73:28:95:88:17:76:58:15:80:6f:83:4f:dc:e2:61:
58:05:49:e2:f6:64:2a:26:93:e0:f1:41:62:c9:b9:70:96:ac:
7b:43:fa:22:f6:64:2b:87:24:59:88:76:2c:23:ea:35:fd:7a:
cd:91:8e:0e:f1:f4:cf:50:97:72:b6:a2:f8:f7:ef:16:bf:58:
9a:94:24:77:ad:8f:e3:e3:71:ff:ed:ad:fe:34:fa:28:3c:05:
16:85:a5:84:6a:77:aa:6f:70:44:85:70:fb:fb:29:7f:85:b5:
25:b2:81:7c:bb:e2:d2:fe:6a:12:64:97:27:25:2c:fd:23:c4:
d9:d4:14:e4:20:23:87:ca:2f:5f:04:4c:a0:dc:6e:55:b9:50:
c2:07:3c:da:ee:9b:4e:73:6b:4a:ae:3a:49:c8:1e:fa:fb:4b:
64:ed:fd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:39:17 2025 by rpki-client