
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666162623a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666162623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: +USgd/VaDtD2usvxZExjIw0UsIHsxMyp5Yq+RZl9cpk=
Subject key identifier: 02:39:EB:17:65:C3:DE:4A:87:3F:DE:69:1C:2F:51:60:7B:A6:4D:52
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 664A26573A59AD992BA76561B2A5504C63ABCB52
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666162623a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 03:49:00 +0000
ROA not before: Tue 01 Jul 2025 03:44:00 +0000
ROA not after: Tue 30 Jun 2026 03:49:00 +0000
asID: 396968
IP address blocks: 2a0f:6287:fabb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4a:26:57:3a:59:ad:99:2b:a7:65:61:b2:a5:50:4c:63:ab:cb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 03:44:00 2025 GMT
Not After : Jun 30 03:49:00 2026 GMT
Subject: CN=0239EB1765C3DE4A873FDE691C2F51607BA64D52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:29:62:23:cb:e7:ba:2e:1c:c5:8c:1e:6b:
30:d4:a9:f7:c5:d6:b4:e4:66:51:26:4e:8a:f9:e4:
ac:8c:ea:37:a4:f6:f9:ec:b4:d4:9c:25:52:c7:33:
a8:a0:98:01:9f:b9:eb:eb:c7:1a:13:a4:fa:e4:c2:
49:76:19:56:bb:a4:a9:51:20:0a:b3:f0:b4:ce:89:
6d:32:11:ee:3f:b0:16:7e:c9:a2:aa:e8:72:f0:46:
a4:9a:24:76:9c:da:49:9b:09:00:f5:71:e2:f0:9f:
ca:7e:bc:25:30:42:9c:72:1b:18:07:94:1f:c6:25:
5d:96:e7:e9:61:b0:4c:f3:f6:2d:2d:18:38:66:e5:
81:2d:51:9c:26:5c:d1:fa:d4:dd:24:18:ae:0b:57:
82:bd:dd:43:74:f9:2b:bf:a7:79:6d:05:f2:27:71:
cb:04:a4:67:9e:71:b6:47:67:e9:64:73:d4:b2:6c:
f9:31:c9:49:e3:14:7e:0f:be:ad:af:6c:e3:8c:08:
1c:81:02:31:62:36:1f:b4:88:f6:36:7a:2c:f7:55:
75:0e:db:ce:15:48:e5:1a:0e:a6:65:3a:e8:7a:99:
39:15:05:25:5b:e4:aa:ac:71:c1:df:d4:85:94:af:
c6:c7:ab:4f:dc:44:2a:7a:87:2f:b7:ac:11:73:2b:
a9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:39:EB:17:65:C3:DE:4A:87:3F:DE:69:1C:2F:51:60:7B:A6:4D:52
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666162623a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fabb::/48
Signature Algorithm: sha256WithRSAEncryption
b1:f7:a2:c1:fc:14:fb:9d:50:67:0f:d9:99:70:a5:0b:c6:14:
4b:79:84:e8:8e:31:e7:9d:9c:c1:eb:d9:d0:1f:db:d1:48:05:
96:67:30:c6:b4:25:d3:d5:66:53:d2:8b:d7:55:31:06:76:33:
0b:01:31:3a:eb:b6:0c:53:05:b7:78:b6:c9:16:0b:70:31:e7:
72:43:df:e5:d4:35:d7:91:63:ac:bb:c4:23:15:e5:d0:9a:c8:
9d:51:70:98:5c:51:19:21:4e:62:18:2a:81:02:18:43:12:a4:
b6:d5:90:a8:40:b5:98:d9:94:d9:c9:43:a3:97:79:58:79:ef:
d5:6f:7a:82:64:0b:79:5b:ae:a7:75:6c:ba:c0:45:ea:f5:56:
7e:e0:af:4d:70:1a:52:13:b1:41:f1:2c:bb:34:ec:8f:6d:a0:
14:6c:30:7b:40:d5:da:8a:e6:98:6a:00:79:3d:3f:16:42:88:
4d:d3:a0:69:87:c1:b3:03:aa:dd:3f:81:cf:3c:ec:8a:c1:9b:
ba:ac:df:e0:38:d6:3d:8f:2d:eb:8c:87:07:7a:2f:55:52:ef:
22:20:3e:36:1d:dc:72:b0:9e:c4:e1:9e:0d:52:44:17:70:79:
b0:ce:30:2f:a0:f7:67:f0:87:f6:2e:59:0e:9b:57:04:38:21:
69:9b:db:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:25:14 2025 by rpki-client