Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666163393a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666163393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: BHANLsKjYNnG9TUOMq9N72G3PhsddGqejIZ4u6w1oZQ=
Subject key identifier: E2:8F:D7:A0:16:BD:57:16:5C:70:25:92:88:9B:46:2B:CF:F1:09:1B
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 1971C6E94C6C9000813BB7E5441C06B38C6117C0
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666163393a3a2f34382d3438203d3e20333936393638.roa
Signing time: Mon 30 Jun 2025 06:54:02 +0000
ROA not before: Mon 30 Jun 2025 06:49:02 +0000
ROA not after: Mon 29 Jun 2026 06:54:02 +0000
asID: 396968
IP address blocks: 2a0f:6287:fac9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:71:c6:e9:4c:6c:90:00:81:3b:b7:e5:44:1c:06:b3:8c:61:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 30 06:49:02 2025 GMT
Not After : Jun 29 06:54:02 2026 GMT
Subject: CN=E28FD7A016BD57165C702592889B462BCFF1091B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:40:42:8d:ec:58:4e:c2:71:75:c8:91:05:
a1:97:53:9b:25:6a:71:17:ad:37:bf:6d:b5:9c:31:
22:57:af:25:b3:39:74:a3:7c:42:ba:83:87:8f:7c:
ea:53:32:ee:7b:a3:08:75:45:55:32:c7:b4:4e:8e:
62:42:09:08:db:4f:8b:53:34:46:eb:a3:fa:e0:8d:
a6:de:4c:e2:a9:b8:28:a5:43:70:ed:8b:af:e8:d6:
e1:11:3a:75:0e:09:b4:e4:88:e8:a8:87:2e:96:f9:
4f:4b:39:dd:78:5f:c6:04:bc:3f:d4:ce:e8:24:c0:
de:90:17:9d:7d:63:41:e4:cb:df:ac:c3:c5:96:93:
7a:fa:27:1d:61:05:ac:7b:62:f7:9a:37:a4:1f:5a:
17:81:88:e2:c0:ff:10:7e:57:62:13:2a:26:63:3e:
cc:68:8c:ab:b9:f3:0b:45:88:fb:ef:7b:68:e5:97:
b2:90:05:7d:6c:2d:3c:41:05:2f:f0:80:c7:c1:9d:
0c:3c:35:b9:b9:90:60:83:f3:f7:30:b7:73:2a:56:
d8:03:68:4b:99:e0:96:4e:8e:d0:06:2e:f2:19:15:
67:52:44:07:71:1e:8f:53:b8:68:e4:32:4e:29:1c:
7b:60:96:3a:d2:0c:ab:2b:2c:5b:7c:a1:06:d5:d3:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8F:D7:A0:16:BD:57:16:5C:70:25:92:88:9B:46:2B:CF:F1:09:1B
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666163393a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fac9::/48
Signature Algorithm: sha256WithRSAEncryption
8d:02:e9:5f:a2:74:c6:76:35:75:08:03:b8:f7:15:84:97:ad:
27:0d:0e:49:5b:25:72:31:d0:35:8f:d4:ae:b7:3e:89:83:d4:
15:04:aa:4a:cc:86:74:c8:c2:42:44:e7:aa:aa:f3:fa:c7:60:
74:a6:64:56:2b:9a:70:9c:7f:e3:1f:a7:c4:03:9a:af:0f:08:
58:84:e7:9d:bf:ae:24:2d:13:a6:c0:af:e1:21:6e:f8:01:ee:
24:2a:b8:4e:13:88:51:01:f9:02:bb:15:df:ff:7d:eb:cc:bc:
85:a8:9e:63:74:d9:40:a9:32:29:f9:fd:0f:0f:83:15:28:4d:
f7:39:a5:82:33:02:f7:e3:53:68:14:05:03:4b:cd:2c:dc:c9:
ed:b3:ce:04:2c:fb:70:43:3a:9b:ca:3b:c5:4c:09:21:35:b3:
cc:a9:fc:44:9e:5d:8a:d5:3c:7c:d6:9e:af:d9:70:8d:3b:69:
cb:d6:7b:ae:f4:10:da:21:ab:97:68:d5:5e:a1:19:89:26:24:
f7:47:02:f0:80:f0:61:75:1d:f3:c2:e8:88:c1:b3:7e:b0:b2:
59:da:db:21:48:cd:20:bd:c2:c0:d5:e3:c7:70:8f:1f:a6:d9:
f5:6e:25:c6:ac:d5:40:01:c2:c1:10:d4:88:68:32:51:38:cc:
8c:96:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:26:42 2025 by rpki-client