Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666230323a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666230323a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: p9QKerJ0w55G5BaoGvp6AzVsyTRGr1zXM3LPIzHsf/I=
Subject key identifier: FB:74:96:F0:19:73:93:F0:AC:9A:2B:13:FD:38:16:40:1F:C0:FC:97
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 2C8A109066817D16318D33ADF533D3CD9F768D34
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666230323a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:37:36 +0000
ROA not before: Thu 26 Jun 2025 12:32:36 +0000
ROA not after: Thu 25 Jun 2026 12:37:36 +0000
asID: 396968
IP address blocks: 2a0f:6287:fb02::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:8a:10:90:66:81:7d:16:31:8d:33:ad:f5:33:d3:cd:9f:76:8d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:32:36 2025 GMT
Not After : Jun 25 12:37:36 2026 GMT
Subject: CN=FB7496F0197393F0AC9A2B13FD3816401FC0FC97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:12:45:75:d2:63:ff:24:32:42:8e:91:3d:
9b:cc:a3:c2:37:bd:3a:81:1f:7d:25:15:e0:35:73:
ef:82:41:a9:2d:75:ef:b9:47:da:44:ff:00:6f:06:
7c:d2:6c:53:bc:5c:17:44:63:93:c1:56:67:4b:33:
8f:7a:42:cc:2b:7f:e2:a7:a5:e4:a1:8d:fb:99:c3:
fd:cd:50:37:a2:a1:f8:32:86:75:5b:fb:67:8e:f4:
ca:f6:82:0b:55:09:06:e4:4e:b0:31:5a:98:eb:ae:
f5:df:d0:a0:21:f2:19:94:14:65:2f:9e:ce:0f:20:
35:0f:bd:10:e8:61:4a:93:7b:d7:4f:47:29:77:ba:
4d:80:c1:6d:1f:19:b4:7b:23:07:18:b0:f4:c8:ca:
04:b7:71:f9:74:f6:3c:90:6a:d4:ce:b5:00:d9:e3:
ae:43:a1:1a:22:53:af:58:3c:4e:7b:56:26:5f:e2:
2a:f7:53:b1:13:98:66:39:e7:e4:93:5d:06:cf:bf:
7d:03:14:c9:2e:44:f2:7c:b6:66:be:3e:36:b1:dd:
c7:10:16:4f:28:e0:27:1d:d8:4e:84:28:fd:4e:70:
09:aa:8c:82:c5:03:0a:cd:3d:90:10:82:ed:50:de:
b4:66:1f:d9:04:95:ff:cf:70:6e:e9:6e:9e:bf:4a:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:74:96:F0:19:73:93:F0:AC:9A:2B:13:FD:38:16:40:1F:C0:FC:97
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666230323a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fb02::/48
Signature Algorithm: sha256WithRSAEncryption
16:e2:13:0f:8e:ee:89:76:ba:55:31:b9:19:70:a0:15:e9:c5:
ff:3d:bd:dc:0d:91:b5:20:fe:ac:e8:a5:c0:63:6b:5b:95:d8:
98:8d:02:3b:79:eb:00:e3:f5:41:9e:e2:61:27:a2:ff:6d:bd:
63:77:54:d6:2e:f8:84:04:b3:7e:fe:6d:44:6d:92:72:08:33:
c2:9b:20:e9:e9:fa:a0:b9:26:83:87:c2:52:18:1a:cf:87:ec:
6b:42:3e:99:27:d0:03:b3:61:b3:e3:f5:75:88:fd:7e:4f:20:
7c:71:f8:b1:9a:91:0c:d2:8f:5c:15:f0:9b:78:05:c1:c9:a3:
94:7d:91:d9:7a:bf:45:e0:9c:45:a7:75:79:f2:53:c8:13:73:
0d:d4:bc:d9:da:a9:8b:b3:22:35:c6:13:84:d8:48:cf:98:c7:
8b:31:bf:1c:00:db:b1:77:a7:74:82:b8:c0:d3:c0:75:61:4a:
a6:90:cf:17:73:4c:e1:3a:7b:e7:9c:41:60:53:47:35:d8:3e:
8f:f1:03:02:de:19:db:cc:dc:b4:e3:73:6d:9e:37:30:ce:28:
e6:24:7a:47:b4:87:84:3b:eb:8c:f1:f8:b0:66:5b:27:ea:9c:
a4:f1:59:b6:61:e9:a9:e4:67:e3:22:3a:8f:d1:a1:27:5e:53:
5e:d4:37:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:42:35 2025 by rpki-client