Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666230653a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666230653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: DCNUyBtsuSMgvTggULkVp1AdnvcK2L2g096JB5BkL2k=
Subject key identifier: DE:B2:E0:A1:36:C9:8B:51:F6:EA:E1:AF:C0:43:31:BC:5A:4F:0E:7E
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 6516E4C58A50D7E718242B5A71BA2C8D6BDF1A2B
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666230653a3a2f34382d3438203d3e20333936393638.roa
Signing time: Mon 30 Jun 2025 08:18:02 +0000
ROA not before: Mon 30 Jun 2025 08:13:02 +0000
ROA not after: Mon 29 Jun 2026 08:18:02 +0000
asID: 396968
IP address blocks: 2a0f:6287:fb0e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:16:e4:c5:8a:50:d7:e7:18:24:2b:5a:71:ba:2c:8d:6b:df:1a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 30 08:13:02 2025 GMT
Not After : Jun 29 08:18:02 2026 GMT
Subject: CN=DEB2E0A136C98B51F6EAE1AFC04331BC5A4F0E7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:e2:ec:a3:43:5b:91:73:2c:54:81:c6:39:
0c:d2:b1:df:de:02:c2:98:f3:a6:10:54:b3:19:37:
69:09:03:82:07:c8:a8:a7:12:fb:d1:0d:03:f9:d5:
28:37:d4:96:56:c8:c8:34:98:23:66:15:d6:45:ef:
43:47:03:cb:ec:d7:7b:45:85:62:8c:2d:80:63:71:
e8:25:79:9e:6e:6e:b5:25:9c:d0:e3:af:5f:40:62:
0d:18:e8:da:76:85:0d:5e:32:41:84:b6:12:e4:d2:
a9:72:31:49:e0:aa:da:d9:84:48:ac:68:31:ab:67:
c7:06:12:76:ed:5b:1b:02:ff:bf:8c:ff:6c:3e:78:
d2:7c:05:73:c5:3b:f9:57:c2:9e:7a:6a:9b:b1:38:
97:1e:57:05:b4:0b:71:ab:ed:c9:39:07:fc:a6:fd:
04:dc:69:ca:85:e0:60:9b:68:1c:13:ab:43:79:5f:
a2:90:77:3a:44:55:24:3e:d7:c5:b4:04:fa:e3:e1:
ab:be:be:84:d9:61:56:82:3d:3c:19:f4:bd:10:2e:
1c:25:92:f2:b0:b7:a8:6a:d6:ee:57:84:2e:8a:b5:
2f:6e:ff:79:16:8a:32:40:b5:b2:72:cb:c9:33:9d:
6b:b8:aa:4f:3e:58:e5:34:f2:d0:4d:27:0f:fc:1e:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B2:E0:A1:36:C9:8B:51:F6:EA:E1:AF:C0:43:31:BC:5A:4F:0E:7E
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666230653a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fb0e::/48
Signature Algorithm: sha256WithRSAEncryption
b0:8d:be:20:19:74:79:d9:f7:17:a2:44:a3:9d:77:55:38:23:
f5:75:cf:bf:09:ee:4a:4b:c0:83:42:e8:26:88:b4:f7:a1:d8:
e4:89:9a:07:66:fb:68:27:17:39:92:8c:a4:5b:56:cc:17:56:
4e:f6:84:1c:5e:00:fe:87:a1:44:56:bc:6e:97:ce:fb:ae:02:
f0:ef:96:53:a5:1b:bf:78:f8:e0:60:36:b3:20:b8:ac:da:31:
92:39:ab:9b:03:6f:9c:6d:cb:d5:ef:78:86:67:ff:19:cf:e1:
e2:33:52:a3:4c:c8:42:7a:4e:14:5d:52:ac:2a:19:de:0f:e0:
b7:c7:22:45:66:ab:03:99:87:8c:fd:d1:06:db:9c:a5:e0:4e:
3a:89:ce:96:6f:67:f3:03:16:ee:f9:22:f9:c9:12:a3:3b:ca:
ab:70:09:47:c3:f4:a6:84:b9:2f:62:50:3d:8a:07:50:bc:d1:
45:7d:d0:67:0f:8b:6c:67:2a:b8:99:3b:f7:54:35:af:7d:ef:
8a:76:b4:5d:7d:86:54:14:c1:8f:99:d2:8c:f3:6e:2d:e6:11:
63:39:e4:de:aa:88:75:9e:c1:87:a3:3f:b3:85:f7:fc:63:5f:
35:04:bb:07:00:77:cb:bc:c5:3c:a9:98:e9:09:68:2e:c7:27:
bc:fc:04:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:41:49 2025 by rpki-client