Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666261653a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666261653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: XjNKRrW2Fy0uc+oVVJhoe2yGY8rWKWNbGMcB+PKyEHU=
Subject key identifier: 35:04:33:63:7F:49:D5:9F:E9:E3:34:3E:F1:73:13:BC:92:57:10:2B
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 7BA5E11E166E5D8D9BDC109DB33ABDE80765A8CF
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666261653a3a2f34382d3438203d3e20333936393638.roa
Signing time: Mon 30 Jun 2025 06:54:02 +0000
ROA not before: Mon 30 Jun 2025 06:49:02 +0000
ROA not after: Mon 29 Jun 2026 06:54:02 +0000
asID: 396968
IP address blocks: 2a0f:6287:fbae::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:a5:e1:1e:16:6e:5d:8d:9b:dc:10:9d:b3:3a:bd:e8:07:65:a8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 30 06:49:02 2025 GMT
Not After : Jun 29 06:54:02 2026 GMT
Subject: CN=350433637F49D59FE9E3343EF17313BC9257102B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:50:d0:16:b1:8e:cc:b0:0b:07:45:ed:e1:
f0:68:9a:84:05:eb:b7:b9:30:58:fc:75:ef:87:c5:
5d:3a:45:18:44:fe:03:15:15:07:ca:b5:cc:43:ef:
90:7d:68:a1:6e:d7:5b:c6:dc:c5:5c:23:e9:b0:58:
15:73:6e:4c:a7:bd:db:44:28:93:31:d2:c4:84:d2:
17:6a:19:cd:b1:b9:d9:16:d8:09:79:b1:ff:7f:3f:
8b:a3:c2:12:9a:92:17:0b:ee:13:ec:9a:3a:0f:06:
11:58:52:14:8a:a1:f5:f3:16:44:7c:f7:f2:c3:1c:
01:e5:3f:5d:1e:28:11:b7:0e:10:96:3c:1e:50:ca:
89:f8:98:3e:8c:61:ca:c7:d3:4b:15:54:f5:42:dc:
d4:bc:a6:47:bd:b1:44:73:c9:5a:05:ff:d1:13:67:
6c:bc:fb:cb:25:6c:3a:f3:99:fc:86:34:14:8b:99:
7c:c8:4c:be:64:68:51:3c:b1:2a:71:fb:0f:5a:45:
75:d2:ea:d4:70:67:f0:41:56:e5:7a:9f:14:10:07:
e1:9e:1c:c5:f3:35:ce:c8:7e:08:35:ae:2e:0e:3a:
07:cb:80:f6:11:16:f8:fd:51:86:77:2b:c7:d3:9a:
f5:22:ef:8f:20:7c:f9:90:6e:dc:4b:67:c9:c3:bb:
fd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:33:63:7F:49:D5:9F:E9:E3:34:3E:F1:73:13:BC:92:57:10:2B
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666261653a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fbae::/48
Signature Algorithm: sha256WithRSAEncryption
05:4c:01:5e:62:7c:98:c9:7b:08:60:f6:b5:89:33:c0:86:0b:
45:81:a8:da:d7:ff:f3:1e:a3:4f:df:bb:1f:ea:13:dc:8d:29:
4d:08:0b:84:c7:4e:ab:27:fe:a9:c9:92:8e:2e:3a:8a:c7:72:
ed:d2:27:b1:a0:bb:4e:ce:19:64:87:23:d7:1d:ec:9d:53:0f:
cd:58:77:e9:c2:45:bd:35:4e:71:69:44:72:a5:93:e9:46:86:
6b:32:99:f1:5e:8d:1d:6b:20:90:85:10:e0:c2:e7:35:07:f6:
a9:54:28:f4:0e:58:a5:55:a7:08:3c:7a:4c:46:0a:f1:ee:53:
c6:d0:0c:11:16:9f:e3:dc:ad:1c:24:8d:fc:7d:a1:d5:cb:4f:
06:a9:13:c3:ba:4b:e3:5e:9d:d6:28:f1:b1:81:5b:86:2e:29:
f7:f1:0c:e6:27:18:e6:a1:fe:8a:1d:fc:af:b6:ab:f7:7f:a8:
be:bb:e2:03:16:7a:4f:2a:3b:7e:15:be:41:9b:47:07:34:20:
d3:25:40:65:fa:e0:fa:4f:d9:23:d5:3d:88:53:a1:18:bd:20:
9a:11:74:38:ab:c6:de:e5:67:da:09:ca:89:d6:8f:61:8c:37:
1b:fe:5d:8c:df:49:ee:1f:65:a4:22:f4:c7:84:1f:1a:92:32:
0f:7c:3f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:41:17 2025 by rpki-client