Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666264663a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666264663a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 2WeRABVIWBd72yNxle70jzh5ZwAmF8gKqwzLh54l8j0=
Subject key identifier: 70:E3:00:78:72:1D:A2:5D:64:C6:4F:E5:B2:C5:17:88:28:C9:4B:04
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 1C8044CDB733B670D431FCB4F9AAA32AF57132C8
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666264663a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:37:33 +0000
ROA not before: Thu 26 Jun 2025 12:32:33 +0000
ROA not after: Thu 25 Jun 2026 12:37:33 +0000
asID: 396968
IP address blocks: 2a0f:6287:fbdf::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:80:44:cd:b7:33:b6:70:d4:31:fc:b4:f9:aa:a3:2a:f5:71:32:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:32:33 2025 GMT
Not After : Jun 25 12:37:33 2026 GMT
Subject: CN=70E30078721DA25D64C64FE5B2C5178828C94B04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:96:1b:46:22:34:8c:8b:76:cf:33:8e:21:
a8:30:c3:cb:0f:b9:50:a6:98:cf:6d:fa:7c:92:71:
b9:57:67:aa:46:e6:ba:88:a2:ab:13:6d:7e:ec:25:
6a:8d:05:89:02:34:26:be:cd:77:62:45:a6:65:67:
a6:66:9a:9f:92:6b:57:32:c2:24:0a:06:fc:46:b0:
96:8a:f8:d4:0e:41:aa:28:bb:5e:f4:fa:44:51:42:
65:d8:d5:16:f5:e6:bf:71:d1:e5:bb:49:e0:f8:fc:
13:1f:f3:0d:9a:2c:17:eb:99:a9:fc:f4:24:af:9d:
bc:b4:0f:1a:8d:33:84:63:70:73:45:9c:27:9f:30:
5e:05:05:42:92:89:50:cd:fb:f7:2d:2e:1b:f8:4a:
82:ba:93:8f:77:04:50:9e:24:39:b1:7a:e0:b5:bc:
6c:bb:7c:f6:28:8a:e4:3e:c4:b9:15:14:51:56:ad:
f4:f4:03:ef:97:9e:14:d4:14:d9:40:4d:58:85:b1:
d8:8e:c8:f5:ef:17:49:e4:a2:7f:17:2d:8e:0e:5f:
c2:bb:98:49:d5:f7:0c:95:6c:5a:ca:b9:a4:4a:b4:
10:8c:70:97:fa:e9:72:e8:6e:75:3f:5a:14:25:e2:
5d:a6:ae:fc:0f:db:43:c7:82:3e:4c:a7:f2:32:fb:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E3:00:78:72:1D:A2:5D:64:C6:4F:E5:B2:C5:17:88:28:C9:4B:04
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666264663a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fbdf::/48
Signature Algorithm: sha256WithRSAEncryption
2c:e4:54:16:aa:73:d5:2d:9d:d7:db:de:f0:f3:7c:30:93:b0:
27:ad:85:e5:3f:8d:81:76:c9:fb:aa:05:c9:8c:69:68:f3:16:
e4:63:be:ec:58:a1:33:49:f1:19:40:db:6e:21:32:52:64:40:
2a:8f:0c:29:b1:ca:29:a2:cd:f2:e6:25:c2:e7:2b:5a:22:11:
6d:bd:35:cc:d4:db:da:b7:8e:2e:4e:21:97:85:37:b0:3b:dc:
95:2f:64:bf:6f:4d:f2:cc:38:2f:09:e1:c9:bb:c0:32:f2:d8:
d7:b3:dc:72:09:9b:0a:c5:5e:35:f9:8f:12:be:cb:41:32:a0:
75:8b:53:c1:a3:d7:a1:d5:d6:f4:0f:b5:f7:dc:00:81:6f:83:
f7:79:bf:dd:37:df:ea:1a:47:27:38:4a:4b:36:58:c8:93:89:
c0:be:d2:ba:c9:96:5c:ea:40:d4:50:7c:73:4b:a3:1e:17:ab:
e8:1a:50:41:64:39:c5:a4:c8:49:60:3d:d4:e6:e6:81:69:e5:
35:07:24:53:9c:b7:c8:53:4d:9a:36:48:55:69:17:3d:8f:12:
fc:72:0f:04:e1:3a:dc:14:9f:52:34:f1:e7:83:04:35:38:9b:
33:5c:8e:ae:1e:35:b1:bd:c4:c2:55:34:c0:c3:d8:36:3f:08:
a6:33:f2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:28:52 2025 by rpki-client