Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666265323a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666265323a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: r1qMC2dgMTd3y38qr3UUIMvaBtJjztRFoASD2kE3W2w=
Subject key identifier: 8B:85:B8:1D:9A:2A:1D:19:20:0F:17:28:87:32:8D:28:8D:98:C7:FE
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 0335C2521783F6C4BC10C145DCE57BBDF6869BE4
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666265323a3a2f34382d3438203d3e20333936393638.roa
Signing time: Mon 30 Jun 2025 08:18:02 +0000
ROA not before: Mon 30 Jun 2025 08:13:02 +0000
ROA not after: Mon 29 Jun 2026 08:18:02 +0000
asID: 396968
IP address blocks: 2a0f:6287:fbe2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:35:c2:52:17:83:f6:c4:bc:10:c1:45:dc:e5:7b:bd:f6:86:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 30 08:13:02 2025 GMT
Not After : Jun 29 08:18:02 2026 GMT
Subject: CN=8B85B81D9A2A1D19200F172887328D288D98C7FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:2c:0a:8f:fe:f8:05:1e:ce:0c:58:40:65:
85:53:3d:64:12:de:0f:55:4a:b3:2c:0a:5a:74:68:
d0:b3:42:4e:d5:b6:a8:bd:76:4f:fe:11:8e:9f:0d:
96:ef:cd:5f:a6:bf:d0:8b:39:d2:d2:ac:46:2e:7a:
a9:ec:c4:c8:e9:d8:c0:9b:97:ea:1b:68:50:2a:6f:
4d:b6:7f:97:d5:b5:8e:c3:8b:1a:f6:6a:dd:75:0a:
a8:42:d3:e6:7d:68:ad:26:51:c2:51:dc:47:66:09:
51:99:f3:ac:7b:9a:d8:c5:f4:a1:d1:f1:07:d3:dd:
e3:9d:30:e4:6d:17:61:3b:1f:71:0d:b1:b0:f5:9f:
a2:1f:6e:d9:a7:c5:92:b4:9c:8e:1d:65:2b:70:8a:
29:8c:f2:96:40:4c:70:2a:0c:04:28:f1:1e:4f:4c:
98:06:8b:73:bd:af:d4:34:8f:24:5a:56:31:82:71:
b9:de:06:22:be:7e:2f:1e:9d:1d:ce:97:85:11:c1:
f3:93:83:4c:0d:0e:90:f4:92:3a:76:a8:6f:b2:33:
88:23:d6:5b:de:77:a8:6f:7e:f4:d0:aa:6f:9c:bb:
9b:25:62:96:3a:5d:d9:ca:af:17:c7:ef:6f:48:fb:
9d:ea:58:38:2f:11:78:89:80:56:e4:17:f9:34:3b:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:85:B8:1D:9A:2A:1D:19:20:0F:17:28:87:32:8D:28:8D:98:C7:FE
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666265323a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fbe2::/48
Signature Algorithm: sha256WithRSAEncryption
24:64:0c:3e:02:1d:9d:c5:1b:c2:a9:2a:15:81:97:70:eb:1f:
92:96:b5:c5:e7:a4:d7:88:1e:a3:68:a9:0f:52:44:5d:dd:ea:
22:9d:e2:b8:8e:99:34:6b:7f:de:77:5c:73:5e:04:04:74:94:
5f:17:15:d3:83:a6:e8:a4:5a:f1:87:4c:be:a9:c2:5d:60:c5:
0c:48:cc:b1:be:af:47:f8:2f:8b:ba:ab:2c:1a:fa:35:d6:1b:
94:9a:7d:c6:87:7f:cd:6e:b8:4b:0a:12:c8:9c:03:49:fb:f2:
c8:ac:8e:a0:bc:53:85:67:db:12:f0:5f:d5:5f:6d:78:37:93:
a4:fc:7b:dc:ef:fd:c6:c8:c8:a5:e7:04:9b:fe:16:72:52:18:
d6:f2:21:45:b0:4c:3b:d9:22:81:a8:a2:3b:34:45:d9:e5:0e:
2e:c1:10:b5:99:e6:e3:07:31:59:e6:b5:89:a7:66:58:12:bc:
e6:ff:64:71:b3:d4:04:fe:a5:90:a0:91:d2:53:f5:a0:b5:74:
6b:ee:ed:ba:18:37:bd:19:ad:c8:42:73:3a:db:6e:32:87:26:
84:56:df:7b:e9:c0:2f:5e:f7:b1:6e:58:60:29:46:bd:57:b9:
cd:69:23:99:6c:9d:b1:cf:45:a1:7b:7f:16:1f:59:94:da:f9:
15:d9:da:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:26:41 2025 by rpki-client