
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666337383a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666337383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: a5VqHE+85dDiG5Q6Jdz2KyvTDyfBYJnicjwW7BRZy7I=
Subject key identifier: 26:D8:0A:01:2E:D8:AF:9C:79:37:AB:3D:C4:D3:15:30:1E:CE:9E:39
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 4BBCAC533334D1A59EAC182CA13FC3DB7AEAFBB8
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666337383a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 04:15:01 +0000
ROA not before: Tue 01 Jul 2025 04:10:01 +0000
ROA not after: Tue 30 Jun 2026 04:15:01 +0000
asID: 396968
IP address blocks: 2a0f:6287:fc78::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:bc:ac:53:33:34:d1:a5:9e:ac:18:2c:a1:3f:c3:db:7a:ea:fb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 04:10:01 2025 GMT
Not After : Jun 30 04:15:01 2026 GMT
Subject: CN=26D80A012ED8AF9C7937AB3DC4D315301ECE9E39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:17:c4:75:43:0e:6f:2d:28:5c:f3:b3:74:
ea:19:76:1e:21:f4:d3:75:4d:83:04:69:99:d6:01:
e1:bf:39:34:0d:a2:9e:2d:0e:0b:c9:7a:a2:80:5b:
d2:46:a6:25:72:85:6b:f0:2c:cd:d8:d8:6d:55:33:
25:06:fb:e3:56:a4:ef:d2:cf:53:f4:6e:1d:f0:6f:
0c:17:2e:11:ab:60:a0:dc:a6:39:dc:68:37:99:fe:
2f:ab:f2:25:1b:e3:1b:d8:c7:5f:1b:63:2f:1f:4e:
a7:63:d1:c6:e4:fb:72:2e:e8:9e:91:0d:8a:a9:7d:
c7:95:69:60:11:bb:09:83:23:a9:bd:43:90:c4:c6:
ac:3f:f8:46:b5:c4:db:48:36:61:98:37:c1:fa:87:
92:66:cd:f9:b5:11:78:91:e4:e9:04:78:91:e8:e4:
04:dd:5f:b0:9d:73:5a:e0:f6:36:d7:a8:ff:01:5d:
08:ca:b7:04:84:4d:40:45:dd:7c:a6:2a:68:02:3e:
07:b6:43:78:7a:03:40:88:1b:0e:cc:9f:96:35:d7:
e9:d2:78:13:b4:5e:7f:26:9b:b5:35:c7:17:7d:d7:
74:f1:70:54:6d:60:61:7a:b7:41:3a:cb:07:ac:48:
7b:4a:49:e6:4b:fc:11:fd:6f:6c:c8:b3:51:ca:64:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D8:0A:01:2E:D8:AF:9C:79:37:AB:3D:C4:D3:15:30:1E:CE:9E:39
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666337383a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fc78::/48
Signature Algorithm: sha256WithRSAEncryption
73:1a:e1:8d:74:1e:a3:37:82:51:bd:9c:3a:9d:ef:a7:23:cc:
59:ee:9a:b9:b8:24:ce:9f:14:4b:9e:d0:75:e1:b0:37:c5:6c:
d9:a5:d5:a4:6a:70:0c:f9:5c:ec:d3:4a:80:2a:02:43:e1:6c:
08:35:5f:fc:02:7b:98:40:b4:1d:b0:2d:86:2a:5c:8d:81:3d:
66:77:c8:e9:cb:a9:6c:37:a3:1d:a7:62:7f:8f:e6:71:13:38:
c3:47:d1:7c:cf:27:df:b4:8b:c9:16:1f:3e:c6:c8:7f:02:c7:
d4:cb:85:31:30:a2:0d:31:87:e6:3e:6e:b1:40:60:57:a0:72:
d9:0d:03:4d:27:b2:10:5e:3c:6b:6f:e3:df:31:e6:28:66:8a:
96:1a:a2:48:aa:7d:e7:b7:63:b4:f8:dd:b4:7e:e9:ce:d8:8c:
68:92:c1:3a:4f:ef:c1:4f:a7:8c:ce:8f:6f:cc:08:4a:9f:42:
36:73:59:0e:b5:7d:14:b1:b3:39:55:df:26:5f:b9:ae:ff:33:
56:f8:23:00:45:12:ce:cb:30:6c:21:ef:1a:74:b7:ed:03:42:
e8:40:7e:6e:cd:e8:db:75:6f:56:ba:94:40:14:bd:e7:ad:cd:
45:df:c5:86:97:ff:4e:bc:a4:86:fd:c1:7e:42:db:31:36:a6:
c9:e2:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:44:12 2025 by rpki-client