Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666365393a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666365393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: PNrOwd7jRn2dwA1gmWbmI7/9c5GJSTLhEvyDCTO6TM4=
Subject key identifier: 70:8C:FD:32:EC:35:18:E5:95:38:BA:71:F4:D3:6C:03:04:F2:20:9A
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 59AC3AF48496CB2EA4607D74980442F381BE8CB9
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666365393a3a2f34382d3438203d3e20333936393638.roa
Signing time: Mon 30 Jun 2025 08:18:02 +0000
ROA not before: Mon 30 Jun 2025 08:13:02 +0000
ROA not after: Mon 29 Jun 2026 08:18:02 +0000
asID: 396968
IP address blocks: 2a0f:6287:fce9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ac:3a:f4:84:96:cb:2e:a4:60:7d:74:98:04:42:f3:81:be:8c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 30 08:13:02 2025 GMT
Not After : Jun 29 08:18:02 2026 GMT
Subject: CN=708CFD32EC3518E59538BA71F4D36C0304F2209A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:18:0d:e3:2d:52:de:dd:33:79:6e:c8:19:
af:78:10:aa:4a:9d:cd:1e:72:52:05:6e:0f:40:c0:
b8:99:50:bd:13:de:9e:6e:13:77:7e:9a:dd:0a:78:
78:89:be:2b:cb:eb:72:2b:bf:fe:2d:67:22:b8:ba:
02:79:93:88:6c:70:a9:03:71:35:f6:95:5a:3b:41:
e0:c2:72:6a:02:15:59:a0:10:6d:fc:f3:3a:f3:f5:
87:8d:82:76:f2:31:93:c6:69:ce:f3:9c:e2:25:c5:
2f:7a:18:c0:cf:f9:79:24:c1:7b:ed:0a:a6:49:d8:
e6:f0:a5:36:40:37:15:cd:1c:b0:2a:06:ac:36:0e:
5a:c7:59:ca:86:fb:67:91:0a:84:97:73:fd:80:1d:
a6:10:d1:e9:a5:86:0c:e6:89:64:00:f6:68:71:1a:
4b:a4:47:7f:75:0e:04:6c:74:7a:e9:e7:71:f4:64:
e5:c1:88:10:27:97:e2:55:59:7f:8a:d3:5e:f6:24:
0b:53:07:f4:af:c2:99:c8:04:43:7b:18:c2:d4:fb:
d4:60:3e:36:f5:ef:97:0e:26:46:fe:3f:8a:db:d4:
22:36:a2:4d:c7:04:49:0d:39:eb:82:49:a1:b1:e3:
5d:65:d5:e3:ce:8d:aa:66:a8:84:3f:08:31:61:87:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8C:FD:32:EC:35:18:E5:95:38:BA:71:F4:D3:6C:03:04:F2:20:9A
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666365393a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fce9::/48
Signature Algorithm: sha256WithRSAEncryption
94:6b:71:e6:93:6e:aa:3d:33:04:95:70:a6:f0:b2:8f:50:5c:
86:53:c3:79:c6:30:bb:a1:0b:2b:d1:48:95:15:cc:78:d5:e1:
e9:6e:06:87:dd:8e:a9:3a:c5:86:be:4b:fa:34:75:19:b7:35:
14:1f:28:f8:e5:9f:97:ba:ee:8c:18:3a:24:b4:b2:69:f8:d2:
39:0f:d0:50:66:f5:6c:6f:5b:fb:fb:5e:9a:0b:d3:b4:dc:b4:
a7:cb:e6:bf:f0:d5:e8:e5:91:76:23:1d:14:89:d8:30:e1:3b:
23:31:21:65:dd:b1:d6:d6:05:3a:e9:8a:31:14:8c:68:84:5e:
4c:8d:2a:20:15:10:3f:83:7a:54:32:77:ea:f7:ca:6b:5e:8e:
2d:47:32:c7:e6:56:ef:8a:2d:7d:68:91:b3:fd:01:23:b4:e8:
07:40:cb:52:3c:90:05:a4:af:c6:8a:62:dd:b8:d7:e5:9d:7b:
8b:28:1a:cd:60:93:b5:ce:2a:7b:2f:d0:e7:6e:af:89:59:5b:
7e:1a:d1:de:93:53:82:60:35:b8:4f:88:25:b5:ec:9d:18:9c:
63:75:3c:a8:7c:d0:cf:d1:b9:4c:7a:cf:3e:da:e9:0a:d3:34:
72:4b:1c:99:7a:7d:50:40:fe:64:80:b9:dd:94:a8:63:17:d8:
62:42:9a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:50:55 2025 by rpki-client