Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666462363a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666462363a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 9XMegRE4fdD0vOlFetChtj7Wm/sudTrZbR2/vQGiL6g=
Subject key identifier: 9D:F2:C7:8C:67:A9:A4:58:C1:2A:53:65:A2:C3:59:B8:5A:B4:FA:4E
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 19E55D50722B0BC3AE74DF6B7A9D7277995FDD45
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666462363a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:57:56 +0000
ROA not before: Thu 26 Jun 2025 12:52:56 +0000
ROA not after: Thu 25 Jun 2026 12:57:56 +0000
asID: 396968
IP address blocks: 2a0f:6287:fdb6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e5:5d:50:72:2b:0b:c3:ae:74:df:6b:7a:9d:72:77:99:5f:dd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:52:56 2025 GMT
Not After : Jun 25 12:57:56 2026 GMT
Subject: CN=9DF2C78C67A9A458C12A5365A2C359B85AB4FA4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:cb:81:7f:bc:b1:ac:78:5c:0f:ae:78:f9:
af:d9:d8:04:19:94:fd:0e:26:a5:76:ad:ef:0b:68:
fb:d0:0c:6d:2b:f7:75:34:89:1c:b7:23:04:6a:3c:
57:b2:ca:aa:ef:94:9c:eb:48:61:96:79:cb:39:15:
e1:a3:5a:c9:2d:e3:99:0b:69:78:3d:3e:51:49:b7:
1a:d0:61:6b:c2:2d:d5:89:77:31:43:ef:1d:96:e0:
ab:5a:c5:d9:90:83:a7:d5:d4:76:bc:9a:db:ee:49:
c9:64:ee:06:3a:5f:93:5a:b9:ec:c9:99:50:75:25:
c3:28:bb:42:7f:69:37:c1:a5:ad:0b:8e:af:a0:a7:
0c:9c:98:74:ad:fe:45:d8:d6:90:19:45:c8:e3:dc:
cc:49:d8:d5:1f:b3:74:f2:0b:62:3b:ec:ad:21:35:
f9:d5:c8:f9:fa:f3:0c:be:b0:4e:10:60:20:4c:4e:
e8:0a:5c:c8:3f:e2:70:b8:f7:5f:64:87:4b:0f:c7:
9f:45:49:27:62:24:da:e3:aa:c1:77:04:be:76:00:
b4:ff:e8:d4:9b:94:af:7e:95:bb:e8:ec:08:1a:e5:
97:24:c0:1a:6d:d5:a5:aa:9c:69:72:b7:33:3e:79:
b0:cf:cd:cc:f0:b3:a3:c2:c4:9f:9c:13:8e:6b:10:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F2:C7:8C:67:A9:A4:58:C1:2A:53:65:A2:C3:59:B8:5A:B4:FA:4E
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666462363a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fdb6::/48
Signature Algorithm: sha256WithRSAEncryption
b3:8b:54:8a:2f:90:d2:d2:2c:fa:70:34:7b:de:fc:12:a3:c1:
d8:15:99:28:74:8a:46:25:e8:e3:ee:c5:fa:ed:c3:83:fd:8f:
bc:3a:83:b3:7f:02:e0:a7:a0:cc:92:62:79:05:42:ee:34:e9:
de:e6:37:a2:85:d6:38:b6:fa:3d:26:e7:db:49:49:fd:8b:8f:
83:ca:f2:73:ff:9d:67:4b:7f:74:28:5f:22:d7:9b:5f:c6:30:
77:f9:43:41:8d:49:a0:a1:d0:40:a1:c2:03:18:a9:9a:aa:56:
d6:d3:27:57:d0:62:43:94:d5:db:74:54:b3:f8:d8:aa:68:f9:
1a:5c:ca:9b:b6:3f:8e:ca:0d:50:02:44:ae:ed:9e:c3:a4:29:
57:0b:91:57:52:eb:87:b9:6e:14:91:a1:35:f3:ef:8f:92:21:
7d:a6:18:72:37:58:67:ec:86:96:6b:f6:19:d1:7a:29:bf:55:
d6:ea:2f:74:05:f9:c2:88:ac:27:e4:af:6f:24:bd:ab:fe:4a:
44:cd:4e:f2:10:dc:2b:16:1c:7c:1d:d6:cb:ab:a9:1a:8d:43:
1a:af:21:e8:7a:b8:47:ea:33:9e:36:b1:b8:a2:b9:5d:08:61:
54:13:bc:e2:74:46:a3:a4:45:ea:16:71:2c:0f:bf:4f:41:4c:
ad:e9:5c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:41:54 2025 by rpki-client