
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666531623a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666531623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: AaVFrumD6SktiNmRD3Ory+ECDXpitInY27BIMnvt7hU=
Subject key identifier: 66:C5:C2:C7:15:1B:47:F7:7C:52:94:3D:64:B2:4D:D3:F2:B9:DA:7D
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 071215753A65393BBDDAA736692935A36D123A93
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666531623a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 03:49:00 +0000
ROA not before: Tue 01 Jul 2025 03:44:00 +0000
ROA not after: Tue 30 Jun 2026 03:49:00 +0000
asID: 396968
IP address blocks: 2a0f:6287:fe1b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:12:15:75:3a:65:39:3b:bd:da:a7:36:69:29:35:a3:6d:12:3a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 03:44:00 2025 GMT
Not After : Jun 30 03:49:00 2026 GMT
Subject: CN=66C5C2C7151B47F77C52943D64B24DD3F2B9DA7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:dd:44:51:ea:7f:c0:41:ae:12:7e:7d:eb:
91:22:97:a9:2d:ee:31:ee:0a:01:ef:d4:f9:38:63:
91:d7:be:b8:8e:54:10:58:d2:b5:69:e4:52:23:ac:
a9:a5:54:60:3d:4e:21:20:fb:9a:45:d9:23:06:3f:
60:f3:de:a1:26:87:dc:d9:93:5f:f5:c2:ba:3b:a7:
cd:c2:a5:0e:e6:e2:32:3e:d4:e5:0a:61:c8:3b:f4:
5e:c1:dd:51:8a:c5:24:8e:22:b3:09:ab:e8:69:63:
db:67:9b:2c:0e:de:6d:0d:8a:75:c6:3f:4e:b5:a2:
05:85:b4:d6:9a:9e:56:df:97:35:af:bd:74:7a:71:
60:de:e8:58:eb:77:be:9e:8b:a7:e0:38:c5:b1:26:
bc:e1:0e:be:68:8e:12:73:a2:af:50:22:cb:19:11:
39:d5:a0:0f:96:cf:0d:77:5d:77:f2:11:cd:66:3a:
82:9f:ac:7c:0c:fb:f9:0d:49:80:0a:88:47:bf:4c:
73:d5:55:57:e4:22:a8:e5:5e:7a:e3:8e:ce:c9:87:
db:67:7e:58:56:e5:cb:c5:a2:ad:f7:f3:32:35:dc:
3f:99:b4:31:db:6a:84:50:04:4c:d2:4a:b8:a4:e0:
4e:3c:b7:e3:83:7f:1e:14:82:65:c9:77:cb:d1:33:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C5:C2:C7:15:1B:47:F7:7C:52:94:3D:64:B2:4D:D3:F2:B9:DA:7D
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666531623a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fe1b::/48
Signature Algorithm: sha256WithRSAEncryption
be:7c:2a:03:99:a0:71:7f:77:02:29:6f:09:55:14:4b:e4:25:
7a:18:12:99:5e:5a:20:7f:55:78:fa:87:c3:ae:ec:8d:55:52:
76:ba:64:7b:8a:3a:5e:a4:b9:39:d3:4b:7a:5b:fe:cd:3a:53:
b1:22:08:bb:40:4a:e9:12:43:5d:22:8b:4d:1f:b6:93:53:70:
a3:7e:5c:af:b7:7c:42:c8:ec:b6:a0:96:6c:4d:20:11:9f:64:
a0:05:41:7c:75:2c:f7:2f:80:22:b2:05:e6:20:f4:6a:9e:6f:
bb:ee:8a:97:e3:1a:84:49:55:7c:8e:fd:32:39:d3:83:fe:b6:
d7:0e:93:6c:7c:d4:a4:0b:a4:0f:a4:ff:5d:79:e3:6e:90:f5:
b3:25:99:0c:93:c8:6f:58:4a:3e:fc:95:f2:21:bd:cc:4c:1d:
e4:96:76:2e:ff:b2:01:3d:79:33:95:0a:81:82:83:27:39:56:
8f:2a:09:37:ba:11:7d:b2:32:1f:1e:50:f3:8d:01:8d:3f:dc:
cd:ee:33:dd:d3:cd:96:0a:22:fb:b1:64:b5:c8:44:06:94:32:
4d:5c:44:ab:db:b5:8e:da:42:b1:0b:d8:cf:bf:b6:d6:4e:36:
6f:70:9a:51:d1:b5:44:0c:c7:d9:c1:4b:59:1c:07:67:d8:8e:
85:b1:86:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:19:23 2025 by rpki-client