Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666532623a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666532623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: GIQMTLERoQBldGq78NNCdYUR5GjDdT+2unxOpZ9L5rw=
Subject key identifier: CD:BC:F0:59:12:C0:EB:E1:74:57:9A:96:06:20:62:A3:0B:CE:BD:58
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 4CD0EBFF4C95F1198BCBDEEAD81FD2B7F7F2B447
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666532623a3a2f34382d3438203d3e20333936393638.roa
Signing time: Mon 30 Jun 2025 08:18:04 +0000
ROA not before: Mon 30 Jun 2025 08:13:04 +0000
ROA not after: Mon 29 Jun 2026 08:18:04 +0000
asID: 396968
IP address blocks: 2a0f:6287:fe2b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d0:eb:ff:4c:95:f1:19:8b:cb:de:ea:d8:1f:d2:b7:f7:f2:b4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 30 08:13:04 2025 GMT
Not After : Jun 29 08:18:04 2026 GMT
Subject: CN=CDBCF05912C0EBE174579A96062062A30BCEBD58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:e2:01:74:da:63:d4:ea:66:e9:14:e7:fe:
db:ac:17:ce:4c:1e:5b:77:c3:67:02:59:5b:c1:53:
1e:94:90:09:6b:31:61:b9:5b:08:b1:00:6b:f5:8a:
5c:dc:5d:71:ac:69:92:76:ab:36:e9:73:fa:d2:f4:
76:be:f2:05:20:76:32:a5:a3:e2:93:9e:bd:17:c3:
33:b6:0f:46:a2:ee:13:83:f7:65:58:67:c4:07:c0:
67:bf:e0:ab:4d:be:f7:77:61:8c:3d:e6:8d:11:f5:
5e:5e:d5:78:ae:07:5d:72:62:03:c0:4e:9f:58:89:
02:e2:04:4c:d2:86:63:48:3c:96:4d:d3:81:e9:d8:
35:37:ca:bb:e2:a6:aa:9b:4e:09:d2:fd:54:fb:6f:
84:f4:a5:9f:dd:cc:87:bd:a4:ad:27:0b:25:7d:c2:
75:41:ad:c5:41:05:5f:da:21:14:4a:1c:47:06:04:
e6:3d:76:a0:7b:cc:55:a8:94:7d:05:5d:13:e1:1b:
4b:90:df:25:40:c8:d1:76:a2:e2:ed:f2:98:cf:a1:
de:ad:84:38:35:85:5e:ce:54:39:cc:4c:9f:e5:ff:
c1:33:78:47:76:ad:8c:b1:89:d6:29:9c:e7:03:ff:
10:90:62:b5:37:3f:c3:a8:99:cb:7e:47:16:55:f9:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BC:F0:59:12:C0:EB:E1:74:57:9A:96:06:20:62:A3:0B:CE:BD:58
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666532623a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fe2b::/48
Signature Algorithm: sha256WithRSAEncryption
0a:9d:e9:70:21:af:af:51:b1:91:e5:33:0c:8f:6c:e3:20:75:
85:e0:cd:a2:a0:8a:cd:d1:b0:bc:54:d4:5d:38:b1:90:c0:ef:
97:fa:41:f8:9a:02:f1:96:75:8b:6d:7f:c8:33:66:85:8d:41:
57:e0:91:fe:ff:8a:94:6d:00:a4:d0:05:97:0a:95:dc:a5:ac:
2e:c3:1d:a5:90:11:ec:24:e5:28:b7:7f:17:cb:a5:65:f4:96:
eb:a5:bf:21:7f:33:3b:7b:59:4b:ea:23:3a:d9:3b:74:c7:01:
2e:df:14:98:eb:91:1e:77:ef:cf:8e:23:36:9d:0e:9c:2d:6f:
f3:f6:24:fc:df:d6:5c:13:74:3b:3f:90:43:29:32:b9:c6:ba:
fc:9c:22:d5:4e:a6:bc:92:4b:b6:ed:ba:52:56:88:06:d1:5a:
47:c6:7a:83:0e:24:aa:db:dd:5e:1d:f5:05:19:09:4f:27:83:
b3:33:13:28:14:f5:06:33:ba:86:4d:60:93:96:fb:d7:9b:d0:
9c:25:48:13:4a:20:9e:32:ed:b8:20:a9:53:b5:59:49:a2:df:
e2:fb:6f:b2:d6:c1:5d:5f:c9:d9:cb:f1:dd:22:4d:1e:8b:8a:
a1:80:72:82:2c:65:6b:bd:c2:5f:36:b7:ff:de:93:06:62:69:
c7:cc:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:14:53 2025 by rpki-client