
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666564343a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666564343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: d8FPTf3FPgfKTLG4EY1tXRz5Pe0jvOI/PRvv9dSqiuo=
Subject key identifier: F3:7F:FD:3C:46:7B:6A:51:BC:38:FA:EB:4F:63:D6:DD:36:8F:99:F5
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 19DA7203E63210D8506FA98A8A30623891F02679
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666564343a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 04:18:01 +0000
ROA not before: Tue 01 Jul 2025 04:13:01 +0000
ROA not after: Tue 30 Jun 2026 04:18:01 +0000
asID: 396968
IP address blocks: 2a0f:6287:fed4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:da:72:03:e6:32:10:d8:50:6f:a9:8a:8a:30:62:38:91:f0:26:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 04:13:01 2025 GMT
Not After : Jun 30 04:18:01 2026 GMT
Subject: CN=F37FFD3C467B6A51BC38FAEB4F63D6DD368F99F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:ec:be:5f:0f:82:8c:ba:2e:e9:46:3e:69:
b3:c9:29:c8:5d:6d:5f:0b:0a:5b:36:1d:cb:17:32:
97:f0:e3:33:e0:fe:35:ef:87:8a:00:9b:74:ef:83:
a6:8e:37:00:7c:03:98:2e:73:05:eb:82:32:3e:29:
40:5e:ec:39:57:fa:f5:77:cc:79:ef:05:61:16:fa:
f3:ce:d4:bd:de:d1:ac:40:c3:2b:85:70:2b:e9:be:
d4:2e:33:b1:64:14:72:bc:a9:6d:d9:29:74:56:10:
d3:e5:4d:0f:b5:fa:2c:47:69:97:3e:00:0b:7e:ec:
f9:0c:a8:68:fb:e9:c2:b2:b5:4d:b8:0b:26:71:c8:
67:65:0f:d9:fc:fa:76:6e:16:8b:6c:fa:10:69:d1:
ab:75:e0:40:da:96:62:37:7e:b8:b6:1a:da:49:8e:
11:d0:56:d0:65:52:8f:38:2c:01:47:8c:49:64:c3:
4e:30:1f:ac:9d:e8:ce:6e:47:ad:a8:98:52:b8:a3:
cb:e2:dc:5f:21:8c:92:8f:d8:a3:d2:01:3e:dc:fc:
1b:2d:72:e8:ad:12:5b:b9:40:6f:69:19:84:67:af:
1d:2b:65:86:69:1f:3e:90:9d:f2:2d:b3:3c:56:c3:
a0:27:74:fd:fc:b7:a3:0a:2e:4d:af:d0:ae:ef:cb:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7F:FD:3C:46:7B:6A:51:BC:38:FA:EB:4F:63:D6:DD:36:8F:99:F5
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666564343a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fed4::/48
Signature Algorithm: sha256WithRSAEncryption
c0:04:7c:24:f2:12:a5:30:5f:c6:4d:99:04:84:31:17:e5:60:
95:17:a7:93:7b:6f:fc:c9:57:8f:5a:88:ae:db:82:3e:6f:b8:
69:6b:78:61:f4:f7:84:14:d1:59:d4:87:88:2d:9a:eb:5f:5d:
68:5c:ea:f1:3d:f3:2c:f1:9a:d6:25:b6:4d:54:57:72:12:b3:
3b:75:68:e2:47:34:b2:32:36:0d:40:80:eb:54:ea:00:69:62:
db:43:ea:86:0c:31:19:6f:20:c1:bf:ba:83:1c:de:df:e6:3a:
1d:0f:bd:c7:10:8c:03:c2:5a:ee:cf:41:68:4a:ca:f1:86:08:
87:a2:32:d7:f6:a9:e1:51:b5:f6:a1:8a:4a:ee:c1:71:b0:2d:
c2:2a:5c:72:6a:fd:35:52:cc:92:c0:d6:57:2e:f2:3e:d1:03:
a6:fc:a1:34:85:d3:9d:bc:d6:a8:75:dc:8f:41:c0:d2:9c:f8:
c8:94:14:85:e1:36:46:01:75:f8:c8:00:07:f8:07:fa:c5:7c:
9c:8c:7b:b2:89:4c:5e:7d:35:f3:af:8c:bb:18:ac:bd:13:1d:
18:23:1a:48:16:b0:da:71:83:ec:e0:29:61:84:c1:4c:7a:0d:
5e:e1:ba:b8:ef:b6:e2:69:d3:d2:c3:52:c4:54:87:ba:8f:ef:
35:11:17:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:13:14 2025 by rpki-client