
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666634333a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666634333a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: EkY2SUSQoLpCePURN7XApHR/Im96777Ng2UOPm9oIS8=
Subject key identifier: 6B:AD:7A:6D:D0:74:0A:58:89:E5:24:1B:2F:4E:EF:2E:97:D3:19:68
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 78E3FD4AD9EF72722DFCED4CFA1D5CF51C74FE85
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666634333a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 04:15:02 +0000
ROA not before: Tue 01 Jul 2025 04:10:02 +0000
ROA not after: Tue 30 Jun 2026 04:15:02 +0000
asID: 396968
IP address blocks: 2a0f:6287:ff43::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e3:fd:4a:d9:ef:72:72:2d:fc:ed:4c:fa:1d:5c:f5:1c:74:fe:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 04:10:02 2025 GMT
Not After : Jun 30 04:15:02 2026 GMT
Subject: CN=6BAD7A6DD0740A5889E5241B2F4EEF2E97D31968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:3a:36:42:f7:1e:56:69:37:48:7f:32:cc:
6a:c5:8b:a6:25:16:56:36:07:ec:35:1f:6a:c5:51:
f7:f3:e8:ac:73:99:fb:25:8a:80:78:0f:2f:32:05:
ce:05:f6:96:07:d6:c8:6a:8b:11:93:0c:5a:82:70:
12:fe:fe:8e:5d:ed:b9:bd:3a:4e:ba:43:0f:3d:05:
37:01:4b:84:2c:c0:dd:a2:22:ba:79:47:9b:0d:89:
7b:83:05:6d:f2:4b:5e:c8:31:59:01:03:02:fe:06:
63:71:c3:5d:09:99:71:2d:8c:f2:ef:57:b6:fa:39:
02:fb:bd:97:49:cb:b7:30:73:6c:f9:76:38:a9:d3:
c8:2f:ca:d0:b6:9e:59:3e:31:a6:73:ae:6d:6c:db:
19:fc:6a:e9:71:3b:e4:71:9c:f8:30:c9:aa:6e:f1:
22:76:44:b5:cc:f4:f0:e1:30:40:27:4c:05:83:c2:
48:b3:29:f4:58:66:21:9d:86:66:45:d2:fe:13:d5:
c1:9c:d2:a1:ca:24:12:06:b5:69:5b:4c:1e:70:52:
65:14:0e:1d:5e:cf:d6:53:51:cd:52:45:e9:1b:86:
81:17:7e:52:43:09:ac:d3:1a:ca:f2:22:d1:ed:8a:
b2:27:f1:36:93:3c:ba:23:d6:54:5d:95:9e:db:b8:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AD:7A:6D:D0:74:0A:58:89:E5:24:1B:2F:4E:EF:2E:97:D3:19:68
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666634333a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:ff43::/48
Signature Algorithm: sha256WithRSAEncryption
bf:5f:68:8b:b3:e7:6d:5a:b6:c7:1f:8d:12:15:f1:37:94:5c:
66:a5:57:02:0e:5c:37:c3:c9:e8:21:8b:49:d7:ce:54:de:1d:
b8:96:5a:bb:4e:17:bb:20:c9:96:bc:c0:e0:78:47:68:9d:2e:
5e:2f:36:82:20:09:a2:83:87:d8:7c:94:76:26:49:02:76:89:
94:49:b7:43:18:05:1e:34:cb:0b:14:d3:18:ad:1f:8f:fc:db:
4c:05:f4:f2:c7:69:3d:49:65:86:c0:e2:7f:0b:01:8a:3c:65:
3f:ff:92:d5:c5:bc:8f:79:5c:45:85:37:1c:ab:c2:fc:6d:a5:
ff:79:fe:d1:e8:7c:7d:48:64:49:02:a8:5f:d6:bd:4d:54:40:
bf:19:b6:2b:e9:1e:e7:83:76:ff:7b:6f:d4:5b:4f:30:be:07:
0c:c5:77:cf:1c:c3:1a:46:16:e0:9a:4f:f2:a0:fd:9f:9a:62:
e4:c9:c2:fe:bc:02:e9:f9:02:d8:8a:87:ab:bb:49:9b:af:ba:
a3:14:f9:b4:b2:37:6d:b2:d9:1d:b2:1a:8b:8b:f1:83:ca:00:
9c:eb:67:3d:bc:a8:51:c5:6e:ab:c4:a8:5a:d6:11:e8:79:2c:
fa:d7:af:60:b9:92:88:d5:7e:07:d4:3f:61:1d:d0:c6:e9:41:
21:f7:f0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:57:13 2025 by rpki-client