Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666661373a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666661373a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: MQr1b0M2ng9D0Q80Ri8CW3aapMTWgnatEjD8MWgR0J0=
Subject key identifier: F1:50:C6:9C:8F:15:D6:65:9B:26:E0:BF:7E:2D:D6:6D:B8:D6:AB:54
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 0CE891B49E598B76B84DC1C76DE0891B24D55970
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666661373a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 13:22:16 +0000
ROA not before: Thu 26 Jun 2025 13:17:16 +0000
ROA not after: Thu 25 Jun 2026 13:22:16 +0000
asID: 396968
IP address blocks: 2a0f:6287:ffa7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e8:91:b4:9e:59:8b:76:b8:4d:c1:c7:6d:e0:89:1b:24:d5:59:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 13:17:16 2025 GMT
Not After : Jun 25 13:22:16 2026 GMT
Subject: CN=F150C69C8F15D6659B26E0BF7E2DD66DB8D6AB54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:e3:45:00:db:36:27:03:32:81:05:fb:b7:
7c:cc:dd:e1:53:9d:75:c8:b0:f1:79:eb:93:cb:52:
6f:af:ff:01:3c:27:b3:9f:0f:2a:08:c6:c3:d8:10:
c5:0a:45:14:52:d7:f0:db:46:78:96:26:75:9b:5e:
1b:e1:c6:fe:17:78:32:1a:dc:9b:09:9f:61:38:ba:
71:18:53:4f:d0:4c:17:b9:a0:88:98:b6:73:00:ed:
92:25:a5:77:d3:82:74:e2:5c:7a:16:d1:d5:7d:91:
81:4f:94:c3:51:45:c7:dd:7e:e4:d4:d2:dd:5c:80:
2f:0c:7c:f6:88:4d:cd:f0:56:11:90:3b:59:43:d3:
37:1b:d8:1b:7b:bf:74:87:a0:1d:fa:bc:a4:90:1c:
0a:6f:80:11:b5:ab:c4:81:db:91:2f:9f:19:f6:54:
68:e3:2c:0a:20:3f:d7:d1:14:32:39:7c:9c:ea:65:
74:17:9a:e2:2b:e5:a3:d9:f6:a4:2f:d9:6c:4e:f5:
1f:b6:e0:ae:a5:d4:f1:23:be:86:f2:39:26:74:f8:
02:c0:cb:f2:21:71:0d:a8:89:5b:66:9e:be:c6:d6:
63:6c:89:48:ec:20:b5:1c:d6:5f:0e:18:eb:ad:44:
b5:68:4f:1e:fb:73:f2:1c:bc:19:ae:cb:6e:6c:15:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:50:C6:9C:8F:15:D6:65:9B:26:E0:BF:7E:2D:D6:6D:B8:D6:AB:54
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666661373a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:ffa7::/48
Signature Algorithm: sha256WithRSAEncryption
81:09:3d:28:2d:d3:e9:34:04:3b:34:13:36:42:8a:6a:29:be:
8f:ad:87:59:75:76:71:26:22:07:01:54:5b:97:ca:13:b2:0f:
59:4c:6f:56:e4:80:75:f0:f2:e6:94:0d:1e:e6:ec:d5:a4:6b:
d4:1e:7f:d5:4c:74:a1:91:88:a8:12:e6:4e:7b:d3:5b:6e:af:
7d:3d:e8:30:fe:fa:c5:a8:0e:63:3a:ca:68:50:af:bf:af:47:
a6:fe:48:5e:ff:3e:d0:4e:8b:58:d2:1f:ec:6f:bc:66:f4:25:
7b:1e:78:ae:b7:33:0d:ff:02:fc:49:f8:96:2c:64:45:b0:67:
37:f8:72:97:ba:f0:23:6e:b1:f4:ed:2a:cf:8f:f4:1f:38:53:
5f:31:8b:7f:51:41:5d:78:b4:b8:e5:f8:8e:20:a0:ba:71:50:
70:34:5f:fc:8a:29:33:49:15:31:5e:c7:e1:c6:a8:93:e9:82:
03:5e:3d:a0:7d:00:b8:df:9e:d8:6e:8c:bf:0c:a0:5a:4b:10:
aa:cd:5e:52:b0:b9:b1:7e:1b:ef:a5:88:70:03:23:80:b3:c9:
1b:18:ad:ac:7f:de:ec:dc:25:46:98:89:9a:d7:93:d9:58:23:
c7:36:8c:84:c1:d2:e5:88:6a:7c:7b:87:7a:25:83:26:06:d2:
71:57:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:49:41 2025 by rpki-client