Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666663363a3a2f34382d3438203d3e203136393039.roa
File: 326130663a363238373a666663363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: a2tJG8EzdU+YbNTQkDYRd5pLF9IX6Q9Wj2cylzNdOTI=
Subject key identifier: EE:82:87:20:CB:C4:F6:2D:4C:34:2F:AB:5A:A5:DB:96:F9:1B:97:1C
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 584BEC750C7A457C74FD7413A9E7759971F200B0
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666663363a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 26 Jun 2025 12:10:55 +0000
ROA not before: Thu 26 Jun 2025 12:05:55 +0000
ROA not after: Thu 25 Jun 2026 12:10:55 +0000
asID: 16909
IP address blocks: 2a0f:6287:ffc6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:4b:ec:75:0c:7a:45:7c:74:fd:74:13:a9:e7:75:99:71:f2:00:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:05:55 2025 GMT
Not After : Jun 25 12:10:55 2026 GMT
Subject: CN=EE828720CBC4F62D4C342FAB5AA5DB96F91B971C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:54:d3:5b:3e:15:ae:00:98:76:be:c5:f8:
85:f7:7d:80:25:b0:0e:56:7d:2d:60:c9:e8:06:1c:
18:6e:1d:3f:f5:28:bd:a3:4b:55:7d:9f:eb:5f:20:
16:d3:5f:dc:0e:5b:d1:74:1e:31:16:64:d1:58:7b:
81:cc:80:0e:2b:9f:77:25:5c:cc:8e:fd:99:6b:42:
e6:f7:cf:56:5d:b1:0a:70:ca:6a:e4:9c:85:2c:07:
c4:82:62:82:b8:c4:55:39:c7:b6:86:fc:92:64:70:
cb:29:99:b4:4e:63:5d:11:a3:67:32:e1:93:8d:52:
c6:9d:b9:25:c0:41:83:a3:b8:a4:92:25:e9:d4:01:
39:c7:ec:88:d1:8a:45:be:af:7d:92:67:c1:db:c7:
1a:48:a1:cd:84:62:71:79:13:2e:86:81:ed:6f:7b:
ef:49:78:d4:b0:96:20:1f:2b:0a:4b:d6:1f:9a:1a:
72:b9:6f:d4:2e:bd:50:b7:5e:f7:14:1b:71:04:90:
c0:ef:10:a9:78:60:0f:70:ac:ff:f7:12:6d:64:f6:
17:f5:97:6c:4e:a2:d5:45:10:34:20:1c:4e:08:64:
d0:d9:1a:24:35:91:47:51:1e:e9:a9:3a:64:b5:3d:
29:5e:37:32:ec:e0:d4:07:9a:4d:6d:0d:54:f1:3a:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:82:87:20:CB:C4:F6:2D:4C:34:2F:AB:5A:A5:DB:96:F9:1B:97:1C
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666663363a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:ffc6::/48
Signature Algorithm: sha256WithRSAEncryption
22:6f:f4:6c:df:5e:3f:6e:45:b3:cc:cd:5f:67:3a:c9:1b:59:
2e:df:1c:e9:7d:5b:29:09:7f:69:57:dc:df:6a:b2:78:82:9e:
18:a6:76:66:66:ab:a7:0e:58:4f:ad:01:e8:ed:54:dd:d3:ce:
10:1c:03:50:87:96:a5:1d:4d:22:e3:ab:3e:ad:23:1a:09:5e:
5e:08:d6:0f:39:91:98:c9:05:67:bf:51:81:f9:cc:cd:2a:91:
86:48:23:0a:20:e8:d2:33:b3:5f:5b:6a:89:9f:4f:ed:a7:d7:
39:6b:53:0c:f9:11:57:7b:cb:21:72:65:e3:d5:41:4f:c2:5a:
df:4d:d2:b1:e1:29:dd:a5:f6:9e:81:78:3f:30:34:96:6e:9e:
f8:f6:e1:82:38:3f:88:1c:81:d0:e4:d3:e7:a9:33:2c:a0:89:
e2:6a:43:e7:74:04:87:87:88:d1:46:df:09:01:fe:39:82:ac:
33:d9:ea:f5:e8:1e:a8:b3:ec:d5:ca:56:5d:96:3b:67:bd:4a:
35:d9:76:58:fb:ef:83:76:b9:90:cf:6e:8d:a9:ce:b5:5d:1a:
95:6f:66:2c:55:6e:aa:1d:5e:d8:f6:b4:0e:b3:1a:95:ed:fc:
3c:f7:07:b4:4d:97:ff:f2:c2:90:f0:77:30:50:85:35:2b:94:
99:30:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:44:35 2025 by rpki-client