
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666663623a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666663623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: EqBIb3X+8eHo+gPzkb+edMxWfzbVPx38KSg4dUeq/0Y=
Subject key identifier: 67:50:8F:64:8A:25:27:7E:1D:F0:53:1F:23:D9:D3:18:9F:D7:5B:7B
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 6C99C8DE45BF921AA6BDFEA1AB7D1F2A021F5F35
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666663623a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 03:28:21 +0000
ROA not before: Tue 01 Jul 2025 03:23:21 +0000
ROA not after: Tue 30 Jun 2026 03:28:21 +0000
asID: 396968
IP address blocks: 2a0f:6287:ffcb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:99:c8:de:45:bf:92:1a:a6:bd:fe:a1:ab:7d:1f:2a:02:1f:5f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 03:23:21 2025 GMT
Not After : Jun 30 03:28:21 2026 GMT
Subject: CN=67508F648A25277E1DF0531F23D9D3189FD75B7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:50:7e:a6:30:ef:5b:f6:39:4e:24:e2:e5:
00:bb:23:26:67:8c:48:0c:c0:29:fd:59:be:0a:0c:
a1:a5:48:99:16:bb:fd:35:68:3b:62:e1:32:7b:2e:
d3:28:5b:44:58:e1:f6:4d:c7:6c:e2:d5:3b:1d:09:
5c:18:15:2a:0e:f4:d0:39:1a:05:8b:0a:9d:a9:d5:
7c:60:6e:73:f0:69:0b:20:ed:37:40:e4:59:0b:61:
9f:61:75:14:f8:b5:5e:48:6a:f2:61:44:0e:88:77:
f2:12:10:e3:ab:99:d0:68:86:e3:56:23:0b:c9:a6:
36:79:b8:fd:9b:70:80:fb:2a:09:c3:17:c1:d2:59:
e4:bf:9c:c2:a7:aa:38:e5:9c:96:39:5f:3b:a8:c5:
de:5f:45:ed:97:35:4c:d9:2f:10:75:c9:8e:ed:7c:
a4:cb:34:c7:c5:13:dc:ab:05:97:1e:22:0d:1c:51:
4b:01:1c:c3:2f:a4:21:e2:77:78:e1:ae:a7:54:e9:
2b:88:38:3c:29:7e:fa:f3:0e:1c:15:b1:09:99:b4:
2b:10:42:11:42:49:48:c7:70:ad:a4:6a:c3:c5:d9:
a9:5c:86:59:60:68:e1:d0:4a:36:ed:b6:8d:cd:20:
cd:c6:9c:ef:e6:fe:12:12:c5:78:9c:45:08:6b:b3:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:50:8F:64:8A:25:27:7E:1D:F0:53:1F:23:D9:D3:18:9F:D7:5B:7B
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666663623a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:ffcb::/48
Signature Algorithm: sha256WithRSAEncryption
bc:1e:6c:af:c3:34:55:89:a6:7f:58:bd:3f:05:88:f4:b2:ad:
d3:9a:10:c6:f3:0a:f2:81:87:c8:56:8b:c1:72:cc:25:ec:84:
fd:cb:07:bc:88:95:02:e4:57:3b:6f:e8:36:c9:c2:60:d3:69:
b1:8f:67:ae:ab:2e:b1:1d:8f:92:34:d7:d9:d5:01:d7:97:73:
11:66:7f:66:a1:e0:03:e4:a3:69:c2:aa:9a:c4:90:3b:ae:de:
2d:de:e7:52:a9:b8:e9:6c:72:4a:a0:fa:23:7a:0f:d6:80:c1:
61:16:2c:0f:a9:f8:a1:c4:69:d1:d3:6c:00:53:00:92:08:38:
94:fe:be:50:68:49:81:da:45:07:68:fb:14:a3:3d:27:95:ee:
a2:dc:73:50:5c:c2:8b:1e:bd:c3:34:5d:a1:cf:8e:0c:45:5d:
f8:17:0f:9b:95:b0:e5:13:05:6f:2f:d7:16:68:df:30:ef:bd:
10:cf:64:56:78:94:58:d4:64:35:2c:43:ba:ef:bd:a1:85:ee:
d6:ea:98:c0:c8:53:84:ae:f9:a0:6d:14:0e:cb:c6:30:f7:19:
e3:e3:91:39:e3:f8:b7:6a:95:e1:03:b6:10:04:39:de:d4:40:
97:65:fb:3a:d6:ae:14:d1:18:9c:e3:3f:5f:6e:5f:12:1b:4a:
b0:3c:e6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:42:35 2025 by rpki-client