Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: VAvqu/lb8VsJ7sSrbkltPD1npwzX8fZVTZUE3O2FCgI=
Subject key identifier: F0:D2:02:5E:48:B7:1F:BA:46:D6:98:A4:DB:C6:59:56:12:3A:68:90
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 5286ED18E5E51EF87ED53A1A7EF775E28B308207
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:09:38 +0000
ROA not before: Tue 01 Jul 2025 17:04:38 +0000
ROA not after: Tue 30 Jun 2026 17:09:38 +0000
asID: 396968
IP address blocks: 2a0f:6287:edd4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:86:ed:18:e5:e5:1e:f8:7e:d5:3a:1a:7e:f7:75:e2:8b:30:82:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:04:38 2025 GMT
Not After : Jun 30 17:09:38 2026 GMT
Subject: CN=F0D2025E48B71FBA46D698A4DBC65956123A6890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:70:a8:3d:fa:03:a2:a5:79:e2:ca:c4:c7:
4a:6e:39:e7:ba:83:b1:bb:5c:bd:91:e1:a1:4c:ee:
de:0d:21:0f:58:8c:be:10:60:6f:7d:3c:e3:77:34:
96:83:4f:26:ba:4f:e7:f8:4f:4e:f6:93:e2:52:bb:
10:7b:63:88:6a:01:c0:6f:86:33:aa:ee:8c:63:3b:
fd:c2:e0:a1:f5:77:5b:7a:7a:f2:85:9c:25:59:a4:
f5:0c:e6:3f:d4:c5:f8:5f:e3:91:16:b3:87:a8:40:
a3:dc:a1:9d:cc:ab:4c:a7:8f:2e:c7:e1:9b:c6:1e:
95:b3:b2:3b:78:c0:85:dd:e7:4e:b6:32:e2:e6:13:
47:e7:07:00:e1:25:4c:3f:6c:53:71:ab:57:63:af:
4a:2e:01:f4:fa:7e:80:42:1d:56:93:8b:b7:d1:a1:
03:ab:1a:20:c1:9f:de:39:25:08:76:25:2a:06:5e:
5b:a7:d3:89:6b:67:34:9b:de:e1:c1:e0:2d:ee:50:
58:23:b7:5a:05:83:8d:21:f3:7a:0f:fb:63:6b:3d:
87:b4:6a:3a:28:ea:c3:44:ea:5f:0b:55:49:73:c9:
1c:c3:21:8c:c3:f2:d7:26:81:59:4b:98:7f:3b:9f:
7b:7b:c7:1e:f1:19:be:76:8a:0b:cb:c5:db:a4:a0:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D2:02:5E:48:B7:1F:BA:46:D6:98:A4:DB:C6:59:56:12:3A:68:90
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:edd4::/48
Signature Algorithm: sha256WithRSAEncryption
1b:87:e9:1e:13:0a:e4:a1:6c:b4:13:39:f9:24:97:5d:f4:f2:
88:b9:ef:b0:90:67:d2:11:0e:70:54:df:08:cf:e6:c3:85:49:
70:8f:e2:ee:74:41:53:34:b9:3e:09:65:d1:2b:82:0d:46:bc:
81:3c:b0:01:44:66:90:f4:fc:42:a5:da:53:b3:f7:ca:47:9d:
4f:e4:ff:b5:5d:2e:68:86:29:ae:2d:94:d2:fc:d2:28:98:13:
a1:31:8d:51:80:ab:9f:fe:36:3f:96:32:d7:4e:89:f9:3a:71:
f8:73:17:f4:6a:12:0a:16:d1:9e:a9:bf:b9:2b:cc:ee:e5:f2:
52:10:a8:a5:29:fa:71:4c:b4:2a:ec:1d:d8:41:2f:b0:39:29:
a9:55:ec:a1:8a:b9:45:66:c4:3f:23:78:a2:93:33:a1:f7:5f:
8d:3b:e0:a6:e1:68:76:8a:f4:74:0d:09:5d:a9:f4:7e:4d:97:
14:2a:0b:f8:b6:4c:f6:ef:1e:3f:7f:47:a4:7f:4d:0a:4f:a6:
c9:5e:af:50:ed:ca:48:4a:5c:ef:e8:70:47:b6:c1:88:77:15:
ce:b5:b3:b2:6e:fb:09:15:d3:c8:59:3c:25:14:00:b6:be:7e:
46:7e:f6:09:ce:de:38:1b:41:9a:91:4e:71:c5:4c:82:fe:6d:
1e:81:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:55:37 2025 by rpki-client