Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa
File: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier: XszLg/icymb1n/bWAH84Q5zNVlfOUv7vsvOSeJjK3Ck=
Subject key identifier: 99:55:18:9C:E4:DE:27:56:33:C8:C0:F0:DD:25:04:83:4B:CF:F4:D9
Certificate issuer: /CN=095a56e9e52f15eb8091f7d1b5202990d39e871d
Certificate serial: 5D3045BA3D8B2B2A225CBF7332A49AFBB095DF70
Authority key identifier: 09:5A:56:E9:E5:2F:15:EB:80:91:F7:D1:B5:20:29:90:D3:9E:87:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVpW6eUvFeuAkffRtSApkNOehx0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa
Signing time: Wed 02 Jul 2025 19:33:15 +0000
ROA not before: Wed 02 Jul 2025 19:28:15 +0000
ROA not after: Wed 01 Jul 2026 19:33:15 +0000
asID: 47272
IP address blocks: 2001:67c:d84::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:30:45:ba:3d:8b:2b:2a:22:5c:bf:73:32:a4:9a:fb:b0:95:df:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095a56e9e52f15eb8091f7d1b5202990d39e871d
Validity
Not Before: Jul 2 19:28:15 2025 GMT
Not After : Jul 1 19:33:15 2026 GMT
Subject: CN=9955189CE4DE275633C8C0F0DD2504834BCFF4D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a8:ba:29:e1:68:8f:cd:15:ba:41:30:05:7f:
f8:1a:af:62:d2:f6:6a:4e:66:e7:5a:9e:ca:c8:34:
c7:94:a7:87:f1:17:ed:ba:9a:c1:ce:b6:be:ce:6c:
60:3c:9f:e3:e9:7f:a5:64:42:38:ce:84:30:48:25:
a0:3e:c0:62:80:1c:1d:83:be:f3:9b:57:93:1a:dd:
84:13:9d:c7:6d:ff:cd:0b:0a:9b:bc:53:61:21:1b:
57:e5:35:1d:28:e6:20:c5:ce:1a:bc:5c:dc:f4:59:
1f:15:0e:54:da:21:f6:82:83:9c:22:b6:f5:cd:5a:
75:22:1b:8c:9c:97:74:7f:11:51:f2:bf:1b:59:0b:
29:b8:42:94:d9:e2:4c:7d:08:7f:04:e0:08:01:01:
b8:d9:cd:d0:7c:ca:e4:8f:8b:58:63:a0:2c:76:f9:
9c:c5:03:e2:f0:81:00:43:0f:a4:20:de:12:0c:b1:
ac:6a:98:35:68:22:9a:62:17:7a:70:54:e9:65:fd:
42:f2:19:51:d5:e2:9e:3f:b2:ad:d6:28:01:b1:db:
16:6f:cf:87:f1:8c:57:01:29:23:6f:37:89:ee:9d:
59:6e:bc:23:28:25:f3:f2:39:ee:7b:63:67:95:28:
c8:15:f2:a8:40:9a:73:96:c7:0b:5e:cb:f9:a4:17:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:55:18:9C:E4:DE:27:56:33:C8:C0:F0:DD:25:04:83:4B:CF:F4:D9
X509v3 Authority Key Identifier:
keyid:09:5A:56:E9:E5:2F:15:EB:80:91:F7:D1:B5:20:29:90:D3:9E:87:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/095A56E9E52F15EB8091F7D1B5202990D39E871D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVpW6eUvFeuAkffRtSApkNOehx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d84::/48
Signature Algorithm: sha256WithRSAEncryption
6e:e1:59:2d:b9:ee:e1:84:dc:c8:d3:0e:a5:57:15:6c:1e:a6:
07:9c:d8:53:dc:4e:ca:62:be:a2:03:e5:3b:c0:45:43:05:d5:
39:f8:f6:5d:d8:30:e1:ab:5c:18:d3:60:fb:24:e5:24:96:19:
23:ee:e7:62:6a:b3:30:c9:71:05:d2:88:1c:ce:e9:1b:b2:60:
bb:1f:4d:d6:6c:da:31:ce:74:9f:78:f4:6d:ad:3f:12:f8:c0:
35:2d:5a:7c:e4:4c:ea:32:eb:1f:71:46:63:23:54:ce:dd:b4:
53:fb:bd:2e:7f:02:01:67:87:5a:ce:7f:88:c2:0d:4e:54:63:
3e:38:c4:47:43:6c:93:ad:26:8c:4f:51:96:fa:e6:fa:72:18:
da:e6:c3:b3:60:3d:3d:3b:be:cd:f2:49:ee:6b:1e:82:11:c1:
b1:49:38:f5:03:e9:68:6f:ce:f8:19:60:10:fb:f8:9e:a3:41:
4c:f3:46:dd:d2:a3:af:9c:6c:6c:a1:62:cc:7a:ee:58:28:79:
c2:72:1f:b0:68:2a:7e:3b:50:1c:f8:a1:69:ff:7b:17:0c:f1:
18:78:70:02:6a:51:96:3d:43:2e:c6:0d:1a:9e:58:32:67:5b:
f4:80:ae:b5:44:70:d8:91:89:68:a7:c3:e6:62:7a:bb:66:40:
6f:06:2f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:35:03 2025 by rpki-client