Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa
File: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier: 2fKTygoQDyANGB/5e0DWZsaWJeR10BiCECFo0Wr3eZA=
Subject key identifier: CE:5A:CA:74:9D:27:D4:40:A5:13:2E:0E:D9:7F:34:4A:44:99:D5:3D
Certificate issuer: /CN=095a56e9e52f15eb8091f7d1b5202990d39e871d
Certificate serial: 185692762149E9B25A1077204D525EB5B0388D6C
Authority key identifier: 09:5A:56:E9:E5:2F:15:EB:80:91:F7:D1:B5:20:29:90:D3:9E:87:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVpW6eUvFeuAkffRtSApkNOehx0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa
Signing time: Wed 02 Jul 2025 19:33:15 +0000
ROA not before: Wed 02 Jul 2025 19:28:15 +0000
ROA not after: Wed 01 Jul 2026 19:33:15 +0000
asID: 47272
IP address blocks: 2001:67c:d88::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:56:92:76:21:49:e9:b2:5a:10:77:20:4d:52:5e:b5:b0:38:8d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095a56e9e52f15eb8091f7d1b5202990d39e871d
Validity
Not Before: Jul 2 19:28:15 2025 GMT
Not After : Jul 1 19:33:15 2026 GMT
Subject: CN=CE5ACA749D27D440A5132E0ED97F344A4499D53D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:74:e3:32:4a:e9:d7:da:1b:bf:ae:9b:a2:
ff:d1:29:9e:11:56:1e:35:82:e7:ea:da:26:ff:7d:
c3:3f:d8:ed:11:8f:82:4b:5f:d5:a7:af:73:d2:22:
31:4e:ac:85:aa:b8:5c:de:ae:8e:4d:6c:fa:1a:a6:
a2:f6:79:e6:50:46:6e:96:05:a5:4d:f1:13:19:57:
42:b8:9c:ba:de:5d:cf:68:ef:75:a2:a8:b9:de:a1:
85:c1:74:7d:4b:e0:69:e0:a1:25:76:aa:cf:c4:c6:
23:00:83:81:28:dd:e3:e1:44:f3:cd:f6:94:a6:84:
44:7d:2d:64:4a:08:9f:14:14:f3:a2:b2:b2:81:fb:
ab:b4:e9:73:bf:47:79:4d:9c:a9:a8:68:99:60:3d:
e3:70:f8:7d:06:d5:6a:b8:b4:e6:62:0c:ce:1e:a3:
d5:77:6b:ce:96:10:49:09:17:e7:2b:b6:d5:a5:13:
c1:49:c3:b3:bc:b7:05:35:52:c5:19:91:fa:d0:fa:
c2:48:37:0c:ca:51:df:18:1d:2f:5b:16:66:95:45:
8e:30:de:97:03:a3:1f:66:b5:cd:55:7f:51:1d:dc:
9b:c8:b6:f5:9a:0e:a4:fc:49:ce:dd:e4:9d:41:dd:
04:ac:bd:77:ee:bb:40:76:16:d0:b2:bb:e9:67:70:
a9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5A:CA:74:9D:27:D4:40:A5:13:2E:0E:D9:7F:34:4A:44:99:D5:3D
X509v3 Authority Key Identifier:
keyid:09:5A:56:E9:E5:2F:15:EB:80:91:F7:D1:B5:20:29:90:D3:9E:87:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/095A56E9E52F15EB8091F7D1B5202990D39E871D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVpW6eUvFeuAkffRtSApkNOehx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d88::/48
Signature Algorithm: sha256WithRSAEncryption
05:3c:34:ec:61:47:ed:92:20:c0:40:18:cf:db:2c:e8:67:2b:
95:dd:e0:32:30:b2:de:30:31:29:32:d6:34:fe:0e:db:4f:03:
67:ea:4b:ca:8c:87:4a:50:a0:8c:50:88:0b:ae:b0:bb:77:41:
a5:a0:b1:cf:5f:33:5b:23:be:c0:be:49:0b:de:8a:96:dd:d6:
ed:91:2b:c5:8d:a1:af:8a:5e:fc:a5:ff:7c:c5:e7:43:6a:b0:
f9:a5:e2:96:be:7a:e4:8e:94:cc:ae:3c:60:f9:4a:56:fc:c6:
be:11:44:1b:07:bd:64:15:d5:a6:d8:de:e1:04:52:78:54:ce:
14:67:82:0c:08:b5:bb:e3:8e:b2:5a:86:69:e6:82:15:3e:31:
60:2c:fb:65:25:35:be:e2:cf:9d:5c:ca:80:22:9e:73:66:91:
3c:55:23:69:3b:57:bc:70:94:fb:a3:98:7d:f7:1c:17:ff:d7:
12:63:c8:66:90:af:d5:10:8f:28:8d:fa:04:03:62:10:d1:74:
40:6d:dc:81:7b:c8:bd:82:ef:85:22:2b:c6:94:95:77:15:97:
f2:76:f7:8d:2c:99:dc:aa:3b:1d:ba:71:be:e9:a9:7e:73:23:
0a:ca:99:2d:29:55:78:25:c2:17:5b:48:f3:52:7a:6f:82:71:
f8:33:1b:02
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUGFaSdiFJ6bJaEHcgTVJetbA4jWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk1YTU2ZTllNTJmMTVlYjgwOTFmN2QxYjUyMDI5OTBk
MzllODcxZDAeFw0yNTA3MDIxOTI4MTVaFw0yNjA3MDExOTMzMTVaMDMxMTAvBgNV
BAMTKENFNUFDQTc0OUQyN0Q0NDBBNTEzMkUwRUQ5N0YzNDRBNDQ5OUQ1M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCccXTjMkrp19obv66bov/RKZ4R
Vh41gufq2ib/fcM/2O0Rj4JLX9Wnr3PSIjFOrIWquFzero5NbPoapqL2eeZQRm6W
BaVN8RMZV0K4nLreXc9o73WiqLneoYXBdH1L4GngoSV2qs/ExiMAg4Eo3ePhRPPN
9pSmhER9LWRKCJ8UFPOisrKB+6u06XO/R3lNnKmoaJlgPeNw+H0G1Wq4tOZiDM4e
o9V3a86WEEkJF+crttWlE8FJw7O8twU1UsUZkfrQ+sJINwzKUd8YHS9bFmaVRY4w
3pcDox9mtc1Vf1Ed3JvItvWaDqT8Sc7d5J1B3QSsvXfuu0B2FtCyu+lncKnHAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUzlrKdJ0n1EClEy4O2X80SkSZ1T0wHwYDVR0j
BBgwFoAUCVpW6eUvFeuAkffRtSApkNOehx0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMC8wOTVBNTZFOUU1
MkYxNUVCODA5MUY3RDFCNTIwMjk5MEQzOUU4NzFELmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvQ1ZwVzZlVXZGZXVBa2ZmUnRTQXBrTk9laHgwLmNlcjCBqAYIKwYB
BQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzY5ZjU2NWQ0M2ZhZDQ1M2Q4ODJkMWMxYWE2YjI4YzIw
LzAvMzIzMDMwMzEzYTM2Mzc2MzNhNjQzODM4M2EzYTJmMzQzODJkMzEzMjM4MjAz
ZDNlMjAzNDM3MzIzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA2IMA0GCSqGSIb3DQEBCwUA
A4IBAQAFPDTsYUftkiDAQBjP2yzoZyuV3eAyMLLeMDEpMtY0/g7bTwNn6kvKjIdK
UKCMUIgLrrC7d0GloLHPXzNbI77AvkkL3oqW3dbtkSvFjaGvil78pf98xedDarD5
peKWvnrkjpTMrjxg+UpW/Ma+EUQbB71kFdWm2N7hBFJ4VM4UZ4IMCLW7446yWoZp
5oIVPjFgLPtlJTW+4s+dXMqAIp5zZpE8VSNpO1e8cJT7o5h99xwX/9cSY8hmkK/V
EI8ojfoEA2IQ0XRAbdyBe8i9gu+FIivGlJV3FZfydveNLJncqjsdunG+6al+cyMK
ypktKVV4JcIXW0jzUnpvgnH4MxsC
-----END CERTIFICATE-----
Generated at Thu Jul 3 08:40:17 2025 by rpki-client