Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa
File: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier: x19P0+6kFI3M8vLSmAsWjwVEmGatSF9zf5jf185qumI=
Subject key identifier: C2:6E:DF:11:08:C2:8D:74:43:2B:A3:2B:41:F3:B1:58:AE:71:2A:E3
Certificate issuer: /CN=095a56e9e52f15eb8091f7d1b5202990d39e871d
Certificate serial: 6BD423E21B854BD6D7284ADACE62455094E6F657
Authority key identifier: 09:5A:56:E9:E5:2F:15:EB:80:91:F7:D1:B5:20:29:90:D3:9E:87:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVpW6eUvFeuAkffRtSApkNOehx0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa
Signing time: Wed 02 Jul 2025 19:33:15 +0000
ROA not before: Wed 02 Jul 2025 19:28:15 +0000
ROA not after: Wed 01 Jul 2026 19:33:15 +0000
asID: 47272
IP address blocks: 2001:67c:d8c::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d4:23:e2:1b:85:4b:d6:d7:28:4a:da:ce:62:45:50:94:e6:f6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095a56e9e52f15eb8091f7d1b5202990d39e871d
Validity
Not Before: Jul 2 19:28:15 2025 GMT
Not After : Jul 1 19:33:15 2026 GMT
Subject: CN=C26EDF1108C28D74432BA32B41F3B158AE712AE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:fe:a2:34:f9:44:a8:4c:1c:4d:4a:c4:de:
a2:2e:13:a5:a3:1b:67:08:62:f0:fb:6d:40:36:0b:
1f:44:3e:be:51:76:66:f4:2b:36:b9:ab:d2:a1:d0:
e5:54:7c:a9:c5:3e:86:e7:2f:88:fd:72:65:b6:4d:
f3:c5:dd:1d:8a:38:68:26:ad:84:89:3f:0e:65:7f:
79:46:dc:8b:ee:2b:24:a0:8d:36:79:a6:23:2b:44:
05:e0:17:a4:4b:00:c4:52:c0:b1:60:1e:d0:78:27:
01:ef:23:2e:dc:28:4b:5a:c5:21:15:7d:4b:d6:ec:
f5:54:34:d2:7b:97:b0:a5:2a:c0:94:e7:0c:fe:e5:
e3:a9:50:0e:cb:e2:b2:d8:3c:67:70:1b:73:e2:2c:
f8:ad:40:8b:7e:30:41:f7:5f:6e:b2:71:1c:40:f1:
a9:f3:7c:d9:33:f4:99:01:03:96:fb:c4:17:60:cc:
f3:ca:4b:6d:8f:cb:9a:bd:ee:48:e6:d5:1d:f3:68:
b8:21:97:91:5f:8c:9c:3b:09:13:2d:bf:e1:c4:39:
05:af:65:44:a4:9e:ed:26:ec:4f:5b:20:2c:f1:95:
69:c1:da:32:33:fa:bb:6b:a1:4b:dc:a7:07:b0:32:
e3:2b:69:37:26:ae:28:c9:12:09:de:92:45:ed:b5:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6E:DF:11:08:C2:8D:74:43:2B:A3:2B:41:F3:B1:58:AE:71:2A:E3
X509v3 Authority Key Identifier:
keyid:09:5A:56:E9:E5:2F:15:EB:80:91:F7:D1:B5:20:29:90:D3:9E:87:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/095A56E9E52F15EB8091F7D1B5202990D39E871D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVpW6eUvFeuAkffRtSApkNOehx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d8c::/48
Signature Algorithm: sha256WithRSAEncryption
33:16:98:a4:7f:aa:20:8d:8a:7e:9f:91:cc:f2:01:20:54:27:
08:fc:05:81:21:22:2b:52:4a:1e:c8:04:d2:1e:13:0b:bd:01:
e1:1e:1b:93:4a:c1:08:22:97:9d:60:02:4c:9b:69:60:8b:a5:
5a:e4:ce:4e:d9:d1:51:db:91:b0:56:ee:b8:c6:02:1f:e2:5b:
38:d9:20:98:83:a6:7a:f6:30:15:66:a0:84:46:c8:b8:54:4b:
db:e0:8e:f3:54:d5:01:6d:a2:34:64:3d:bd:1d:2b:93:61:84:
37:5c:00:b8:fe:bb:a8:cf:0e:00:5f:5b:8d:a6:67:57:ca:3d:
2e:fc:0a:b3:24:54:2c:ce:7d:f2:f1:6f:50:7c:2e:90:e8:b4:
1f:b3:f4:46:2c:29:55:cd:33:ac:cb:6c:60:f5:7f:87:14:11:
f1:d5:f6:f0:2e:5a:86:d2:60:60:21:56:3f:7a:7a:5f:9e:51:
33:06:59:4b:3c:50:47:04:64:81:43:ca:9a:01:29:03:d4:53:
3a:28:fb:96:3f:5b:33:4d:13:d1:b3:3e:86:ff:18:a7:b0:8a:
31:f4:5e:89:32:a5:d8:0b:9a:06:32:80:eb:bc:03:66:38:87:
0f:ab:b2:23:fc:ea:4b:c5:71:bc:c8:68:25:c9:44:82:50:38:
b9:76:86:6d
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUa9Qj4huFS9bXKErazmJFUJTm9lcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk1YTU2ZTllNTJmMTVlYjgwOTFmN2QxYjUyMDI5OTBk
MzllODcxZDAeFw0yNTA3MDIxOTI4MTVaFw0yNjA3MDExOTMzMTVaMDMxMTAvBgNV
BAMTKEMyNkVERjExMDhDMjhENzQ0MzJCQTMyQjQxRjNCMTU4QUU3MTJBRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdyP6iNPlEqEwcTUrE3qIuE6Wj
G2cIYvD7bUA2Cx9EPr5Rdmb0Kza5q9Kh0OVUfKnFPobnL4j9cmW2TfPF3R2KOGgm
rYSJPw5lf3lG3IvuKySgjTZ5piMrRAXgF6RLAMRSwLFgHtB4JwHvIy7cKEtaxSEV
fUvW7PVUNNJ7l7ClKsCU5wz+5eOpUA7L4rLYPGdwG3PiLPitQIt+MEH3X26ycRxA
8anzfNkz9JkBA5b7xBdgzPPKS22Py5q97kjm1R3zaLghl5FfjJw7CRMtv+HEOQWv
ZUSknu0m7E9bICzxlWnB2jIz+rtroUvcpwewMuMraTcmrijJEgnekkXttch/AgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUwm7fEQjCjXRDK6MrQfOxWK5xKuMwHwYDVR0j
BBgwFoAUCVpW6eUvFeuAkffRtSApkNOehx0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMC8wOTVBNTZFOUU1
MkYxNUVCODA5MUY3RDFCNTIwMjk5MEQzOUU4NzFELmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvQ1ZwVzZlVXZGZXVBa2ZmUnRTQXBrTk9laHgwLmNlcjCBqAYIKwYB
BQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzY5ZjU2NWQ0M2ZhZDQ1M2Q4ODJkMWMxYWE2YjI4YzIw
LzAvMzIzMDMwMzEzYTM2Mzc2MzNhNjQzODYzM2EzYTJmMzQzODJkMzEzMjM4MjAz
ZDNlMjAzNDM3MzIzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA2MMA0GCSqGSIb3DQEBCwUA
A4IBAQAzFpikf6ogjYp+n5HM8gEgVCcI/AWBISIrUkoeyATSHhMLvQHhHhuTSsEI
IpedYAJMm2lgi6Va5M5O2dFR25GwVu64xgIf4ls42SCYg6Z69jAVZqCERsi4VEvb
4I7zVNUBbaI0ZD29HSuTYYQ3XAC4/ruozw4AX1uNpmdXyj0u/AqzJFQszn3y8W9Q
fC6Q6LQfs/RGLClVzTOsy2xg9X+HFBHx1fbwLlqG0mBgIVY/enpfnlEzBllLPFBH
BGSBQ8qaASkD1FM6KPuWP1szTRPRsz6G/xinsIox9F6JMqXYC5oGMoDrvANmOIcP
q7Ij/OpLxXG8yGglyUSCUDi5doZt
-----END CERTIFICATE-----
Generated at Thu Jul 3 08:31:32 2025 by rpki-client