Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa
File: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier: wyF5NODFgvsNvuuFHm/tokAAlBEEGQSMAxXXy5ExOuc=
Subject key identifier: F2:C2:EA:8C:69:DE:66:70:8E:1F:FB:CF:55:08:F0:26:BD:46:07:14
Certificate issuer: /CN=095a56e9e52f15eb8091f7d1b5202990d39e871d
Certificate serial: 2F7C963CC6CF80236B9E1A201D3F84B7CE341021
Authority key identifier: 09:5A:56:E9:E5:2F:15:EB:80:91:F7:D1:B5:20:29:90:D3:9E:87:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVpW6eUvFeuAkffRtSApkNOehx0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa
Signing time: Wed 02 Jul 2025 19:33:15 +0000
ROA not before: Wed 02 Jul 2025 19:28:15 +0000
ROA not after: Wed 01 Jul 2026 19:33:15 +0000
asID: 47272
IP address blocks: 2001:67c:d90::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:7c:96:3c:c6:cf:80:23:6b:9e:1a:20:1d:3f:84:b7:ce:34:10:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095a56e9e52f15eb8091f7d1b5202990d39e871d
Validity
Not Before: Jul 2 19:28:15 2025 GMT
Not After : Jul 1 19:33:15 2026 GMT
Subject: CN=F2C2EA8C69DE66708E1FFBCF5508F026BD460714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:47:4a:8c:ae:bf:bc:98:92:cf:68:b5:f7:
07:eb:a5:56:cd:d7:50:23:f4:fd:71:61:95:df:62:
31:b0:39:72:f1:ce:92:e1:a7:d6:09:5b:5b:12:41:
76:b1:61:6d:b4:4a:81:45:ba:5a:7a:02:76:9f:65:
b3:30:9c:a0:7d:35:5a:06:9e:df:7c:9f:58:1b:76:
f0:0e:e1:90:95:37:6c:2b:e4:49:a7:7c:a5:9f:40:
31:cc:0a:a1:98:8b:1d:9a:b5:99:51:73:da:f2:85:
fa:e2:f8:d1:d1:04:35:9c:45:da:d2:90:07:bd:52:
da:9c:02:0d:4c:49:6e:0a:91:21:4a:a1:63:32:78:
9e:e0:41:17:70:a6:b6:80:4b:62:cf:03:6a:84:be:
04:64:46:8e:22:40:71:d8:f7:a6:56:57:3f:7e:47:
21:f7:33:0c:64:28:74:7a:0f:ab:8e:10:25:7e:17:
e8:01:28:ac:ca:68:15:bf:39:14:6f:a5:bf:64:a4:
bb:e5:08:c5:96:a5:19:ea:0e:f4:d8:1f:f6:cd:71:
49:9f:d8:26:be:b0:02:69:44:13:fc:65:51:4b:d8:
c7:fa:36:35:95:e0:63:f7:e4:36:ea:3a:18:1d:b9:
e3:98:50:ae:88:9a:3a:ca:3f:85:f5:a4:e0:a9:12:
ad:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C2:EA:8C:69:DE:66:70:8E:1F:FB:CF:55:08:F0:26:BD:46:07:14
X509v3 Authority Key Identifier:
keyid:09:5A:56:E9:E5:2F:15:EB:80:91:F7:D1:B5:20:29:90:D3:9E:87:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/095A56E9E52F15EB8091F7D1B5202990D39E871D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVpW6eUvFeuAkffRtSApkNOehx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/0/323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d90::/48
Signature Algorithm: sha256WithRSAEncryption
51:1c:03:2f:f2:af:9e:ef:f9:16:a3:a5:aa:17:b9:b6:21:03:
5e:95:cb:4a:6c:a3:5f:d5:e0:91:14:0f:5f:43:6d:39:ec:f9:
48:ec:63:45:b1:2b:72:fb:b3:5d:73:fb:80:f1:03:01:6b:41:
cf:c1:76:22:9c:94:b4:84:9f:3b:11:92:02:5e:8e:f5:6e:ad:
0d:7a:04:f7:a0:90:cd:95:a6:59:06:05:a4:ae:02:cc:3f:f2:
a1:c1:a2:f7:7c:eb:fc:bf:b1:0e:86:12:0f:72:0d:ba:cc:b1:
33:4f:ff:48:ef:55:4f:cc:3d:fa:4c:bb:bc:0e:3b:92:3c:fa:
d4:81:01:57:b2:4c:6e:d1:a5:d8:4a:52:ad:8a:66:b9:03:8b:
1c:9d:5e:31:c1:e6:b6:f1:47:6b:38:3e:14:2f:20:57:3b:d4:
d0:bd:af:2a:45:89:b5:cb:6f:e2:5e:d3:e1:4c:e3:66:a9:97:
16:de:b4:fa:00:a7:6c:bb:3e:9f:31:5c:eb:f8:9d:26:20:9c:
fe:5a:2b:dc:9c:63:c1:26:68:49:af:6b:62:32:a4:61:44:20:
e3:f8:35:7e:d2:0b:2d:fa:91:f5:52:fe:1a:bd:26:44:bd:95:
99:de:39:06:09:f4:81:b0:d9:ce:5f:55:61:ca:15:05:f9:0f:
68:ec:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:35:43 2025 by rpki-client