
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653136393a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653136393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 4xc3FYc9W1yubzQ+UprFxtnrXo8Up3paOVXjx+Z/YTw=
Subject key identifier: B2:7B:96:9D:34:5A:2A:34:D5:60:89:30:5D:24:92:95:21:1C:D6:56
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 1551A9335F70CBC2469869FB19FB62294CE5E356
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653136393a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:07:18 +0000
ROA not before: Tue 01 Jul 2025 17:02:18 +0000
ROA not after: Tue 30 Jun 2026 17:07:18 +0000
asID: 396968
IP address blocks: 2a0f:6287:e169::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:51:a9:33:5f:70:cb:c2:46:98:69:fb:19:fb:62:29:4c:e5:e3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:02:18 2025 GMT
Not After : Jun 30 17:07:18 2026 GMT
Subject: CN=B27B969D345A2A34D56089305D249295211CD656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bf:51:3c:96:80:4c:02:89:8e:82:05:cd:34:
97:57:2c:a4:2c:05:ac:56:8a:34:ab:97:38:0f:f4:
19:2d:35:8a:33:57:f9:e6:97:19:c4:30:43:1a:8a:
a1:20:c1:3b:f2:c8:33:a2:11:64:29:38:1f:e3:28:
e1:ba:7a:7b:7a:23:88:8b:ff:7b:cb:26:d2:c1:c0:
a1:fd:99:c3:06:30:9f:1c:69:f2:07:6b:dc:8a:f9:
ed:32:00:7d:1c:28:2e:21:7d:57:54:f0:7c:ed:e9:
0b:a9:dd:15:b9:43:36:43:ee:0e:42:77:c5:1d:14:
51:e9:b9:39:bf:b6:3f:4d:71:a2:b9:cc:4a:4e:fb:
99:b3:6d:de:54:08:0a:05:7a:23:5b:82:61:e7:f2:
f4:39:31:e8:38:8f:76:c7:61:35:de:dd:87:51:d7:
51:0b:65:ec:8a:48:2a:be:2c:f7:79:86:a7:95:67:
06:d9:6f:c1:1c:52:5c:bf:a4:6d:74:72:a2:df:a6:
eb:1b:b8:54:30:b4:39:43:68:9e:44:25:1f:af:a1:
b2:6e:73:65:4e:3f:8b:ab:db:11:a2:74:d0:a7:c9:
2b:68:30:fe:83:b3:ec:83:66:08:da:41:cd:05:63:
54:04:03:1a:9e:d6:fb:f5:4e:7e:ee:74:cc:54:2c:
2a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7B:96:9D:34:5A:2A:34:D5:60:89:30:5D:24:92:95:21:1C:D6:56
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653136393a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e169::/48
Signature Algorithm: sha256WithRSAEncryption
0c:74:7e:ff:4f:d4:50:d8:46:07:95:fb:10:6b:94:56:1e:63:
a0:db:36:6f:96:ac:93:4c:e9:7b:1e:34:67:47:a2:2e:e2:b4:
83:57:79:44:69:51:a9:77:64:0b:9d:33:cf:7b:85:47:ce:40:
1a:dc:61:af:37:21:15:17:fa:23:0c:85:58:1d:1b:d5:c5:2a:
2b:fc:76:73:b6:80:3c:0b:31:ff:8a:9d:bb:ea:cd:c0:a9:cd:
49:76:90:bb:44:38:59:3b:2b:e8:6f:39:7b:10:23:c8:53:db:
3c:e8:c9:6f:20:a5:bc:51:e6:ca:e3:68:ac:05:c2:c3:42:db:
ce:75:a7:04:2b:a9:99:0b:9e:8a:67:a4:18:31:69:23:02:fc:
56:ce:2b:d2:2a:38:52:89:48:1b:07:14:ba:61:30:33:79:7d:
cc:42:b3:ce:ad:ec:59:fd:38:88:0e:dd:f0:75:90:81:ed:c9:
17:fe:3d:d7:b8:20:7c:cd:60:52:c7:a9:37:44:04:68:35:0c:
71:e8:2d:36:73:1e:2c:7d:38:7e:ec:9c:fa:0f:8f:9f:bf:0a:
61:43:fd:b5:76:fa:0c:91:e2:e5:4a:00:8f:17:64:3f:bf:93:
87:17:c5:ea:d7:7f:ff:6c:57:b7:f0:1d:89:87:b4:c4:d9:93:
19:a2:0c:c6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFVGpM19wy8JGmGn7GftiKUzl41YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDExNzAyMThaFw0yNjA2MzAxNzA3MThaMDMxMTAvBgNV
BAMTKEIyN0I5NjlEMzQ1QTJBMzRENTYwODkzMDVEMjQ5Mjk1MjExQ0Q2NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkv1E8loBMAomOggXNNJdXLKQs
BaxWijSrlzgP9BktNYozV/nmlxnEMEMaiqEgwTvyyDOiEWQpOB/jKOG6ent6I4iL
/3vLJtLBwKH9mcMGMJ8cafIHa9yK+e0yAH0cKC4hfVdU8Hzt6Qup3RW5QzZD7g5C
d8UdFFHpuTm/tj9NcaK5zEpO+5mzbd5UCAoFeiNbgmHn8vQ5Meg4j3bHYTXe3YdR
11ELZeyKSCq+LPd5hqeVZwbZb8EcUly/pG10cqLfpusbuFQwtDlDaJ5EJR+vobJu
c2VOP4ur2xGidNCnyStoMP6Ds+yDZgjaQc0FY1QEAxqe1vv1Tn7udMxULCqxAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUsnuWnTRaKjTVYIkwXSSSlSEc1lYwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzEzNjM5M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+Fp
MA0GCSqGSIb3DQEBCwUAA4IBAQAMdH7/T9RQ2EYHlfsQa5RWHmOg2zZvlqyTTOl7
HjRnR6Iu4rSDV3lEaVGpd2QLnTPPe4VHzkAa3GGvNyEVF/ojDIVYHRvVxSor/HZz
toA8CzH/ip276s3Aqc1JdpC7RDhZOyvobzl7ECPIU9s86MlvIKW8UebK42isBcLD
QtvOdacEK6mZC56KZ6QYMWkjAvxWzivSKjhSiUgbBxS6YTAzeX3MQrPOrexZ/TiI
Dt3wdZCB7ckX/j3XuCB8zWBSx6k3RARoNQxx6C02cx4sfTh+7Jz6D4+fvwphQ/21
dvoMkeLlSgCPF2Q/v5OHF8Xq13//bFe38B2Jh7TE2ZMZogzG
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:44:12 2025 by rpki-client