
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653333613a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653333613a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: sreWU0+A7EHpLVSHWQHbndPpTiV+WI9C39bizQ+VEVQ=
Subject key identifier: F7:B4:0A:83:5F:9C:0D:D1:56:9C:4A:C1:A2:B4:93:73:B3:8E:CB:75
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 2430F0E7E60EC3A5B80CA32B7F68CB6C6E9CD0A2
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653333613a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:07:21 +0000
ROA not before: Tue 01 Jul 2025 17:02:21 +0000
ROA not after: Tue 30 Jun 2026 17:07:21 +0000
asID: 396968
IP address blocks: 2a0f:6287:e33a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:30:f0:e7:e6:0e:c3:a5:b8:0c:a3:2b:7f:68:cb:6c:6e:9c:d0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:02:21 2025 GMT
Not After : Jun 30 17:07:21 2026 GMT
Subject: CN=F7B40A835F9C0DD1569C4AC1A2B49373B38ECB75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:cd:b0:33:ec:2e:dd:f3:94:8b:4c:0e:9d:
2c:55:3f:ab:94:8b:6a:2d:8c:62:36:ea:1e:df:b8:
bc:b6:50:8b:e9:a1:a9:9f:88:18:60:5b:fc:1f:dc:
98:e2:4d:8d:7b:1b:e2:16:7e:e3:c0:7c:da:7f:31:
29:1c:84:fd:79:0a:7d:1e:cc:0e:88:34:1b:ae:91:
9b:66:b7:b9:24:77:1e:55:de:19:9f:ec:37:c3:f7:
ab:b0:76:c0:49:84:50:4c:9f:92:ca:bb:cc:d7:ea:
e5:9d:f9:1a:ed:5c:8f:5d:6a:96:c8:0e:0f:bc:a9:
39:f7:cf:2f:b8:73:21:8c:a7:00:a8:26:68:e9:d5:
8c:91:2e:d5:0e:55:47:fc:93:c0:57:35:cc:b0:7e:
10:55:9b:56:98:30:3a:8b:86:65:87:74:b1:8c:71:
52:d7:71:60:57:55:04:7c:87:ed:20:a1:f1:d6:48:
6d:87:c7:d1:c3:1e:e4:7e:24:fb:6b:61:a1:a5:3e:
be:24:d7:a7:bf:9b:06:72:fe:e9:a7:25:8c:9a:f9:
60:e9:86:d1:46:d5:ed:f5:11:9c:0e:06:09:25:9b:
91:8c:f0:fe:b5:fd:c5:40:97:d1:8e:df:fb:0c:2d:
b8:6f:06:2b:d3:5c:81:39:1e:9f:b5:5b:1b:a7:20:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B4:0A:83:5F:9C:0D:D1:56:9C:4A:C1:A2:B4:93:73:B3:8E:CB:75
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653333613a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e33a::/48
Signature Algorithm: sha256WithRSAEncryption
92:18:7a:75:37:35:4a:b2:d6:5b:b5:aa:5b:55:22:f8:49:cd:
6a:fe:7d:24:e5:2a:d1:b6:f2:55:cf:97:4c:6c:fc:11:49:0c:
59:f6:cf:78:0b:37:71:bb:03:62:f9:1e:0f:f6:a1:dd:26:78:
bc:9a:a6:a8:1f:f0:bb:33:e4:0d:5e:a0:f9:80:bf:e5:7d:81:
88:ec:6a:18:60:ed:cc:3c:8e:3e:0b:67:d4:f4:29:45:22:e7:
6e:f3:af:4b:8e:a0:09:67:59:f2:37:c2:a7:58:bf:bf:38:8f:
f2:0b:23:18:a9:e3:ab:44:53:43:2c:ef:6a:c0:92:fc:f8:9e:
c2:ca:74:fc:01:4f:19:ca:8e:75:38:8c:ac:ed:a9:2e:83:dd:
4c:39:8c:e9:31:8a:b7:9a:df:e5:0b:40:cb:c6:98:73:82:e6:
44:53:48:4f:6b:1e:35:56:fd:72:3d:bd:9d:4a:83:d7:38:c5:
74:ef:96:83:7b:cf:69:9f:e3:02:45:62:a3:d5:21:c3:3a:8c:
52:d0:bf:ba:8c:bf:83:1c:03:e0:b3:79:83:10:05:9b:7e:0b:
3e:73:24:09:ed:ed:c0:bd:27:0c:6c:ed:4b:4e:7d:be:83:63:
0b:d1:45:f4:a0:57:9c:ea:d2:11:9d:4e:dc:1a:e9:64:00:18:
c3:a1:b0:ab
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJDDw5+YOw6W4DKMrf2jLbG6c0KIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDExNzAyMjFaFw0yNjA2MzAxNzA3MjFaMDMxMTAvBgNV
BAMTKEY3QjQwQTgzNUY5QzBERDE1NjlDNEFDMUEyQjQ5MzczQjM4RUNCNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgPM2wM+wu3fOUi0wOnSxVP6uU
i2otjGI26h7fuLy2UIvpoamfiBhgW/wf3JjiTY17G+IWfuPAfNp/MSkchP15Cn0e
zA6INBuukZtmt7kkdx5V3hmf7DfD96uwdsBJhFBMn5LKu8zX6uWd+RrtXI9dapbI
Dg+8qTn3zy+4cyGMpwCoJmjp1YyRLtUOVUf8k8BXNcywfhBVm1aYMDqLhmWHdLGM
cVLXcWBXVQR8h+0gofHWSG2Hx9HDHuR+JPtrYaGlPr4k16e/mwZy/umnJYya+WDp
htFG1e31EZwOBgklm5GM8P61/cVAl9GO3/sMLbhvBivTXIE5Hp+1WxunIICJAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU97QKg1+cDdFWnErBorSTc7OOy3UwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzMzMzYxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+M6
MA0GCSqGSIb3DQEBCwUAA4IBAQCSGHp1NzVKstZbtapbVSL4Sc1q/n0k5SrRtvJV
z5dMbPwRSQxZ9s94CzdxuwNi+R4P9qHdJni8mqaoH/C7M+QNXqD5gL/lfYGI7GoY
YO3MPI4+C2fU9ClFIudu869LjqAJZ1nyN8KnWL+/OI/yCyMYqeOrRFNDLO9qwJL8
+J7CynT8AU8Zyo51OIys7akug91MOYzpMYq3mt/lC0DLxphzguZEU0hPax41Vv1y
Pb2dSoPXOMV075aDe89pn+MCRWKj1SHDOoxS0L+6jL+DHAPgs3mDEAWbfgs+cyQJ
7e3AvScMbO1LTn2+g2ML0UX0oFec6tIRnU7cGulkABjDobCr
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:41:11 2025 by rpki-client