
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653463333a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653463333a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: dPBKKIgRzO2XcaAxcwLlUpq2jICQJsR0gJd66vY1+ic=
Subject key identifier: 6A:6B:96:EE:CB:1F:8F:5A:B4:8C:D3:58:AE:31:04:15:60:F6:4F:04
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 7DAA60AC725F7B2FCA76D247CDC9C7E2A24A3D84
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653463333a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:07:20 +0000
ROA not before: Tue 01 Jul 2025 17:02:20 +0000
ROA not after: Tue 30 Jun 2026 17:07:20 +0000
asID: 396968
IP address blocks: 2a0f:6287:e4c3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:aa:60:ac:72:5f:7b:2f:ca:76:d2:47:cd:c9:c7:e2:a2:4a:3d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:02:20 2025 GMT
Not After : Jun 30 17:07:20 2026 GMT
Subject: CN=6A6B96EECB1F8F5AB48CD358AE31041560F64F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:df:5d:7f:83:8c:a3:f5:4d:22:cf:57:48:
3d:f3:05:39:e2:a1:66:1f:9a:40:ea:af:8f:52:84:
ba:c5:18:94:25:e8:0a:3a:11:c1:6e:40:6a:69:9b:
6c:59:57:1f:f0:7c:fa:22:2d:2a:25:1d:c7:9e:c8:
78:b8:c1:48:6f:7c:4b:42:2f:7a:c6:61:20:04:6b:
fa:25:f5:ac:77:c6:6b:86:c0:9c:8d:e1:6f:3a:71:
57:54:94:27:93:60:99:ee:01:21:04:cb:2c:7a:ef:
ef:8d:82:09:c7:b6:05:fb:f6:2e:b2:61:9d:63:cc:
53:38:73:a7:93:6d:67:41:fa:3b:92:07:cc:87:d6:
72:83:c0:6f:0f:07:b2:55:c1:a8:c9:09:88:54:4a:
c8:83:cd:0a:ad:d6:e2:d3:6c:a9:b5:fb:b8:c7:21:
23:82:64:13:aa:d7:2d:a3:40:57:58:90:68:cb:e6:
23:0a:26:7a:f1:23:3f:41:73:ae:77:c6:1f:34:ec:
ef:5b:c7:a5:d8:30:fb:b8:fe:ed:a5:3c:58:b5:a3:
fd:7c:4f:49:fd:ae:dc:9d:5a:2f:45:45:fd:b3:c1:
90:97:fe:07:7a:11:6e:44:04:e1:ec:6c:71:9d:f0:
d2:f6:96:66:69:53:d3:23:9f:d4:cd:8e:e8:5e:57:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6B:96:EE:CB:1F:8F:5A:B4:8C:D3:58:AE:31:04:15:60:F6:4F:04
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653463333a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e4c3::/48
Signature Algorithm: sha256WithRSAEncryption
7c:51:1e:15:3e:a7:f8:1b:9b:e4:89:c2:71:38:a1:de:0e:0d:
c7:b7:91:de:a5:18:48:88:07:26:04:08:83:57:4a:35:86:49:
f7:97:c8:07:8e:4d:ea:9f:8b:8e:d9:b7:f8:23:53:f1:29:74:
fb:0b:3e:e6:fd:32:4e:bd:b1:b3:bf:43:2d:5f:12:ae:c9:71:
9f:34:48:7e:9d:13:de:af:93:ef:33:0a:50:79:21:77:6a:ad:
09:a2:5f:63:ab:ef:ae:32:7e:3b:63:f6:4f:d8:09:ca:13:fd:
42:3a:31:20:9b:44:b7:f3:a4:18:d1:47:98:d3:c7:4b:02:ad:
38:91:34:dc:d6:3c:04:49:e6:69:3e:de:d5:d0:cc:f7:12:94:
6d:94:66:a9:89:59:6f:d9:20:75:aa:a6:e4:c1:87:89:b5:30:
34:f9:d5:1f:5a:66:3d:a1:ee:c3:4a:fd:f6:fd:68:ea:22:01:
1a:a6:da:15:df:0a:8b:ea:7e:f9:7a:5b:3f:28:3e:0e:e9:af:
c7:87:f9:4f:c9:8a:35:ad:c9:40:46:7c:87:48:4e:bf:ba:d8:
6d:14:48:71:88:c8:6b:a4:f7:04:95:5f:a7:e2:21:00:dc:6c:
ce:55:cb:a6:cb:76:2f:2f:5f:3c:d4:cc:64:ea:ed:3d:2a:d1:
de:ee:6f:8e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUfapgrHJfey/KdtJHzcnH4qJKPYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDExNzAyMjBaFw0yNjA2MzAxNzA3MjBaMDMxMTAvBgNV
BAMTKDZBNkI5NkVFQ0IxRjhGNUFCNDhDRDM1OEFFMzEwNDE1NjBGNjRGMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsx99df4OMo/VNIs9XSD3zBTni
oWYfmkDqr49ShLrFGJQl6Ao6EcFuQGppm2xZVx/wfPoiLSolHceeyHi4wUhvfEtC
L3rGYSAEa/ol9ax3xmuGwJyN4W86cVdUlCeTYJnuASEEyyx67++NggnHtgX79i6y
YZ1jzFM4c6eTbWdB+juSB8yH1nKDwG8PB7JVwajJCYhUSsiDzQqt1uLTbKm1+7jH
ISOCZBOq1y2jQFdYkGjL5iMKJnrxIz9Bc653xh807O9bx6XYMPu4/u2lPFi1o/18
T0n9rtydWi9FRf2zwZCX/gd6EW5EBOHsbHGd8NL2lmZpU9Mjn9TNjuheV8kDAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUamuW7ssfj1q0jNNYrjEEFWD2TwQwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzQ2MzMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+TD
MA0GCSqGSIb3DQEBCwUAA4IBAQB8UR4VPqf4G5vkicJxOKHeDg3Ht5HepRhIiAcm
BAiDV0o1hkn3l8gHjk3qn4uO2bf4I1PxKXT7Cz7m/TJOvbGzv0MtXxKuyXGfNEh+
nRPer5PvMwpQeSF3aq0Jol9jq++uMn47Y/ZP2AnKE/1COjEgm0S386QY0UeY08dL
Aq04kTTc1jwESeZpPt7V0Mz3EpRtlGapiVlv2SB1qqbkwYeJtTA0+dUfWmY9oe7D
Sv32/WjqIgEaptoV3wqL6n75els/KD4O6a/Hh/lPyYo1rclARnyHSE6/uthtFEhx
iMhrpPcElV+n4iEA3GzOVcumy3YvL1881Mxk6u09KtHe7m+O
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:44:12 2025 by rpki-client