
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653561643a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653561643a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: dqcAvdt2q5nEMALQmeKB3n6IeZ9pCrgGUcZ8Ow1iTt0=
Subject key identifier: EB:1B:98:54:A9:B5:0D:98:C4:12:2A:09:39:D9:30:60:F7:84:2D:73
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 4AE360595E752397BF50A25118FB68F332B29782
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653561643a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:07:17 +0000
ROA not before: Tue 01 Jul 2025 17:02:17 +0000
ROA not after: Tue 30 Jun 2026 17:07:17 +0000
asID: 396968
IP address blocks: 2a0f:6287:e5ad::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e3:60:59:5e:75:23:97:bf:50:a2:51:18:fb:68:f3:32:b2:97:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:02:17 2025 GMT
Not After : Jun 30 17:07:17 2026 GMT
Subject: CN=EB1B9854A9B50D98C4122A0939D93060F7842D73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:c2:a2:d2:6b:28:20:24:e1:89:08:c6:d4:
47:e3:02:fb:3d:fe:0d:2b:dd:93:3f:74:4c:a8:7a:
8c:5d:f9:69:aa:46:84:4b:98:42:5c:d3:0d:c1:c8:
ea:96:45:dd:80:31:12:b4:0b:ae:20:54:0c:b7:dd:
34:63:a6:8f:e3:ec:36:8d:12:35:68:13:56:66:00:
75:cc:dc:71:06:31:06:d3:65:a6:5f:90:57:5a:08:
0a:3e:74:e0:f2:7f:23:ed:eb:8c:e9:7e:0a:8b:f1:
44:87:71:ce:5b:af:59:df:62:05:e8:47:be:eb:a5:
62:a9:c9:83:5a:0a:6d:59:60:d6:94:d4:bd:18:0c:
0a:74:ff:6d:1c:55:cf:0b:6a:7e:f9:72:0d:41:b2:
90:97:f6:49:67:e0:1a:6c:f2:e1:3a:89:d9:ae:bc:
5c:ea:31:3d:d0:b6:49:e3:ec:35:0b:1e:9b:6a:73:
9d:09:b9:ec:5a:9c:43:6b:38:3e:b5:d9:43:89:3f:
54:5d:76:3d:c1:e4:1d:6f:92:2d:21:39:a6:5a:af:
88:a3:60:fa:53:88:ec:d8:a7:d0:98:16:c5:d2:c1:
68:f5:1e:83:e7:8b:21:a9:e8:0d:4e:58:1d:c4:b4:
f7:86:5b:89:47:27:e2:0a:9f:3e:28:e1:30:f7:82:
c9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1B:98:54:A9:B5:0D:98:C4:12:2A:09:39:D9:30:60:F7:84:2D:73
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653561643a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e5ad::/48
Signature Algorithm: sha256WithRSAEncryption
68:9f:a2:1a:ee:83:1e:b9:c5:4a:ca:1e:bd:00:69:fa:1f:47:
e2:06:5e:10:c0:f5:15:9d:b7:2d:0e:21:8c:51:d3:3c:78:07:
b2:bc:f8:6a:01:d1:ed:88:c9:4b:c7:4d:ae:76:64:af:6d:f9:
b8:2f:70:42:72:84:65:33:bd:f9:b4:15:0f:e6:68:71:1a:6b:
50:dd:ab:0f:ec:1c:8b:c8:6c:ef:8b:76:11:ac:86:c5:0d:2a:
a2:c6:c1:b0:3d:47:bc:2c:52:b9:42:46:04:b3:12:ae:40:a6:
30:00:01:86:eb:ab:43:cd:18:32:d5:63:e3:84:41:ba:c4:12:
b3:64:02:6e:2b:51:85:86:5a:40:ca:43:36:ab:c8:b3:2e:cb:
74:7d:7e:cd:97:18:6a:61:a7:c6:bb:48:92:0b:89:b9:56:99:
a8:eb:ea:41:1f:84:8a:df:55:0c:e2:dc:c6:bc:54:95:9c:3d:
06:45:8c:14:b6:a1:04:72:92:8b:c1:2a:a6:5a:16:9d:e1:35:
3d:30:d4:79:5a:92:57:4b:d8:28:c1:ee:e9:53:bf:be:50:1a:
7f:3a:e8:e4:14:3f:35:b9:23:bb:56:66:7f:16:2a:2f:a6:29:
6f:59:d3:04:b6:fd:cb:61:a0:a2:f0:e6:c4:bf:c2:4a:3a:86:
1b:68:2d:d4
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSuNgWV51I5e/UKJRGPto8zKyl4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDExNzAyMTdaFw0yNjA2MzAxNzA3MTdaMDMxMTAvBgNV
BAMTKEVCMUI5ODU0QTlCNTBEOThDNDEyMkEwOTM5RDkzMDYwRjc4NDJENzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8J8Ki0msoICThiQjG1EfjAvs9
/g0r3ZM/dEyoeoxd+WmqRoRLmEJc0w3ByOqWRd2AMRK0C64gVAy33TRjpo/j7DaN
EjVoE1ZmAHXM3HEGMQbTZaZfkFdaCAo+dODyfyPt64zpfgqL8USHcc5br1nfYgXo
R77rpWKpyYNaCm1ZYNaU1L0YDAp0/20cVc8Lan75cg1BspCX9kln4Bps8uE6idmu
vFzqMT3Qtknj7DULHptqc50JuexanENrOD612UOJP1Rddj3B5B1vki0hOaZar4ij
YPpTiOzYp9CYFsXSwWj1HoPniyGp6A1OWB3EtPeGW4lHJ+IKnz4o4TD3gsnLAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU6xuYVKm1DZjEEioJOdkwYPeELXMwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzU2MTY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+Wt
MA0GCSqGSIb3DQEBCwUAA4IBAQBon6Ia7oMeucVKyh69AGn6H0fiBl4QwPUVnbct
DiGMUdM8eAeyvPhqAdHtiMlLx02udmSvbfm4L3BCcoRlM735tBUP5mhxGmtQ3asP
7ByLyGzvi3YRrIbFDSqixsGwPUe8LFK5QkYEsxKuQKYwAAGG66tDzRgy1WPjhEG6
xBKzZAJuK1GFhlpAykM2q8izLst0fX7NlxhqYafGu0iSC4m5Vpmo6+pBH4SK31UM
4tzGvFSVnD0GRYwUtqEEcpKLwSqmWhad4TU9MNR5WpJXS9gowe7pU7++UBp/Oujk
FD81uSO7VmZ/FiovpilvWdMEtv3LYaCi8ObEv8JKOoYbaC3U
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:25:15 2025 by rpki-client