
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653738323a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a653738323a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: xe1z4D7oQBDDMrRtUSwXbgIXtbqHcwwp33hTUhwpCOg=
Subject key identifier: 72:A3:D7:D5:28:60:89:72:10:ED:8C:FB:C1:16:24:34:84:82:BF:8A
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 662D0DCAE076EEFA454F830F3CA187B9627A590B
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653738323a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:08:01 +0000
ROA not before: Tue 01 Jul 2025 17:03:01 +0000
ROA not after: Tue 30 Jun 2026 17:08:01 +0000
asID: 396968
IP address blocks: 2a0f:6287:e782::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:2d:0d:ca:e0:76:ee:fa:45:4f:83:0f:3c:a1:87:b9:62:7a:59:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:03:01 2025 GMT
Not After : Jun 30 17:08:01 2026 GMT
Subject: CN=72A3D7D52860897210ED8CFBC11624348482BF8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:50:db:1c:df:4d:67:15:0c:92:63:25:59:04:
24:45:3d:2a:56:de:bb:31:18:17:7b:47:77:3d:95:
bc:3f:26:a4:a1:39:a7:e6:c4:7c:4d:f5:db:b7:96:
d9:23:65:b3:2e:a7:55:a9:cd:52:16:f1:34:8c:59:
98:3f:3e:a6:ee:69:2d:bb:d5:bf:2c:fa:bf:05:7d:
5d:d8:ae:8f:87:bd:3d:e5:60:e3:40:76:e4:06:6a:
ea:2d:d2:e1:95:2d:ba:37:01:28:40:f3:54:7d:cd:
16:89:e4:16:36:2e:2a:7d:34:e9:35:aa:b0:6a:68:
e5:b2:bd:f5:42:9f:a6:90:5e:87:b9:7c:f5:5d:6d:
b1:ac:91:16:46:b6:95:16:2e:e7:92:0c:26:b2:4a:
0e:1f:82:0b:d8:fc:90:61:2a:01:db:76:e9:2e:de:
22:bb:ab:66:91:a9:27:70:a8:7f:30:40:9d:44:3c:
ce:88:7f:ff:06:e8:8d:7d:cf:5a:24:aa:4a:de:52:
60:dd:ae:fd:2a:b5:85:9f:8c:05:9d:e5:e8:f2:ed:
2d:d6:c2:dc:05:f2:b5:2e:71:19:6c:19:00:ca:46:
fd:c2:13:3f:61:25:a0:49:cb:47:a4:cd:7a:97:69:
33:e8:85:64:c8:1c:52:d7:e0:74:c9:55:20:d7:14:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A3:D7:D5:28:60:89:72:10:ED:8C:FB:C1:16:24:34:84:82:BF:8A
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653738323a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:e782::/48
Signature Algorithm: sha256WithRSAEncryption
94:8d:b4:71:ec:61:be:3f:23:2c:55:1d:80:9a:26:14:c9:58:
bc:9d:76:e4:4f:e1:c0:a4:52:e1:60:ef:20:a7:a6:34:08:47:
8c:05:0d:a5:62:03:20:87:10:a7:b9:f4:ec:0b:1c:e2:dd:7d:
de:ff:be:a3:9c:65:12:6a:e6:ff:3f:7c:14:89:b2:53:54:19:
d6:c5:cc:92:4c:48:34:4d:11:6f:3f:ad:f1:19:5b:07:54:4e:
e0:41:63:23:20:e1:2c:98:66:9c:2f:1b:d4:b5:64:c6:c5:70:
75:6b:56:8d:ed:06:0c:01:d1:20:65:59:ab:9b:e7:05:76:4d:
48:bc:c5:ad:c8:5d:c2:d4:dc:a0:e9:f1:df:89:a2:b4:76:84:
d2:4f:14:99:28:15:98:2f:dd:3d:5a:85:7d:5b:a5:fb:37:ca:
6b:2a:eb:7d:53:30:c6:3f:e1:73:01:ab:50:77:3b:91:8f:a8:
ac:6e:e5:dc:7d:7a:78:53:c0:5a:b6:e5:bc:d4:7d:89:ff:5f:
46:31:17:05:29:09:fa:fc:b5:6c:d2:b3:e6:3d:08:69:f1:9b:
95:c8:c3:84:22:52:cf:d1:60:50:d7:a0:50:00:0e:09:52:59:
16:69:a2:a6:ed:2e:ba:ba:04:1e:65:b9:8c:df:00:b6:71:96:
30:13:32:f6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUZi0NyuB27vpFT4MPPKGHuWJ6WQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDExNzAzMDFaFw0yNjA2MzAxNzA4MDFaMDMxMTAvBgNV
BAMTKDcyQTNEN0Q1Mjg2MDg5NzIxMEVEOENGQkMxMTYyNDM0ODQ4MkJGOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfUNsc301nFQySYyVZBCRFPSpW
3rsxGBd7R3c9lbw/JqShOafmxHxN9du3ltkjZbMup1WpzVIW8TSMWZg/PqbuaS27
1b8s+r8FfV3Yro+HvT3lYONAduQGauot0uGVLbo3AShA81R9zRaJ5BY2Lip9NOk1
qrBqaOWyvfVCn6aQXoe5fPVdbbGskRZGtpUWLueSDCaySg4fggvY/JBhKgHbduku
3iK7q2aRqSdwqH8wQJ1EPM6If/8G6I19z1okqkreUmDdrv0qtYWfjAWd5ejy7S3W
wtwF8rUucRlsGQDKRv3CEz9hJaBJy0ekzXqXaTPohWTIHFLX4HTJVSDXFKmZAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUcqPX1ShgiXIQ7Yz7wRYkNISCv4owHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzczODMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+eC
MA0GCSqGSIb3DQEBCwUAA4IBAQCUjbRx7GG+PyMsVR2AmiYUyVi8nXbkT+HApFLh
YO8gp6Y0CEeMBQ2lYgMghxCnufTsCxzi3X3e/76jnGUSaub/P3wUibJTVBnWxcyS
TEg0TRFvP63xGVsHVE7gQWMjIOEsmGacLxvUtWTGxXB1a1aN7QYMAdEgZVmrm+cF
dk1IvMWtyF3C1Nyg6fHfiaK0doTSTxSZKBWYL909WoV9W6X7N8prKut9UzDGP+Fz
AatQdzuRj6isbuXcfXp4U8BatuW81H2J/19GMRcFKQn6/LVs0rPmPQhp8ZuVyMOE
IlLP0WBQ16BQAA4JUlkWaaKm7S66ugQeZbmM3wC2cZYwEzL2
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:54:16 2025 by rpki-client