
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656366653a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a656366653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: ikRayo+ZKWHXBT/seviOJy9umBb4BGypSgDoJey8JpU=
Subject key identifier: 77:83:49:29:69:53:F8:0C:C8:A7:CC:D8:DA:A7:75:DF:CD:C2:D4:B8
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 4BC21EDE2CAA3E51E5F13653F865FD6887E4F390
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656366653a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 17:07:16 +0000
ROA not before: Tue 01 Jul 2025 17:02:16 +0000
ROA not after: Tue 30 Jun 2026 17:07:16 +0000
asID: 396968
IP address blocks: 2a0f:6287:ecfe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c2:1e:de:2c:aa:3e:51:e5:f1:36:53:f8:65:fd:68:87:e4:f3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 17:02:16 2025 GMT
Not After : Jun 30 17:07:16 2026 GMT
Subject: CN=778349296953F80CC8A7CCD8DAA775DFCDC2D4B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:17:dc:d3:55:87:2d:81:3b:0f:9d:90:77:3b:
12:3e:90:69:b1:11:d5:2e:30:5a:48:05:bb:68:41:
f2:a8:9c:7f:86:55:ae:fc:c6:d3:96:7d:0f:23:6e:
e9:4d:20:bd:aa:f2:d0:6a:da:0f:a6:3f:a4:c6:dd:
96:88:48:4b:2a:15:39:dd:ad:f0:3d:2e:88:f8:2f:
4e:f8:07:85:e8:56:2c:11:b8:69:fb:fa:e6:dd:48:
4f:e8:bb:d0:16:d0:e6:8f:14:d4:ad:57:ae:f8:59:
41:e7:8c:c3:1a:a7:85:93:d5:e4:11:5c:a5:27:b3:
49:e6:9d:0f:4d:3b:00:d7:c6:fb:ff:3e:f8:10:98:
70:f7:6d:8c:be:86:e2:b8:f1:72:c8:1f:bc:62:88:
7b:8c:e3:68:7a:8c:30:f6:7c:b4:19:99:08:24:da:
eb:03:76:6a:40:48:3a:76:10:9b:51:46:de:d6:d3:
99:67:fd:71:f2:0b:3b:1f:ca:7c:3b:db:ee:60:d8:
46:a6:7c:3f:66:ca:ae:ce:17:2b:79:9b:c5:09:43:
e8:52:ec:03:8f:f0:e1:a0:61:11:68:7c:b9:9c:aa:
81:d1:bf:3a:14:80:5d:a3:71:ef:a3:1b:cd:dd:c0:
29:33:a5:67:b7:50:fd:ef:67:01:7f:ca:76:bc:02:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:83:49:29:69:53:F8:0C:C8:A7:CC:D8:DA:A7:75:DF:CD:C2:D4:B8
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656366653a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:ecfe::/48
Signature Algorithm: sha256WithRSAEncryption
c1:44:2c:94:98:8e:42:93:16:69:4c:4a:c8:95:ca:05:a5:dd:
da:1c:9d:53:13:bf:53:f2:89:ec:f7:0e:fa:b8:5f:62:bb:45:
b5:3d:77:89:47:c3:54:ed:8c:92:f1:ec:19:60:79:28:df:8a:
98:76:cb:09:ca:19:13:dc:19:aa:b7:2c:ef:50:91:87:21:60:
5c:65:2c:ce:a8:3c:4f:42:75:bb:a8:46:d9:52:b0:92:68:29:
81:25:75:f9:9d:a1:e8:c7:15:54:6d:5a:51:53:e6:a2:54:e8:
5f:3b:e8:af:0a:26:5a:05:27:81:e9:71:06:59:4e:a3:26:d3:
1a:77:17:af:b6:d9:15:e6:37:f7:f7:69:63:4a:fa:73:0f:ec:
26:db:33:19:56:19:bd:7f:3b:7a:5c:66:7f:fb:18:5c:ef:1d:
e5:8f:dd:05:0d:5e:21:dd:32:6c:1f:fd:38:b7:2c:df:c5:e4:
0f:fc:87:db:03:e2:3f:c1:1d:0c:c5:68:f3:b5:4d:a9:74:7d:
e3:b1:b7:fc:5f:d8:5e:67:85:57:04:a0:b8:1b:95:77:10:95:
bc:01:1e:be:ef:07:05:7f:49:a6:61:d2:2d:9b:28:72:0e:e7:
b0:b6:87:93:6c:90:83:f1:84:b0:f0:13:ac:1b:45:9e:88:d4:
06:cf:a2:4f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUS8Ie3iyqPlHl8TZT+GX9aIfk85AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDExNzAyMTZaFw0yNjA2MzAxNzA3MTZaMDMxMTAvBgNV
BAMTKDc3ODM0OTI5Njk1M0Y4MENDOEE3Q0NEOERBQTc3NURGQ0RDMkQ0QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnF9zTVYctgTsPnZB3OxI+kGmx
EdUuMFpIBbtoQfKonH+GVa78xtOWfQ8jbulNIL2q8tBq2g+mP6TG3ZaISEsqFTnd
rfA9Loj4L074B4XoViwRuGn7+ubdSE/ou9AW0OaPFNStV674WUHnjMMap4WT1eQR
XKUns0nmnQ9NOwDXxvv/PvgQmHD3bYy+huK48XLIH7xiiHuM42h6jDD2fLQZmQgk
2usDdmpASDp2EJtRRt7W05ln/XHyCzsfynw72+5g2EamfD9myq7OFyt5m8UJQ+hS
7AOP8OGgYRFofLmcqoHRvzoUgF2jce+jG83dwCkzpWe3UP3vZwF/yna8AoZ/AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUd4NJKWlT+AzIp8zY2qd1383C1LgwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjM2NjY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+z+
MA0GCSqGSIb3DQEBCwUAA4IBAQDBRCyUmI5CkxZpTErIlcoFpd3aHJ1TE79T8ons
9w76uF9iu0W1PXeJR8NU7YyS8ewZYHko34qYdssJyhkT3BmqtyzvUJGHIWBcZSzO
qDxPQnW7qEbZUrCSaCmBJXX5naHoxxVUbVpRU+aiVOhfO+ivCiZaBSeB6XEGWU6j
JtMadxevttkV5jf392ljSvpzD+wm2zMZVhm9fzt6XGZ/+xhc7x3lj90FDV4h3TJs
H/04tyzfxeQP/IfbA+I/wR0MxWjztU2pdH3jsbf8X9heZ4VXBKC4G5V3EJW8AR6+
7wcFf0mmYdItmyhyDuewtoeTbJCD8YSw8BOsG0WeiNQGz6JP
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:54:16 2025 by rpki-client