Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663134343a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663134343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 0f0Dl53gHSlPr7IP/ZEdTOlvf2thi3Bs0LOWlt/Y4y8=
Subject key identifier: 8C:B9:97:A9:E4:D0:63:AD:29:49:79:66:56:4A:8C:26:74:5F:A3:E6
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 1335F4D71929EB60F2EE2C1E90BAEA0BA29EE451
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663134343a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:37:33 +0000
ROA not before: Thu 26 Jun 2025 12:32:33 +0000
ROA not after: Thu 25 Jun 2026 12:37:33 +0000
asID: 396968
IP address blocks: 2a0f:6287:f144::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:35:f4:d7:19:29:eb:60:f2:ee:2c:1e:90:ba:ea:0b:a2:9e:e4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:32:33 2025 GMT
Not After : Jun 25 12:37:33 2026 GMT
Subject: CN=8CB997A9E4D063AD29497966564A8C26745FA3E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:34:f0:de:95:4a:d1:05:24:3c:86:1a:05:
35:19:41:ac:fd:0d:fd:19:06:c1:e1:54:6f:d9:1d:
a2:c7:ac:86:2a:c8:6d:da:5b:b6:16:c1:d6:02:a1:
fe:08:f3:a5:9a:08:21:cf:53:99:65:5f:e6:fd:aa:
f9:2b:ac:34:2f:4d:81:4c:de:51:fe:d7:e9:50:c4:
06:18:59:79:9f:e7:b9:26:19:ec:30:6c:53:3d:97:
79:e7:95:bd:c6:44:4c:ca:ea:36:d4:16:de:24:0e:
3f:db:c6:80:cf:8c:76:b1:bd:db:d0:29:80:6d:13:
a2:2d:df:5f:53:db:b6:5a:f5:87:63:03:2d:20:55:
c3:7a:18:34:55:19:c6:b9:8f:08:74:37:75:cf:35:
60:69:20:d8:7b:6d:7c:f5:d4:fe:28:76:13:76:90:
08:1a:c0:7d:a2:f6:98:17:25:2e:15:bc:43:c7:66:
e2:20:58:43:4f:8d:7e:7f:90:0a:93:a7:c3:70:e8:
4d:fc:b0:89:dd:7e:53:ee:89:3d:e4:22:0d:76:7c:
ac:64:1b:88:e2:05:e6:52:34:c8:57:9b:54:34:e4:
f8:6f:88:f1:87:71:ce:90:24:25:49:49:0e:cc:3f:
11:f4:3a:1d:dd:2f:3f:58:e4:ee:d3:88:f0:25:2f:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B9:97:A9:E4:D0:63:AD:29:49:79:66:56:4A:8C:26:74:5F:A3:E6
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663134343a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f144::/48
Signature Algorithm: sha256WithRSAEncryption
84:10:aa:ef:0c:a8:c1:6d:b1:8c:93:22:e7:7e:cc:08:9d:91:
9e:a4:51:dd:9a:0a:56:15:96:b7:3b:1f:d3:0f:bf:e1:b4:a4:
3d:4b:b4:d9:74:bf:44:24:fb:77:fb:78:6e:3c:88:5c:65:12:
3f:92:66:f4:af:c1:db:80:05:b2:aa:12:2b:b1:01:d5:d3:33:
57:d3:aa:ee:00:2b:d6:59:2b:81:52:60:b8:83:09:68:8f:05:
05:f5:93:63:aa:44:21:c1:1c:52:54:d7:79:00:c9:60:65:e3:
2b:e7:25:2b:95:0a:c1:dc:1b:fe:3d:ce:9f:6d:2e:23:b5:e7:
9c:ae:2f:44:bd:aa:66:cc:6c:f5:76:9a:bc:e0:3d:f3:97:0a:
cd:d5:c6:f2:8b:fc:2d:30:bf:e7:32:9d:a5:5c:ba:e2:34:a9:
61:4f:03:f5:4b:44:c5:9b:03:19:2e:a1:c6:75:dd:f4:53:f5:
a0:8e:ec:64:8f:88:69:c9:4f:fe:85:e6:31:2d:a0:db:b4:6c:
ac:87:24:f8:25:c6:6c:12:42:c2:a9:28:a2:23:aa:41:d7:47:
73:3a:e6:b4:73:6c:03:a9:48:e2:20:df:04:64:98:06:27:a3:
81:ef:db:1a:76:0e:af:ee:cf:7a:4a:ac:b5:9f:6a:f6:cd:a7:
0c:51:5a:a9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUEzX01xkp62Dy7iwekLrqC6Ke5FEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA2MjYxMjMyMzNaFw0yNjA2MjUxMjM3MzNaMDMxMTAvBgNV
BAMTKDhDQjk5N0E5RTREMDYzQUQyOTQ5Nzk2NjU2NEE4QzI2NzQ1RkEzRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOdzTw3pVK0QUkPIYaBTUZQaz9
Df0ZBsHhVG/ZHaLHrIYqyG3aW7YWwdYCof4I86WaCCHPU5llX+b9qvkrrDQvTYFM
3lH+1+lQxAYYWXmf57kmGewwbFM9l3nnlb3GREzK6jbUFt4kDj/bxoDPjHaxvdvQ
KYBtE6It319T27Za9YdjAy0gVcN6GDRVGca5jwh0N3XPNWBpINh7bXz11P4odhN2
kAgawH2i9pgXJS4VvEPHZuIgWENPjX5/kAqTp8Nw6E38sIndflPuiT3kIg12fKxk
G4jiBeZSNMhXm1Q05PhviPGHcc6QJCVJSQ7MPxH0Oh3dLz9Y5O7TiPAlL4TjAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUjLmXqeTQY60pSXlmVkqMJnRfo+YwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2MzEzNDM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/FE
MA0GCSqGSIb3DQEBCwUAA4IBAQCEEKrvDKjBbbGMkyLnfswInZGepFHdmgpWFZa3
Ox/TD7/htKQ9S7TZdL9EJPt3+3huPIhcZRI/kmb0r8HbgAWyqhIrsQHV0zNX06ru
ACvWWSuBUmC4gwlojwUF9ZNjqkQhwRxSVNd5AMlgZeMr5yUrlQrB3Bv+Pc6fbS4j
teecri9EvapmzGz1dpq84D3zlwrN1cbyi/wtML/nMp2lXLriNKlhTwP1S0TFmwMZ
LqHGdd30U/Wgjuxkj4hpyU/+heYxLaDbtGyshyT4JcZsEkLCqSiiI6pB10dzOua0
c2wDqUjiIN8EZJgGJ6OB79sadg6v7s96Sqy1n2r2zacMUVqp
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:35:46 2025 by rpki-client