
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663462623a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a663462623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: e+f61Brc61CbPPx0YSEXT0G9KOdUdArUpNCjGsDW7hA=
Subject key identifier: B0:5C:F4:1A:33:44:24:AD:97:82:1C:9D:78:D6:E9:E8:C2:B3:A8:E4
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 300CB8E39572FF9C7D62E3569D7B514FCFD9FAF3
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663462623a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 03:45:31 +0000
ROA not before: Tue 01 Jul 2025 03:40:31 +0000
ROA not after: Tue 30 Jun 2026 03:45:31 +0000
asID: 396968
IP address blocks: 2a0f:6287:f4bb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:0c:b8:e3:95:72:ff:9c:7d:62:e3:56:9d:7b:51:4f:cf:d9:fa:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 03:40:31 2025 GMT
Not After : Jun 30 03:45:31 2026 GMT
Subject: CN=B05CF41A334424AD97821C9D78D6E9E8C2B3A8E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:e8:41:af:b8:69:67:16:a0:96:c0:e4:fb:
63:b3:cd:6e:46:85:21:6b:96:c5:cf:72:72:73:87:
76:20:56:89:12:08:2d:e1:6a:f8:4b:ae:3a:99:35:
0c:3c:2c:8c:5d:42:93:82:ae:51:31:57:67:75:ee:
5c:b4:fa:40:07:8d:2d:ef:0f:12:e7:fc:89:ee:e8:
5a:1f:63:c6:f5:ee:41:83:b7:3c:bc:16:f4:3d:f3:
54:5b:45:61:1a:74:2d:ce:fe:52:73:03:64:46:a5:
3f:b8:a2:08:80:84:e8:2c:56:50:32:30:5a:b7:b8:
5b:89:01:a1:00:37:f7:13:73:20:67:2a:eb:fe:97:
1d:1c:af:ce:80:98:cd:9c:ce:57:b7:70:f5:d3:08:
be:de:c5:88:16:d3:ec:17:28:04:04:0a:dd:bc:08:
a1:8c:07:ad:fb:0f:84:d3:2e:03:61:e8:74:45:c8:
8b:c2:f4:8a:e5:3e:39:c3:bd:bc:3a:23:02:19:f1:
55:76:14:06:1e:e0:0c:6d:95:17:9c:e4:12:75:09:
b5:f9:0f:cb:dc:ea:01:f6:4d:b6:e3:30:fd:6c:28:
2a:26:fa:e7:ce:e9:fb:f9:64:d2:28:e1:37:73:6e:
9b:f9:4f:ce:d9:d4:88:33:56:f2:78:a1:07:6a:b7:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5C:F4:1A:33:44:24:AD:97:82:1C:9D:78:D6:E9:E8:C2:B3:A8:E4
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663462623a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:f4bb::/48
Signature Algorithm: sha256WithRSAEncryption
6f:15:4d:ac:fa:4d:a2:ac:5c:d0:c0:f5:23:fe:9f:c9:4d:87:
2e:b2:cf:ca:23:14:ea:fb:9d:47:7d:8b:d4:12:6c:e1:28:d3:
86:ac:f2:e5:57:d3:25:c8:6f:54:d3:a8:18:19:67:a7:5d:25:
64:84:e6:96:2a:e8:2d:83:ca:bf:5f:de:73:24:55:08:34:2f:
f9:03:9f:9b:eb:cd:11:22:67:a1:2d:18:dc:6b:54:d5:00:7d:
fe:e5:03:4f:ed:c2:63:ae:50:12:18:44:3e:8d:12:34:95:07:
5a:01:aa:f7:e1:59:f5:ca:ef:8c:dc:2b:64:ad:34:e4:c4:68:
8f:9d:22:7b:9a:dd:e7:19:0f:e1:f1:7b:0e:49:3b:cd:0a:5a:
90:8f:94:93:e3:d4:a2:e6:62:d0:08:b6:e3:d0:c0:67:ae:ec:
27:9a:99:1b:ae:32:cc:81:62:cb:77:13:00:e7:a2:5d:01:c5:
90:1d:14:7b:76:4f:4a:08:20:fa:01:cc:b9:c0:bb:56:51:5f:
59:11:62:f7:bf:f7:4a:66:90:57:96:aa:4e:54:6d:ea:d0:b5:
64:63:98:0a:a6:d7:41:1e:98:3f:84:59:dc:34:95:2a:40:f9:
6b:24:f2:48:ab:ee:4a:42:d2:60:08:54:64:4c:9c:83:83:4f:
b1:e0:0d:70
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUMAy445Vy/5x9YuNWnXtRT8/Z+vMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDEwMzQwMzFaFw0yNjA2MzAwMzQ1MzFaMDMxMTAvBgNV
BAMTKEIwNUNGNDFBMzM0NDI0QUQ5NzgyMUM5RDc4RDZFOUU4QzJCM0E4RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe3+hBr7hpZxaglsDk+2OzzW5G
hSFrlsXPcnJzh3YgVokSCC3havhLrjqZNQw8LIxdQpOCrlExV2d17ly0+kAHjS3v
DxLn/Inu6FofY8b17kGDtzy8FvQ981RbRWEadC3O/lJzA2RGpT+4ogiAhOgsVlAy
MFq3uFuJAaEAN/cTcyBnKuv+lx0cr86AmM2czle3cPXTCL7exYgW0+wXKAQECt28
CKGMB637D4TTLgNh6HRFyIvC9IrlPjnDvbw6IwIZ8VV2FAYe4AxtlRec5BJ1CbX5
D8vc6gH2TbbjMP1sKCom+ufO6fv5ZNIo4Tdzbpv5T87Z1IgzVvJ4oQdqt4xLAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUsFz0GjNEJK2XghydeNbp6MKzqOQwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2MzQ2MjYyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/S7
MA0GCSqGSIb3DQEBCwUAA4IBAQBvFU2s+k2irFzQwPUj/p/JTYcuss/KIxTq+51H
fYvUEmzhKNOGrPLlV9MlyG9U06gYGWenXSVkhOaWKugtg8q/X95zJFUINC/5A5+b
680RImehLRjca1TVAH3+5QNP7cJjrlASGEQ+jRI0lQdaAar34Vn1yu+M3CtkrTTk
xGiPnSJ7mt3nGQ/h8XsOSTvNClqQj5ST49Si5mLQCLbj0MBnruwnmpkbrjLMgWLL
dxMA56JdAcWQHRR7dk9KCCD6Acy5wLtWUV9ZEWL3v/dKZpBXlqpOVG3q0LVkY5gK
ptdBHpg/hFncNJUqQPlrJPJIq+5KQtJgCFRkTJyDg0+x4A1w
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:04:08 2025 by rpki-client