Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666235383a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666235383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: Lmb2qCGcCDpvRu6IHcUyrm8f7kuOAjgSuqunAlZdiYM=
Subject key identifier: 53:0E:73:2A:CD:5B:11:E9:57:6A:8D:B2:39:A8:B2:FE:29:79:5A:A6
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 03691A1AADF852E11F748F3C3CE8B9CDEDDEB067
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666235383a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:37:33 +0000
ROA not before: Thu 26 Jun 2025 12:32:33 +0000
ROA not after: Thu 25 Jun 2026 12:37:33 +0000
asID: 396968
IP address blocks: 2a0f:6287:fb58::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:69:1a:1a:ad:f8:52:e1:1f:74:8f:3c:3c:e8:b9:cd:ed:de:b0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:32:33 2025 GMT
Not After : Jun 25 12:37:33 2026 GMT
Subject: CN=530E732ACD5B11E9576A8DB239A8B2FE29795AA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:c0:ee:3c:43:d8:5d:79:ea:47:1c:e3:e7:
ee:57:6c:58:9c:a7:0d:5a:29:71:23:82:6f:af:77:
7e:dc:17:8e:6f:bf:29:7f:98:0d:60:b6:f5:9f:1e:
e2:73:8f:9d:66:ff:8b:72:18:c1:a2:5e:05:e3:5f:
26:2d:d5:84:7e:90:34:bf:ae:bf:e7:b2:14:b5:68:
3c:db:fb:47:e2:f0:f7:04:51:87:2b:fc:eb:85:12:
bb:e4:d8:bb:18:20:02:ed:da:04:ae:52:fe:e7:00:
89:a4:75:f8:93:c0:3d:5e:c5:d8:bb:f0:66:05:6d:
7d:1c:6e:86:18:ee:ba:83:87:c6:17:58:cf:f2:70:
5e:9e:21:89:88:94:d1:e6:f9:19:a3:84:97:2e:20:
91:17:db:33:0d:80:44:4e:91:50:e9:02:3c:23:ac:
30:4e:66:34:ff:66:ef:f8:18:a1:52:97:0a:07:80:
71:94:7a:e8:b6:ad:90:43:2e:02:61:58:a3:b0:cd:
81:05:48:35:81:88:5b:ef:e5:58:71:97:1c:79:3d:
2a:27:19:09:17:29:b0:be:9d:7a:ab:e3:e5:10:89:
af:bf:c1:0c:36:60:f8:98:9c:f9:0f:74:68:0c:4c:
53:0f:2d:31:ac:10:8c:48:7d:61:4d:25:36:d3:9a:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0E:73:2A:CD:5B:11:E9:57:6A:8D:B2:39:A8:B2:FE:29:79:5A:A6
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666235383a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fb58::/48
Signature Algorithm: sha256WithRSAEncryption
96:f8:ea:19:f6:57:96:31:15:cc:08:6d:35:5d:f2:ff:48:d5:
8c:05:d9:84:67:0a:97:87:c5:38:0e:1a:85:de:8a:05:d1:30:
4d:45:05:00:22:6f:bb:80:af:1b:49:e0:a2:57:d7:4f:3e:54:
f2:98:41:55:00:bb:c8:bf:ff:d0:2a:82:bc:0f:30:30:9c:5f:
57:3e:b4:fd:68:9b:e9:a5:e6:99:27:64:59:2b:dd:1a:2b:80:
64:43:ba:74:1b:f4:08:72:d2:bf:3f:4f:55:91:77:f0:37:17:
5d:79:26:f4:db:00:b2:9e:2f:1c:d5:08:82:dd:3a:c9:c4:36:
8a:f7:4d:ec:98:a4:51:24:da:fe:f9:1c:bc:3f:8d:83:a9:14:
33:2e:0c:73:4b:07:5c:f5:f5:49:5c:b4:ef:10:a8:12:42:7e:
83:96:d1:eb:6a:76:bc:1f:e4:3a:1d:1a:58:73:cc:e4:4f:69:
32:a6:13:33:c1:cf:ec:92:9f:dd:2e:f4:a1:9a:ff:08:c9:94:
2b:3e:c3:60:34:fc:1e:e3:93:95:b2:af:25:18:4a:c6:4e:2c:
19:9f:ae:f7:ef:b4:47:e1:21:18:e9:36:2b:4b:a8:86:78:85:
9c:1b:7d:a1:ac:92:e6:5d:89:8a:d1:08:e0:d4:29:b2:db:4f:
93:f1:98:5d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUA2kaGq34UuEfdI88POi5ze3esGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA2MjYxMjMyMzNaFw0yNjA2MjUxMjM3MzNaMDMxMTAvBgNV
BAMTKDUzMEU3MzJBQ0Q1QjExRTk1NzZBOERCMjM5QThCMkZFMjk3OTVBQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ18DuPEPYXXnqRxzj5+5XbFic
pw1aKXEjgm+vd37cF45vvyl/mA1gtvWfHuJzj51m/4tyGMGiXgXjXyYt1YR+kDS/
rr/nshS1aDzb+0fi8PcEUYcr/OuFErvk2LsYIALt2gSuUv7nAImkdfiTwD1exdi7
8GYFbX0cboYY7rqDh8YXWM/ycF6eIYmIlNHm+RmjhJcuIJEX2zMNgEROkVDpAjwj
rDBOZjT/Zu/4GKFSlwoHgHGUeui2rZBDLgJhWKOwzYEFSDWBiFvv5Vhxlxx5PSon
GQkXKbC+nXqr4+UQia+/wQw2YPiYnPkPdGgMTFMPLTGsEIxIfWFNJTbTmnDHAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUUw5zKs1bEelXao2yOaiy/il5WqYwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjIzNTM4M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/tY
MA0GCSqGSIb3DQEBCwUAA4IBAQCW+OoZ9leWMRXMCG01XfL/SNWMBdmEZwqXh8U4
DhqF3ooF0TBNRQUAIm+7gK8bSeCiV9dPPlTymEFVALvIv//QKoK8DzAwnF9XPrT9
aJvppeaZJ2RZK90aK4BkQ7p0G/QIctK/P09VkXfwNxddeSb02wCyni8c1QiC3TrJ
xDaK903smKRRJNr++Ry8P42DqRQzLgxzSwdc9fVJXLTvEKgSQn6DltHrana8H+Q6
HRpYc8zkT2kyphMzwc/skp/dLvShmv8IyZQrPsNgNPwe45OVsq8lGErGTiwZn673
77RH4SEY6TYrS6iGeIWcG32hrJLmXYmK0Qjg1Cmy20+T8Zhd
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:48:14 2025 by rpki-client