
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: 7o/NHc6Emf+GrhFD8bQ4z65nPp/rd2exB2fYGtdlhnI=
Subject key identifier: 0C:EE:B1:89:91:BD:E5:4B:24:19:77:84:E4:0E:84:9F:48:8A:73:DA
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 07CB110043A242A85A06D4D7A188275750F5DA27
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 03:28:23 +0000
ROA not before: Tue 01 Jul 2025 03:23:23 +0000
ROA not after: Tue 30 Jun 2026 03:28:23 +0000
asID: 396968
IP address blocks: 2a0f:6287:fb74::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:cb:11:00:43:a2:42:a8:5a:06:d4:d7:a1:88:27:57:50:f5:da:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 03:23:23 2025 GMT
Not After : Jun 30 03:28:23 2026 GMT
Subject: CN=0CEEB18991BDE54B24197784E40E849F488A73DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:c7:d1:bc:ff:9e:04:c5:1c:e2:1e:b1:ec:
47:2f:03:71:ea:60:e2:5b:3a:cd:c1:19:7b:4b:51:
4a:7d:82:3c:39:1c:56:e7:d2:a8:25:a9:aa:14:6d:
91:86:01:34:73:ce:41:7b:a4:7d:6a:d9:9a:f8:05:
2a:5a:81:c4:98:00:14:2d:ca:1a:cf:55:3c:19:b9:
57:53:ee:59:5d:25:8f:75:f3:08:73:86:2d:73:54:
10:53:24:ab:c9:6f:9c:45:f6:fc:df:0a:1c:5c:d6:
f5:43:28:73:b5:fd:b1:27:31:45:ad:41:47:52:21:
99:be:46:8b:89:43:9e:ce:ac:07:b3:3f:c9:b2:c7:
40:ef:9c:d7:c3:59:96:94:93:23:dd:0f:f0:02:6d:
21:8e:b6:30:0d:e7:a6:be:cb:23:b2:ad:ab:fd:d7:
07:6b:fc:23:a3:16:be:aa:08:e9:ed:88:88:d3:8e:
68:c4:28:7a:a8:dd:17:9b:b3:36:d7:e9:e2:35:14:
8f:80:75:bf:d0:73:28:fd:29:8b:c9:58:52:ce:bf:
6f:70:5e:cc:6e:ad:0c:d3:58:4a:99:bc:61:eb:e5:
8b:6e:43:db:e6:da:eb:98:0f:2a:13:d1:1d:65:8c:
97:38:f1:eb:3a:78:c8:64:a5:ae:48:fd:f6:1e:f9:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EE:B1:89:91:BD:E5:4B:24:19:77:84:E4:0E:84:9F:48:8A:73:DA
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fb74::/48
Signature Algorithm: sha256WithRSAEncryption
63:be:39:00:41:01:cd:8f:d3:8c:d4:c1:35:15:e4:69:05:1c:
3c:80:21:66:0d:d8:34:8b:77:05:52:2b:61:2f:fc:01:06:e0:
25:6c:bf:df:4c:ed:fd:9a:5f:d2:9e:a7:de:cb:71:1b:00:bd:
c3:33:22:d1:a0:2e:64:8b:19:bc:a4:29:0d:81:1f:f9:70:d7:
1c:ea:2f:09:2d:2b:f1:a2:cd:c1:04:b1:d3:0c:db:a1:aa:66:
1e:28:92:89:e9:f4:73:b9:54:27:38:71:44:ca:e0:8b:2d:b4:
9d:e5:43:51:89:d9:e7:b6:ac:13:44:e4:f4:f3:44:dd:f1:89:
5c:e8:84:6c:e8:d3:5e:11:8d:0d:74:4d:8f:35:8b:6c:09:cc:
b7:05:71:a5:d3:b5:43:68:de:c6:bc:12:7c:77:36:4e:b4:6e:
23:33:67:6d:3a:50:a3:7a:e9:d9:57:77:da:b5:12:fb:89:d3:
85:7e:b0:25:f2:e6:70:66:af:60:84:3b:ba:d3:ad:e9:d1:39:
3a:b7:32:0a:93:7b:14:c7:40:33:40:1e:23:c1:1a:db:22:7f:
9d:d3:01:01:7a:57:c0:f8:4a:e3:62:46:13:2c:f3:fc:10:59:
bd:df:9d:52:71:91:31:5a:ce:99:fb:96:e6:c4:0b:9f:de:7a:
d8:13:39:10
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUB8sRAEOiQqhaBtTXoYgnV1D12icwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDEwMzIzMjNaFw0yNjA2MzAwMzI4MjNaMDMxMTAvBgNV
BAMTKDBDRUVCMTg5OTFCREU1NEIyNDE5Nzc4NEU0MEU4NDlGNDg4QTczREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPxsfRvP+eBMUc4h6x7EcvA3Hq
YOJbOs3BGXtLUUp9gjw5HFbn0qglqaoUbZGGATRzzkF7pH1q2Zr4BSpagcSYABQt
yhrPVTwZuVdT7lldJY918whzhi1zVBBTJKvJb5xF9vzfChxc1vVDKHO1/bEnMUWt
QUdSIZm+RouJQ57OrAezP8myx0DvnNfDWZaUkyPdD/ACbSGOtjAN56a+yyOyrav9
1wdr/COjFr6qCOntiIjTjmjEKHqo3RebszbX6eI1FI+Adb/Qcyj9KYvJWFLOv29w
XsxurQzTWEqZvGHr5YtuQ9vm2uuYDyoT0R1ljJc48es6eMhkpa5I/fYe+WN3AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUDO6xiZG95UskGXeE5A6En0iKc9owHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjIzNzM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/t0
MA0GCSqGSIb3DQEBCwUAA4IBAQBjvjkAQQHNj9OM1ME1FeRpBRw8gCFmDdg0i3cF
UithL/wBBuAlbL/fTO39ml/Snqfey3EbAL3DMyLRoC5kixm8pCkNgR/5cNcc6i8J
LSvxos3BBLHTDNuhqmYeKJKJ6fRzuVQnOHFEyuCLLbSd5UNRidnntqwTROT080Td
8Ylc6IRs6NNeEY0NdE2PNYtsCcy3BXGl07VDaN7GvBJ8dzZOtG4jM2dtOlCjeunZ
V3fatRL7idOFfrAl8uZwZq9ghDu6063p0Tk6tzIKk3sUx0AzQB4jwRrbIn+d0wEB
elfA+ErjYkYTLPP8EFm9351ScZExWs6Z+5bmxAuf3nrYEzkQ
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:32:37 2025 by rpki-client