
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666361373a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666361373a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: YeMQBAM1L4Qm3iWzMsJL7Fq3intMxGgnX9GUClvr//A=
Subject key identifier: 93:86:63:86:E4:B6:60:1F:17:41:E1:CB:95:BC:CA:9A:33:FD:59:B2
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 19B17FD64EC0994D08F840CBBC278161915790EA
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666361373a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 04:18:02 +0000
ROA not before: Tue 01 Jul 2025 04:13:02 +0000
ROA not after: Tue 30 Jun 2026 04:18:02 +0000
asID: 396968
IP address blocks: 2a0f:6287:fca7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:b1:7f:d6:4e:c0:99:4d:08:f8:40:cb:bc:27:81:61:91:57:90:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 04:13:02 2025 GMT
Not After : Jun 30 04:18:02 2026 GMT
Subject: CN=93866386E4B6601F1741E1CB95BCCA9A33FD59B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:11:1b:85:e9:79:7f:a9:15:7a:18:4d:01:5b:
91:8c:5a:43:8b:ae:47:63:69:2d:a6:25:f2:ab:c0:
27:b1:d8:48:ab:4b:c8:2f:0b:7b:cd:8a:57:ce:9b:
ef:e7:72:cf:54:d8:93:d1:63:01:a8:ed:57:66:8e:
d5:2e:28:86:10:fb:09:aa:a5:02:e4:ff:e3:28:45:
27:7b:81:15:f7:d7:eb:62:d9:ee:62:54:9e:7f:27:
f3:a9:83:e5:7a:12:58:c4:b5:45:01:1f:1f:6e:4d:
03:e5:db:ed:f9:df:f1:75:3a:33:03:0f:c6:1d:be:
ff:66:2e:76:ad:eb:bb:7c:1d:7c:b0:50:53:43:8d:
16:24:50:a7:c4:71:f1:54:8c:24:55:08:09:e5:08:
e2:b8:e9:25:b8:02:bb:d9:e0:c0:6b:36:03:70:d3:
b9:e2:5a:aa:6a:4a:e0:1a:e4:a2:cc:2c:e3:e0:95:
0c:a2:69:be:72:9c:87:c5:1b:6e:06:5d:90:92:15:
4a:0a:d1:69:d2:6b:c9:1f:8d:cf:0d:cd:f7:3b:c1:
18:93:9f:44:30:06:f2:40:8b:e6:fc:2f:dd:94:32:
d0:a4:88:3b:4b:8d:3f:42:72:3a:bb:e5:3e:23:53:
82:57:fd:3e:6b:68:8f:1b:1e:ba:0d:a8:9f:af:ab:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:86:63:86:E4:B6:60:1F:17:41:E1:CB:95:BC:CA:9A:33:FD:59:B2
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666361373a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fca7::/48
Signature Algorithm: sha256WithRSAEncryption
04:f2:8a:ca:a2:e1:e8:ae:e8:96:97:7d:b2:61:cb:06:1b:e0:
ce:88:de:80:66:97:dd:7c:76:37:97:7f:27:a2:33:10:b2:41:
cf:7f:0b:e5:ce:36:17:d7:c1:2a:6c:10:ac:1f:b1:0f:ac:58:
d1:41:43:f4:3d:c3:7e:96:37:87:73:e3:e4:1b:90:42:e3:91:
32:12:25:63:82:44:54:0a:f4:f1:17:35:b3:72:c1:49:08:ca:
86:63:e8:1d:01:fb:5b:4d:5a:ba:7f:66:79:68:7a:4d:42:c5:
98:2c:4f:23:12:b2:62:aa:a1:79:75:76:5a:f4:49:d3:ed:6c:
50:e6:95:e0:cd:ab:de:fd:20:a5:11:a1:8a:2c:06:3d:22:3b:
fb:55:f4:b6:79:2b:a6:a4:f0:3c:1a:41:1a:58:3e:cf:87:2e:
97:2a:44:df:29:69:f4:4e:c2:ec:cd:c6:e6:2c:1a:b6:42:20:
c1:dc:3e:38:3e:7c:f6:ee:93:b9:23:89:e3:2d:e9:4b:cc:a4:
97:17:4b:d3:96:24:48:21:35:76:34:e8:20:0f:98:a2:f5:7f:
45:55:5a:2f:7b:16:33:d7:b1:bb:8a:cb:7c:8a:a7:e2:95:74:
94:3a:aa:5b:02:8a:85:29:46:d6:7f:1c:ed:75:82:49:58:2a:
9f:59:3a:41
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUGbF/1k7AmU0I+EDLvCeBYZFXkOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDEwNDEzMDJaFw0yNjA2MzAwNDE4MDJaMDMxMTAvBgNV
BAMTKDkzODY2Mzg2RTRCNjYwMUYxNzQxRTFDQjk1QkNDQTlBMzNGRDU5QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUERuF6Xl/qRV6GE0BW5GMWkOL
rkdjaS2mJfKrwCex2EirS8gvC3vNilfOm+/ncs9U2JPRYwGo7VdmjtUuKIYQ+wmq
pQLk/+MoRSd7gRX31+ti2e5iVJ5/J/Opg+V6EljEtUUBHx9uTQPl2+353/F1OjMD
D8Ydvv9mLnat67t8HXywUFNDjRYkUKfEcfFUjCRVCAnlCOK46SW4ArvZ4MBrNgNw
07niWqpqSuAa5KLMLOPglQyiab5ynIfFG24GXZCSFUoK0WnSa8kfjc8Nzfc7wRiT
n0QwBvJAi+b8L92UMtCkiDtLjT9Ccjq75T4jU4JX/T5raI8bHroNqJ+vq1kJAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUk4ZjhuS2YB8XQeHLlbzKmjP9WbIwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjM2MTM3M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/yn
MA0GCSqGSIb3DQEBCwUAA4IBAQAE8orKouHoruiWl32yYcsGG+DOiN6AZpfdfHY3
l38nojMQskHPfwvlzjYX18EqbBCsH7EPrFjRQUP0PcN+ljeHc+PkG5BC45EyEiVj
gkRUCvTxFzWzcsFJCMqGY+gdAftbTVq6f2Z5aHpNQsWYLE8jErJiqqF5dXZa9EnT
7WxQ5pXgzave/SClEaGKLAY9Ijv7VfS2eSumpPA8GkEaWD7Phy6XKkTfKWn0TsLs
zcbmLBq2QiDB3D44Pnz27pO5I4njLelLzKSXF0vTliRIITV2NOggD5ii9X9FVVov
exYz17G7ist8iqfilXSUOqpbAoqFKUbWfxztdYJJWCqfWTpB
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:30:21 2025 by rpki-client