
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: vcUQarfDwXmU66+dcLu2PlrnY3UgQ+2qfWwEr4516rA=
Subject key identifier: C7:68:CF:D4:ED:70:0B:C3:CE:5A:12:58:0E:93:70:8B:8D:E3:E9:DC
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 18378DA0FFCCF8632B6FC7B66360DD439D664ACF
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa
Signing time: Tue 01 Jul 2025 03:45:30 +0000
ROA not before: Tue 01 Jul 2025 03:40:30 +0000
ROA not after: Tue 30 Jun 2026 03:45:30 +0000
asID: 396968
IP address blocks: 2a0f:6287:fe80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:37:8d:a0:ff:cc:f8:63:2b:6f:c7:b6:63:60:dd:43:9d:66:4a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jul 1 03:40:30 2025 GMT
Not After : Jun 30 03:45:30 2026 GMT
Subject: CN=C768CFD4ED700BC3CE5A12580E93708B8DE3E9DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:86:c6:c7:4b:1d:10:12:ca:96:f6:98:f9:3f:
97:b0:e1:12:53:2e:c7:9a:0e:9c:fb:a5:4a:3a:34:
3e:82:81:21:9c:ef:5d:91:20:ff:0d:78:d1:f6:28:
c2:b6:99:6d:71:68:5e:2c:58:90:c5:5f:dd:b8:e7:
85:34:fd:52:41:13:ea:0e:c6:4a:29:78:db:86:71:
a8:49:b9:22:8b:1c:7d:c1:c8:8e:67:75:d6:04:cf:
fe:8f:b3:4a:4c:7d:f4:39:68:68:c8:7d:4c:4f:13:
94:b2:24:ba:ed:a5:f4:b9:8e:36:01:bb:c8:c2:c7:
28:01:d3:a3:1d:a8:62:f4:f9:cf:15:87:f7:76:d8:
d2:23:b5:96:78:42:4c:1f:33:43:9f:5b:6f:a8:ce:
ca:b9:14:65:6d:35:3e:d5:73:e1:2a:30:ad:a3:af:
7c:52:fd:5b:b5:ad:7f:10:1c:00:9c:9f:8b:f8:ae:
c3:a1:68:8e:75:ec:18:2e:00:6d:a9:d6:42:66:9a:
7f:69:7e:ae:33:d1:f1:b4:8a:75:32:c4:99:cd:47:
a1:8a:b8:68:c8:29:46:e1:7f:64:91:11:4b:46:20:
32:b7:aa:c2:e9:f5:02:1b:91:a4:33:36:ba:a6:52:
a1:a4:0a:0a:5f:47:f8:23:04:ac:4c:ed:ff:d3:83:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:68:CF:D4:ED:70:0B:C3:CE:5A:12:58:0E:93:70:8B:8D:E3:E9:DC
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:fe80::/48
Signature Algorithm: sha256WithRSAEncryption
70:ce:1f:9f:5f:58:3f:8c:70:dd:fa:3a:c8:69:b2:95:8f:fa:
d8:3a:a2:98:b5:00:74:60:14:cc:e7:43:4b:c1:ba:e0:01:4f:
0c:0a:5d:87:44:95:ac:72:8d:ac:79:1a:34:aa:f1:10:04:f0:
78:74:5c:5d:5c:a5:98:12:d7:87:eb:a3:48:b6:25:a6:9c:4d:
32:02:36:13:75:0d:21:ee:0b:5f:71:89:54:0b:39:90:a5:75:
0d:90:61:dc:16:3d:99:c0:eb:0a:01:c5:b0:1d:87:34:dc:0b:
de:6e:6d:5a:34:30:eb:fa:42:51:d1:83:a6:1b:2b:73:33:23:
fc:6d:26:b3:58:81:96:0c:6e:3b:39:a9:64:1d:55:61:60:94:
c3:f2:f0:1a:f0:6e:8b:cd:45:ff:74:d8:78:99:4d:9b:3a:42:
2c:ff:e5:42:10:62:75:ac:59:f0:b2:38:cc:5f:47:53:02:ae:
63:f7:65:2b:ec:9c:0c:ca:24:a9:a5:dd:de:18:1a:a2:1b:bd:
4b:16:73:7e:35:0a:46:b9:93:49:2b:07:95:4e:e6:3f:cb:43:
49:99:b6:e9:38:4c:96:4e:e2:7b:d9:aa:af:b0:95:95:75:fb:
30:56:d8:c0:02:77:af:ce:76:5b:7f:a1:c4:de:50:2f:38:e6:
38:d4:4c:f2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUGDeNoP/M+GMrb8e2Y2DdQ51mSs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDEwMzQwMzBaFw0yNjA2MzAwMzQ1MzBaMDMxMTAvBgNV
BAMTKEM3NjhDRkQ0RUQ3MDBCQzNDRTVBMTI1ODBFOTM3MDhCOERFM0U5REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDahsbHSx0QEsqW9pj5P5ew4RJT
LseaDpz7pUo6ND6CgSGc712RIP8NeNH2KMK2mW1xaF4sWJDFX92454U0/VJBE+oO
xkopeNuGcahJuSKLHH3ByI5nddYEz/6Ps0pMffQ5aGjIfUxPE5SyJLrtpfS5jjYB
u8jCxygB06MdqGL0+c8Vh/d22NIjtZZ4QkwfM0OfW2+ozsq5FGVtNT7Vc+EqMK2j
r3xS/Vu1rX8QHACcn4v4rsOhaI517BguAG2p1kJmmn9pfq4z0fG0inUyxJnNR6GK
uGjIKUbhf2SREUtGIDK3qsLp9QIbkaQzNrqmUqGkCgpfR/gjBKxM7f/Tg777AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUx2jP1O1wC8POWhJYDpNwi43j6dwwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjUzODMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/6A
MA0GCSqGSIb3DQEBCwUAA4IBAQBwzh+fX1g/jHDd+jrIabKVj/rYOqKYtQB0YBTM
50NLwbrgAU8MCl2HRJWsco2seRo0qvEQBPB4dFxdXKWYEteH66NItiWmnE0yAjYT
dQ0h7gtfcYlUCzmQpXUNkGHcFj2ZwOsKAcWwHYc03Avebm1aNDDr+kJR0YOmGytz
MyP8bSazWIGWDG47OalkHVVhYJTD8vAa8G6LzUX/dNh4mU2bOkIs/+VCEGJ1rFnw
sjjMX0dTAq5j92Ur7JwMyiSppd3eGBqiG71LFnN+NQpGuZNJKweVTuY/y0NJmbbp
OEyWTuJ72aqvsJWVdfswVtjAAnevznZbf6HE3lAvOOY41Ezy
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:31:30 2025 by rpki-client