Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666661363a3a2f34382d3438203d3e20333936393638.roa
File: 326130663a363238373a666661363a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier: ydnJSl12nP1oXnQ9po5oEQ8MqO086dVKApynJuG0iCs=
Subject key identifier: 05:F6:74:7C:63:D0:85:95:F3:37:7A:66:C6:EC:FF:06:51:61:59:67
Certificate issuer: /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial: 78C7B95F8C04A21FF91687F69A2102558B8B3B49
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666661363a3a2f34382d3438203d3e20333936393638.roa
Signing time: Thu 26 Jun 2025 12:36:22 +0000
ROA not before: Thu 26 Jun 2025 12:31:22 +0000
ROA not after: Thu 25 Jun 2026 12:36:22 +0000
asID: 396968
IP address blocks: 2a0f:6287:ffa6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c7:b9:5f:8c:04:a2:1f:f9:16:87:f6:9a:21:02:55:8b:8b:3b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Validity
Not Before: Jun 26 12:31:22 2025 GMT
Not After : Jun 25 12:36:22 2026 GMT
Subject: CN=05F6747C63D08595F3377A66C6ECFF0651615967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:49:c4:66:ab:da:c7:19:05:38:2f:7b:63:
60:b5:84:9e:0f:3d:54:b8:a5:c9:82:38:d1:ee:a9:
a8:ce:9b:7f:f2:17:52:15:9c:ad:c4:8a:75:df:f9:
8a:00:c0:6e:8e:7c:c4:84:83:91:3c:e6:70:de:ea:
db:9e:db:37:bc:7d:60:f7:6a:d5:24:49:b7:d3:bf:
4b:83:e6:59:06:42:8b:02:43:5d:c7:b9:d6:eb:d0:
9b:8a:c6:ac:d4:74:10:85:36:4d:5f:9d:0c:1a:1c:
e9:fd:71:88:56:bd:e1:b9:b3:54:d3:5d:0b:54:17:
f3:43:47:60:53:84:f9:20:81:3c:95:9d:82:6a:e5:
a4:e9:3e:b5:c9:0c:4e:8f:25:6a:73:a9:6e:d3:ef:
82:ff:6a:e6:26:7f:5a:b5:e5:b0:75:d1:60:c2:44:
59:a5:1b:84:f3:e2:cf:d4:ca:b4:4d:ad:c8:cb:3d:
83:a2:93:11:14:fc:80:75:a7:92:47:bf:9d:1b:0c:
dd:19:6f:39:b8:38:2a:62:ad:7b:d7:88:58:56:35:
98:83:77:80:ab:bd:3d:aa:3a:bd:26:b7:3d:5d:16:
2a:70:e6:dd:64:b5:6f:41:3d:c9:a0:29:9a:47:9d:
4a:10:33:8b:6a:01:39:02:9a:2f:73:60:0c:ad:74:
37:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F6:74:7C:63:D0:85:95:F3:37:7A:66:C6:EC:FF:06:51:61:59:67
X509v3 Authority Key Identifier:
keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666661363a3a2f34382d3438203d3e20333936393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6287:ffa6::/48
Signature Algorithm: sha256WithRSAEncryption
6e:ce:70:a7:9a:80:18:25:a6:36:64:c2:ce:e7:c2:70:0a:1e:
a4:18:88:96:3b:21:0e:bf:1f:e7:40:b5:20:c9:c4:b9:15:6a:
1c:65:99:64:81:2e:0e:e3:41:e8:bf:86:3c:6e:c6:da:b4:2e:
f6:52:3f:fb:c3:93:a9:7c:9d:23:24:45:0e:08:da:2a:fa:19:
f0:50:2f:0f:c6:a5:3e:57:27:a5:17:23:9f:db:93:2d:a0:9a:
4f:0c:c5:d5:35:ff:f1:97:56:4b:31:07:5b:70:e6:4f:e1:8d:
d1:8b:ac:ec:95:4b:33:02:db:ef:0b:dd:a7:55:74:3e:17:39:
aa:de:b5:de:54:06:81:97:c0:71:36:46:5f:10:a2:d8:2a:07:
9c:e2:2e:c9:4f:f4:9f:68:09:79:8e:86:6b:38:75:4d:b8:b6:
74:93:dc:6b:a8:5d:84:59:51:cc:c8:ff:e9:3d:df:66:a7:6b:
cb:ec:2b:3d:92:e4:68:84:39:77:ea:46:34:ea:74:63:69:70:
b8:bc:a2:53:e6:32:8b:fa:9d:6a:5a:9e:bb:61:84:1b:f8:3d:
a3:9b:13:4b:dc:30:8b:0d:0b:bd:bd:7c:28:f9:09:79:5b:31:
ae:fa:85:1e:8f:fc:c1:79:1c:29:78:a2:d8:b3:25:a1:82:65:
7e:40:a0:62
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUeMe5X4wEoh/5Fof2miECVYuLO0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA2MjYxMjMxMjJaFw0yNjA2MjUxMjM2MjJaMDMxMTAvBgNV
BAMTKDA1RjY3NDdDNjNEMDg1OTVGMzM3N0E2NkM2RUNGRjA2NTE2MTU5NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9OknEZqvaxxkFOC97Y2C1hJ4P
PVS4pcmCONHuqajOm3/yF1IVnK3EinXf+YoAwG6OfMSEg5E85nDe6tue2ze8fWD3
atUkSbfTv0uD5lkGQosCQ13Hudbr0JuKxqzUdBCFNk1fnQwaHOn9cYhWveG5s1TT
XQtUF/NDR2BThPkggTyVnYJq5aTpPrXJDE6PJWpzqW7T74L/auYmf1q15bB10WDC
RFmlG4Tz4s/UyrRNrcjLPYOikxEU/IB1p5JHv50bDN0Zbzm4OCpirXvXiFhWNZiD
d4CrvT2qOr0mtz1dFipw5t1ktW9BPcmgKZpHnUoQM4tqATkCmi9zYAytdDdbAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUBfZ0fGPQhZXzN3pmxuz/BlFhWWcwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjY2MTM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/+m
MA0GCSqGSIb3DQEBCwUAA4IBAQBuznCnmoAYJaY2ZMLO58JwCh6kGIiWOyEOvx/n
QLUgycS5FWocZZlkgS4O40Hov4Y8bsbatC72Uj/7w5OpfJ0jJEUOCNoq+hnwUC8P
xqU+VyelFyOf25MtoJpPDMXVNf/xl1ZLMQdbcOZP4Y3Ri6zslUszAtvvC92nVXQ+
Fzmq3rXeVAaBl8BxNkZfEKLYKgec4i7JT/SfaAl5joZrOHVNuLZ0k9xrqF2EWVHM
yP/pPd9mp2vL7Cs9kuRohDl36kY06nRjaXC4vKJT5jKL+p1qWp67YYQb+D2jmxNL
3DCLDQu9vXwo+Ql5WzGu+oUej/zBeRwpeKLYsyWhgmV+QKBi
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:48:58 2025 by rpki-client