Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e32382e302f32332d3234203d3e2031303132.roa
File: 3231362e3134362e32382e302f32332d3234203d3e2031303132.roa (raw, json)
Hash identifier: BOY5RHfcNZ4a16UuLjwYjJnWJDMs39L2YHqSP4MVSFg=
Subject key identifier: 49:F2:7B:A3:49:CB:FE:1D:FE:60:B3:B1:3B:AF:2A:98:27:31:0D:5B
Certificate issuer: /CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
Certificate serial: 4E852DD0CD17C45AF6B5D69077CA7DD54A74D160
Authority key identifier: 26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e32382e302f32332d3234203d3e2031303132.roa
Signing time: Sun 02 Nov 2025 17:07:10 +0000
ROA not before: Sun 02 Nov 2025 17:02:10 +0000
ROA not after: Sun 01 Nov 2026 17:07:10 +0000
asID: 1012
IP address blocks: 216.146.28.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:85:2d:d0:cd:17:c4:5a:f6:b5:d6:90:77:ca:7d:d5:4a:74:d1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
Validity
Not Before: Nov 2 17:02:10 2025 GMT
Not After : Nov 1 17:07:10 2026 GMT
Subject: CN=49F27BA349CBFE1DFE60B3B13BAF2A9827310D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:79:79:20:92:ec:7e:7e:49:3f:23:bd:b3:
f0:fd:2e:4c:dc:9b:af:c3:b3:30:98:8e:07:b2:bc:
08:2f:4f:7f:47:79:df:71:93:1e:59:e3:7f:39:cf:
18:fb:3a:42:e3:9a:d5:20:09:2d:c1:ea:04:23:30:
bf:34:7b:a1:41:8d:7a:2a:ab:23:9c:91:7f:19:2b:
ed:75:48:d4:27:02:7e:4c:ce:9e:46:75:2d:03:33:
5b:02:25:13:e0:6b:80:fa:2d:c7:37:91:fa:37:08:
20:66:d1:8f:89:03:ba:4f:82:c5:71:00:58:94:16:
4b:cf:5e:cc:16:0d:e6:e9:d5:2c:a1:31:2e:1d:fb:
d7:72:6e:9e:25:0f:68:ab:a5:2d:2a:b9:98:97:9d:
8d:dd:31:2d:28:d6:e6:13:12:a3:23:c0:01:3c:9e:
99:90:ff:84:af:46:fa:86:9a:0c:57:f7:d3:30:12:
0e:62:f2:34:9a:7f:ba:d2:a1:5e:c4:e7:40:f3:b8:
69:b3:31:a8:a0:b2:17:89:42:de:61:55:1c:80:dc:
a7:8f:b1:64:9a:79:e3:d2:81:8d:0f:ff:53:1f:44:
b7:67:6a:e2:79:de:1f:f7:67:c0:05:1a:37:b8:ee:
45:0c:86:44:1d:bd:65:80:dd:9b:d3:62:c3:37:0b:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F2:7B:A3:49:CB:FE:1D:FE:60:B3:B1:3B:AF:2A:98:27:31:0D:5B
X509v3 Authority Key Identifier:
keyid:26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e32382e302f32332d3234203d3e2031303132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.28.0/23
Signature Algorithm: sha256WithRSAEncryption
59:2e:fd:46:a1:44:41:74:87:07:6f:4f:36:f3:36:99:99:e8:
78:90:72:df:8a:08:d2:7d:bc:52:6b:f9:91:7e:90:88:f5:83:
0c:8b:18:75:49:9b:86:7e:73:2d:a8:1d:29:40:f3:98:f6:ed:
2f:b1:36:7e:c1:89:3d:74:76:ee:01:fe:b0:eb:bc:69:d2:79:
4c:19:b3:bb:db:fb:2c:8a:6a:41:6e:64:0e:83:f2:60:9f:c6:
1c:90:3e:85:3b:90:81:2f:86:b7:38:a6:6a:6a:76:c3:98:cd:
b1:a3:9a:3d:50:fc:e6:98:0e:b0:8c:da:6a:8c:f0:0e:b9:03:
12:af:5f:ef:24:0a:ac:18:49:cf:7e:37:06:7e:9d:40:bb:25:
bd:12:26:e5:e6:a1:0d:c5:5d:00:ec:56:37:07:61:26:5e:1a:
8b:5f:e8:61:d1:a3:16:fe:29:b1:a0:41:01:73:ab:f0:e9:d3:
d2:65:bb:e5:2e:75:9f:9e:49:4b:df:b9:d3:8d:71:c6:ef:53:
94:ca:eb:5e:01:24:d3:60:f8:f9:0a:31:f8:e7:7f:55:1f:0b:
3f:52:35:a4:7a:11:d3:08:2c:47:95:66:dc:5c:22:f1:77:9e:
79:d3:a1:92:b1:b0:6a:a2:f9:e7:6c:21:87:31:0b:e2:30:29:
7f:17:bc:d5
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUToUt0M0XxFr2tdaQd8p91Up00WAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMGI1NjY5MTA3YmZlYzE4NTE4ZjJhZDI3
ODllY2Y1NGU0MGE3OWQzNTUwHhcNMjUxMTAyMTcwMjEwWhcNMjYxMTAxMTcwNzEw
WjAzMTEwLwYDVQQDEyg0OUYyN0JBMzQ5Q0JGRTFERkU2MEIzQjEzQkFGMkE5ODI3
MzEwRDVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+B5eSCS7H5+
ST8jvbPw/S5M3Juvw7MwmI4HsrwIL09/R3nfcZMeWeN/Oc8Y+zpC45rVIAktweoE
IzC/NHuhQY16KqsjnJF/GSvtdUjUJwJ+TM6eRnUtAzNbAiUT4GuA+i3HN5H6Nwgg
ZtGPiQO6T4LFcQBYlBZLz17MFg3m6dUsoTEuHfvXcm6eJQ9oq6UtKrmYl52N3TEt
KNbmExKjI8ABPJ6ZkP+Er0b6hpoMV/fTMBIOYvI0mn+60qFexOdA87hpszGooLIX
iULeYVUcgNynj7Fkmnnj0oGND/9TH0S3Z2ried4f92fABRo3uO5FDIZEHb1lgN2b
02LDNwu3twIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFEnye6NJy/4d/mCzsTuvKpgn
MQ1bMB8GA1UdIwQYMBaAFCaWjGFaaRtJdUy2eKTdn8WpOKZjMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzZhYjk2ZTdhNjEzMDQ5OGFhOTgxM2Q3ZWU1YmJlZDMxLzUv
MjY5NjhDNjE1QTY5MUI0OTc1NENCNjc4QTRERDlGQzVBOTM4QTY2My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIwNGZkZDY2M2YzNy82NTA2
YTY2ZWQwYjU2NjkxMDdiZmVjMTg1MThmMmFkMjc4OWVjZjU0ZTQwYTc5ZDM1NS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS82YWI5NmU3YTYxMzA0OThhYTk4MTNk
N2VlNWJiZWQzMS81LzMyMzEzNjJlMzEzNDM2MmUzMjM4MmUzMDJmMzIzMzJkMzIz
NDIwM2QzZTIwMzEzMDMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHYkhwwDQYJKoZIhvcNAQELBQAD
ggEBAFku/UahREF0hwdvTzbzNpmZ6HiQct+KCNJ9vFJr+ZF+kIj1gwyLGHVJm4Z+
cy2oHSlA85j27S+xNn7BiT10du4B/rDrvGnSeUwZs7vb+yyKakFuZA6D8mCfxhyQ
PoU7kIEvhrc4pmpqdsOYzbGjmj1Q/OaYDrCM2mqM8A65AxKvX+8kCqwYSc9+NwZ+
nUC7Jb0SJuXmoQ3FXQDsVjcHYSZeGotf6GHRoxb+KbGgQQFzq/Dp09Jlu+UudZ+e
SUvfudONccbvU5TK614BJNNg+PkKMfjnf1UfCz9SNaR6EdMILEeVZtxcIvF3nnnT
oZKxsGqi+edsIYcxC+IwKX8XvNU=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:19:44 2025 by rpki-client