Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS133504.roa
File: AS133504.roa (raw, json)
Hash identifier: wIPeUw9+dExddNgJzVvXSLg1QnbE6T6zKmg74ZxB4Ts=
Subject key identifier: CA:C9:33:62:DB:DF:4E:86:A5:88:BD:EB:5F:72:E1:65:18:68:15:80
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 3ED626AB1A07A9C85FC063674FD2B944D5A65BD9
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS133504.roa
Signing time: Wed 02 Jul 2025 19:33:08 +0000
ROA not before: Wed 02 Jul 2025 19:28:08 +0000
ROA not after: Wed 01 Jul 2026 19:33:08 +0000
asID: 133504
IP address blocks: 2a05:dfc3:f700::/40 maxlen: 48
2a05:dfc3:f750::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d6:26:ab:1a:07:a9:c8:5f:c0:63:67:4f:d2:b9:44:d5:a6:5b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:08 2025 GMT
Not After : Jul 1 19:33:08 2026 GMT
Subject: CN=CAC93362DBDF4E86A588BDEB5F72E16518681580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:73:23:cb:7a:74:73:54:b9:dc:9c:c2:3c:
32:07:ef:60:a4:9a:58:0e:68:88:7e:d4:8a:8f:99:
59:9c:a6:c6:b0:a5:8f:cf:9e:13:c9:c0:92:7a:05:
10:1d:45:f5:3a:ea:44:a9:c2:b0:7a:64:88:1e:d8:
7f:f9:57:38:59:fb:54:39:83:31:3b:c7:88:7f:f3:
fe:51:e3:28:8b:a4:d7:fb:bd:d3:77:0e:6e:c8:99:
87:7d:9f:0b:db:43:70:3f:72:b0:2a:21:21:3d:da:
52:be:a0:bb:0a:35:f1:ea:71:82:0c:7c:53:ee:a4:
b6:68:53:07:29:d6:2a:11:83:ed:b7:5b:f0:ba:60:
f0:37:22:3a:3b:e7:ba:59:0f:42:38:fe:11:40:e3:
60:47:9c:bb:ea:aa:1d:30:24:da:9f:e2:de:58:39:
7d:ff:dd:d5:97:d3:e8:05:ec:64:d2:8f:1e:88:ec:
85:a8:89:af:0b:16:fb:b8:a5:8e:38:59:8f:4b:32:
85:a1:2a:c9:51:12:2b:c4:ed:a5:6b:6a:33:1e:da:
10:ad:ba:2c:12:9d:72:12:d0:0c:d0:99:33:e0:0d:
88:99:f0:0b:05:7e:53:c8:4f:65:37:76:26:0c:9c:
25:88:ce:04:fb:54:70:59:41:b3:f6:2d:fa:7a:57:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C9:33:62:DB:DF:4E:86:A5:88:BD:EB:5F:72:E1:65:18:68:15:80
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS133504.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f700::/40
Signature Algorithm: sha256WithRSAEncryption
2c:95:16:71:4c:cd:56:65:c3:6c:3b:b8:cb:87:c7:b1:ed:ed:
76:0c:b3:89:43:b9:ec:b4:f1:36:db:4c:96:69:d8:ae:29:ae:
79:7d:df:c9:d1:22:a3:10:55:c2:2c:e4:ff:84:3e:d5:cb:3f:
58:32:0a:ff:52:82:3b:33:02:18:eb:5c:ca:e5:84:a6:4a:4a:
5b:09:50:2b:32:63:79:92:25:4d:ea:c8:ce:34:fe:27:17:ca:
b4:2c:50:89:29:0b:99:e0:0d:99:ac:88:0b:6a:c9:ad:1b:63:
c6:ae:eb:40:41:7e:19:c9:1f:3d:0a:c1:40:4e:ad:e6:90:3a:
45:32:3a:24:a2:c0:c2:99:23:ce:8c:1e:f1:28:29:a9:b4:46:
a4:d2:29:4f:5e:60:25:ec:08:cd:c9:96:dc:03:4f:56:70:49:
3e:4d:47:ea:02:e3:74:27:d9:d3:9e:10:85:44:69:6d:fe:e4:
76:2b:e3:5e:fa:d0:2f:6c:2c:6f:db:cc:09:d1:f1:86:ab:c0:
c0:07:2a:51:1a:16:56:7c:25:f9:e1:96:36:54:60:07:b3:c4:
98:26:df:f0:68:4a:5c:44:f5:99:5e:ee:bf:c6:96:be:04:08:
f1:60:33:ed:cc:4c:2d:66:ea:ea:ff:36:02:4e:05:20:04:f0:
a0:d0:05:15
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUPtYmqxoHqchfwGNnT9K5RNWmW9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VERDg1NDkzNjA4RkU5QUFFNTQ2Qjg0Nzk2RUMwRjE5
N0VGMkMwMjAeFw0yNTA3MDIxOTI4MDhaFw0yNjA3MDExOTMzMDhaMDMxMTAvBgNV
BAMTKENBQzkzMzYyREJERjRFODZBNTg4QkRFQjVGNzJFMTY1MTg2ODE1ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqB3Mjy3p0c1S53JzCPDIH72Ck
mlgOaIh+1IqPmVmcpsawpY/PnhPJwJJ6BRAdRfU66kSpwrB6ZIge2H/5VzhZ+1Q5
gzE7x4h/8/5R4yiLpNf7vdN3Dm7ImYd9nwvbQ3A/crAqISE92lK+oLsKNfHqcYIM
fFPupLZoUwcp1ioRg+23W/C6YPA3Ijo757pZD0I4/hFA42BHnLvqqh0wJNqf4t5Y
OX3/3dWX0+gF7GTSjx6I7IWoia8LFvu4pY44WY9LMoWhKslREivE7aVrajMe2hCt
uiwSnXIS0AzQmTPgDYiZ8AsFflPIT2U3diYMnCWIzgT7VHBZQbP2Lfp6V8dBAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUyskzYtvfToaliL3rX3LhZRhoFYAwHwYDVR0j
BBgwFoAUft2FSTYI/pquVGuEeW7A8ZfvLAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMy83RUREODU0OTM2
MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNybDCBkwYIKwYBBQUHAQEE
gYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3Jl
cG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83RURE
ODU0OTM2MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS82OWY1NjVkNDNmYWQ0NTNkODgyZDFjMWFhNmIyOGMyMC8zL0FT
MTMzNTA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYAKgXfw/cwDQYJKoZIhvcNAQELBQADggEBACyVFnFM
zVZlw2w7uMuHx7Ht7XYMs4lDuey08TbbTJZp2K4prnl938nRIqMQVcIs5P+EPtXL
P1gyCv9SgjszAhjrXMrlhKZKSlsJUCsyY3mSJU3qyM40/icXyrQsUIkpC5ngDZms
iAtqya0bY8au60BBfhnJHz0KwUBOreaQOkUyOiSiwMKZI86MHvEoKam0RqTSKU9e
YCXsCM3JltwDT1ZwST5NR+oC43Qn2dOeEIVEaW3+5HYr41760C9sLG/bzAnR8Yar
wMAHKlEaFlZ8JfnhljZUYAezxJgm3/BoSlxE9Zle7r/Glr4ECPFgM+3MTC1m6ur/
NgJOBSAE8KDQBRU=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:02:07 2025 by rpki-client