Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: s/JxeMGLm4mVbhMjlsBvV7X1afn6aIt2Teoys24mIvc=
Subject key identifier: 9F:57:60:ED:47:FA:E2:37:F5:E2:19:B1:6D:0A:3B:2B:22:D2:9D:16
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 478EDFA915461B82C9A0C6B95B726ACE4ED23FC7
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS14618.roa
Signing time: Wed 02 Jul 2025 19:33:08 +0000
ROA not before: Wed 02 Jul 2025 19:28:08 +0000
ROA not after: Wed 01 Jul 2026 19:33:08 +0000
asID: 14618
IP address blocks: 2a05:dfc3:f740::/44 maxlen: 44
2a05:dfc3:f750::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:8e:df:a9:15:46:1b:82:c9:a0:c6:b9:5b:72:6a:ce:4e:d2:3f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:08 2025 GMT
Not After : Jul 1 19:33:08 2026 GMT
Subject: CN=9F5760ED47FAE237F5E219B16D0A3B2B22D29D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:16:72:5d:e1:8a:bb:5a:26:c7:42:91:5c:
eb:f0:d2:42:80:e6:31:69:72:a7:fd:68:fb:2d:70:
f2:18:b4:bb:a6:1e:75:71:ee:e5:8e:11:b2:5f:d4:
b1:60:24:d6:71:1f:cb:d3:ab:d1:bf:86:c4:a2:3a:
ef:41:5a:6d:4b:41:d3:e2:98:fa:7f:ce:f1:8e:82:
21:42:d4:af:2a:7a:17:da:1b:4f:c9:f5:54:71:9f:
e1:96:f4:07:b8:73:46:a6:9d:f9:a0:2b:f9:99:4f:
d1:d2:f5:ae:99:1d:cb:83:ea:44:48:4a:ae:9f:e1:
6c:e0:8c:fe:af:dc:fe:49:32:29:1b:b3:24:bf:c7:
0f:48:60:d2:92:97:15:57:ca:ae:01:b5:75:3c:de:
c1:8b:f1:3d:d6:f9:72:c9:78:8d:d6:db:71:07:29:
fd:6a:46:28:5a:f1:6e:52:aa:96:e0:95:d9:e7:1e:
18:76:c0:12:b5:96:30:d9:83:be:a4:3c:a9:e3:65:
17:23:93:82:30:d9:51:24:bb:d4:c3:75:a1:d6:8d:
2d:3d:ac:0f:0d:28:97:c8:8b:c9:2a:c7:42:22:d8:
8b:a0:cc:25:da:40:bb:a7:fa:16:62:43:ee:e6:cc:
54:05:75:f1:f6:f7:f3:12:98:c0:23:e0:e8:a2:fe:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:57:60:ED:47:FA:E2:37:F5:E2:19:B1:6D:0A:3B:2B:22:D2:9D:16
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f740::/43
Signature Algorithm: sha256WithRSAEncryption
81:a2:25:2c:54:91:93:44:ad:d3:0c:89:46:91:90:3f:5b:f2:
43:6a:d8:07:3e:f1:af:ee:56:bf:11:d7:c3:22:b6:86:a9:0c:
74:0d:5b:9b:92:38:e3:c1:40:dd:99:bc:37:bc:f0:6b:97:d3:
d4:ca:f9:99:56:53:b5:85:e3:92:52:a8:0b:6b:39:de:b9:50:
28:52:b1:f7:d4:cf:a2:dd:00:10:a8:5d:78:c0:58:a4:e2:5f:
a8:78:75:16:47:0a:ab:3d:58:c7:12:57:a5:f5:c4:4a:b7:8d:
43:ed:b4:24:6a:36:40:a6:dc:ff:74:27:04:07:21:79:a4:ce:
5f:66:c6:df:1c:a6:bc:ca:7c:d1:6e:2a:25:6f:82:85:e4:61:
87:dd:96:05:48:3b:90:a0:82:da:bb:30:ea:ae:26:0f:d2:e1:
b1:58:b0:a2:d4:28:1a:08:ab:e0:fa:83:57:11:71:b4:5b:ba:
87:51:3b:e0:81:0e:aa:43:e3:75:3d:f6:ea:e8:35:23:48:37:
4e:74:ca:37:9c:c6:e4:3d:0e:e7:e3:3c:5d:82:6e:c7:7a:41:
33:e5:b8:07:37:31:5c:af:8d:0e:89:01:72:01:74:13:76:be:
e3:0f:a8:7d:b9:01:d7:aa:18:e8:0d:83:1b:f4:81:63:21:1f:
10:08:6e:0f
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUR47fqRVGG4LJoMa5W3Jqzk7SP8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VERDg1NDkzNjA4RkU5QUFFNTQ2Qjg0Nzk2RUMwRjE5
N0VGMkMwMjAeFw0yNTA3MDIxOTI4MDhaFw0yNjA3MDExOTMzMDhaMDMxMTAvBgNV
BAMTKDlGNTc2MEVENDdGQUUyMzdGNUUyMTlCMTZEMEEzQjJCMjJEMjlEMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2PBZyXeGKu1omx0KRXOvw0kKA
5jFpcqf9aPstcPIYtLumHnVx7uWOEbJf1LFgJNZxH8vTq9G/hsSiOu9BWm1LQdPi
mPp/zvGOgiFC1K8qehfaG0/J9VRxn+GW9Ae4c0amnfmgK/mZT9HS9a6ZHcuD6kRI
Sq6f4WzgjP6v3P5JMikbsyS/xw9IYNKSlxVXyq4BtXU83sGL8T3W+XLJeI3W23EH
Kf1qRiha8W5SqpbgldnnHhh2wBK1ljDZg76kPKnjZRcjk4Iw2VEku9TDdaHWjS09
rA8NKJfIi8kqx0Ii2IugzCXaQLun+hZiQ+7mzFQFdfH29/MSmMAj4Oii/lzLAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUn1dg7Uf64jf14hmxbQo7KyLSnRYwHwYDVR0j
BBgwFoAUft2FSTYI/pquVGuEeW7A8ZfvLAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMy83RUREODU0OTM2
MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNybDCBkwYIKwYBBQUHAQEE
gYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3Jl
cG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83RURE
ODU0OTM2MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS82OWY1NjVkNDNmYWQ0NTNkODgyZDFjMWFhNmIyOGMyMC8zL0FT
MTQ2MTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwUqBd/D90AwDQYJKoZIhvcNAQELBQADggEBAIGiJSxU
kZNErdMMiUaRkD9b8kNq2Ac+8a/uVr8R18MitoapDHQNW5uSOOPBQN2ZvDe88GuX
09TK+ZlWU7WF45JSqAtrOd65UChSsffUz6LdABCoXXjAWKTiX6h4dRZHCqs9WMcS
V6X1xEq3jUPttCRqNkCm3P90JwQHIXmkzl9mxt8cprzKfNFuKiVvgoXkYYfdlgVI
O5Cggtq7MOquJg/S4bFYsKLUKBoIq+D6g1cRcbRbuodRO+CBDqpD43U99uroNSNI
N050yjecxuQ9DufjPF2Cbsd6QTPluAc3MVyvjQ6JAXIBdBN2vuMPqH25AdeqGOgN
gxv0gWMhHxAIbg8=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:00:49 2025 by rpki-client