Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: h0j4DSzvDsfmuRNd7zuNaxEVipfPAiwyhMYLWaZ3yAs=
Subject key identifier: B0:2A:48:70:76:01:67:8B:02:D3:B0:8A:D9:2F:2F:6E:19:ED:74:B0
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 2D05B0343A46528975D0238BCC3016EA17E0684D
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS16509.roa
Signing time: Wed 02 Jul 2025 19:33:09 +0000
ROA not before: Wed 02 Jul 2025 19:28:09 +0000
ROA not after: Wed 01 Jul 2026 19:33:09 +0000
asID: 16509
IP address blocks: 2a05:dfc3:f740::/44 maxlen: 44
2a05:dfc3:f750::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:05:b0:34:3a:46:52:89:75:d0:23:8b:cc:30:16:ea:17:e0:68:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:09 2025 GMT
Not After : Jul 1 19:33:09 2026 GMT
Subject: CN=B02A48707601678B02D3B08AD92F2F6E19ED74B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:34:67:95:02:89:46:26:0e:b2:cc:ed:42:
71:90:8f:5b:99:ac:3a:c6:6b:73:29:1d:00:1c:2b:
c1:46:64:69:64:13:04:ef:eb:09:5c:9b:40:29:e0:
f3:05:b2:6b:3e:65:38:43:de:f3:11:dd:95:89:d4:
81:2b:27:c1:04:65:94:e3:5d:ca:3f:c0:52:3e:68:
7e:7a:96:e5:b7:9a:1e:4a:66:a4:fe:96:0d:23:61:
1d:6f:9a:68:88:7e:93:02:94:37:b0:3f:b2:0f:a3:
fa:3b:b2:63:ee:bf:62:21:6c:79:ff:3f:dc:3c:92:
99:8a:ef:f7:be:c0:6f:2e:34:2d:7c:e9:31:ee:25:
4e:96:69:49:f7:28:f6:58:06:b2:68:49:4a:9b:4b:
9d:82:0b:2b:fd:df:d4:8d:f4:5b:ab:82:22:ea:c0:
d7:4b:db:33:16:30:4e:09:80:8c:e3:f7:a9:aa:92:
b4:29:1c:a7:42:3f:8a:39:c7:c5:38:81:26:11:d6:
79:17:bb:0b:91:e5:88:38:ff:d6:bc:7f:cd:31:39:
7b:0b:94:94:b9:c7:f5:e4:d0:88:9e:ca:c7:96:be:
f1:58:25:fc:bf:13:7a:52:e5:4a:6d:43:e4:09:b4:
8f:94:11:6c:cd:35:c9:a6:fd:db:34:3b:ba:f4:a7:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2A:48:70:76:01:67:8B:02:D3:B0:8A:D9:2F:2F:6E:19:ED:74:B0
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f740::/43
Signature Algorithm: sha256WithRSAEncryption
10:4f:dc:0f:6c:a9:19:f9:c9:8b:81:91:02:0d:95:d5:b4:89:
03:54:b4:16:cf:98:05:55:b3:8a:49:2a:f2:a6:f8:cc:2d:6e:
69:f5:7b:fc:f4:ba:8a:ff:20:84:4a:f4:aa:5f:07:80:1a:28:
f5:39:d7:eb:a3:22:ee:68:06:6b:c6:11:0a:d4:ac:ba:0a:d1:
ae:6d:63:c4:b0:18:5d:d6:83:b4:6b:c7:22:b0:0e:fd:f8:c5:
e2:c2:d2:bd:86:b2:0d:0f:ad:d1:9b:30:14:c9:e8:ae:1f:07:
84:e0:28:07:8b:f6:d6:90:ac:ee:26:5f:d8:50:a4:49:2e:9d:
bb:0b:22:1e:26:50:4f:52:5c:62:9c:99:ae:fa:48:83:25:79:
2c:87:4c:74:f3:6a:8c:c3:db:2c:2a:8c:e7:bf:31:d3:70:34:
db:63:44:44:4b:ed:26:7e:95:b5:a1:77:e8:25:f4:73:80:9d:
23:b4:d1:b8:3c:e6:d6:d0:1d:fe:aa:fc:a7:80:56:92:27:b3:
5d:8a:ba:15:37:10:84:28:0e:e2:cb:1e:b2:ef:b6:f7:c3:11:
b7:f9:1f:e4:1e:3d:5f:ea:cf:0f:4a:1a:c0:c7:45:d5:f7:db:
cc:0a:d0:cc:9e:fc:82:4c:c1:2a:e6:13:08:ca:f3:3a:93:e9:
11:b0:0c:c4
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIULQWwNDpGUol10COLzDAW6hfgaE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VERDg1NDkzNjA4RkU5QUFFNTQ2Qjg0Nzk2RUMwRjE5
N0VGMkMwMjAeFw0yNTA3MDIxOTI4MDlaFw0yNjA3MDExOTMzMDlaMDMxMTAvBgNV
BAMTKEIwMkE0ODcwNzYwMTY3OEIwMkQzQjA4QUQ5MkYyRjZFMTlFRDc0QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCptzRnlQKJRiYOssztQnGQj1uZ
rDrGa3MpHQAcK8FGZGlkEwTv6wlcm0Ap4PMFsms+ZThD3vMR3ZWJ1IErJ8EEZZTj
Xco/wFI+aH56luW3mh5KZqT+lg0jYR1vmmiIfpMClDewP7IPo/o7smPuv2IhbHn/
P9w8kpmK7/e+wG8uNC186THuJU6WaUn3KPZYBrJoSUqbS52CCyv939SN9FurgiLq
wNdL2zMWME4JgIzj96mqkrQpHKdCP4o5x8U4gSYR1nkXuwuR5Yg4/9a8f80xOXsL
lJS5x/Xk0IieyseWvvFYJfy/E3pS5UptQ+QJtI+UEWzNNcmm/ds0O7r0p96RAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUsCpIcHYBZ4sC07CK2S8vbhntdLAwHwYDVR0j
BBgwFoAUft2FSTYI/pquVGuEeW7A8ZfvLAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMy83RUREODU0OTM2
MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNybDCBkwYIKwYBBQUHAQEE
gYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3Jl
cG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83RURE
ODU0OTM2MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS82OWY1NjVkNDNmYWQ0NTNkODgyZDFjMWFhNmIyOGMyMC8zL0FT
MTY1MDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwUqBd/D90AwDQYJKoZIhvcNAQELBQADggEBABBP3A9s
qRn5yYuBkQINldW0iQNUtBbPmAVVs4pJKvKm+Mwtbmn1e/z0uor/IIRK9KpfB4Aa
KPU51+ujIu5oBmvGEQrUrLoK0a5tY8SwGF3Wg7RrxyKwDv34xeLC0r2Gsg0PrdGb
MBTJ6K4fB4TgKAeL9taQrO4mX9hQpEkunbsLIh4mUE9SXGKcma76SIMleSyHTHTz
aozD2ywqjOe/MdNwNNtjRERL7SZ+lbWhd+gl9HOAnSO00bg85tbQHf6q/KeAVpIn
s12KuhU3EIQoDuLLHrLvtvfDEbf5H+QePV/qzw9KGsDHRdX328wK0Mye/IJMwSrm
EwjK8zqT6RGwDMQ=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:02:15 2025 by rpki-client