Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS202224.roa
File: AS202224.roa (raw, json)
Hash identifier: DnQCH3JfsZQ68nNoNOuUN3ChCWBaMwb3rmowCaI5uPk=
Subject key identifier: 99:8F:3D:A2:49:23:AF:8F:49:4A:E9:09:5C:ED:E9:04:96:6A:77:42
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 5BA0FCE01A3A5976B9B28BF04F0A3300C7236057
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS202224.roa
Signing time: Wed 02 Jul 2025 19:33:10 +0000
ROA not before: Wed 02 Jul 2025 19:28:10 +0000
ROA not after: Wed 01 Jul 2026 19:33:10 +0000
asID: 202224
IP address blocks: 2a0a:6044:7000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a0:fc:e0:1a:3a:59:76:b9:b2:8b:f0:4f:0a:33:00:c7:23:60:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:10 2025 GMT
Not After : Jul 1 19:33:10 2026 GMT
Subject: CN=998F3DA24923AF8F494AE9095CEDE904966A7742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:35:5c:ed:e8:f6:20:61:c2:ed:65:50:24:
ad:26:67:40:4e:4b:38:6b:6e:e2:81:13:15:64:06:
d0:75:c4:d3:30:23:b1:4e:4a:9b:7a:fb:ae:21:ff:
1f:46:60:d5:d5:39:66:9c:3a:c9:d7:e4:41:27:71:
14:a1:9f:b6:8b:d4:cd:34:5e:c0:17:33:0e:b5:ab:
b6:ac:36:e4:c6:a3:ad:b8:00:2d:88:b8:d5:70:26:
0f:17:2a:76:0e:2d:41:bd:d1:1d:44:69:aa:ec:b6:
8a:45:58:79:ed:7b:1b:5b:1d:56:b7:3a:cf:44:f3:
2d:9b:75:d6:da:28:64:0b:07:8d:5a:ea:25:90:27:
d4:d1:52:88:52:fb:f6:74:98:31:dc:96:c2:f5:40:
93:e0:de:ab:67:dd:23:0c:30:75:6c:2f:b4:21:3e:
e5:00:fe:37:8b:4d:27:15:a8:1c:c9:cc:35:1a:37:
c5:97:f1:1b:d0:d9:af:24:3e:32:9e:f6:6f:c9:af:
28:94:22:93:99:f8:49:dd:af:90:37:91:de:15:14:
74:05:94:f7:ee:55:c9:e1:08:9b:5e:5f:c4:10:66:
fa:fe:48:62:21:82:fa:0f:a6:98:89:94:e6:6a:41:
23:f0:9c:e0:89:78:4b:a3:28:91:79:b4:04:15:39:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8F:3D:A2:49:23:AF:8F:49:4A:E9:09:5C:ED:E9:04:96:6A:77:42
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS202224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7000::/40
Signature Algorithm: sha256WithRSAEncryption
ad:05:d3:23:4e:90:be:56:2f:77:78:30:ef:5d:6b:87:84:b0:
4f:24:39:89:a1:75:68:08:39:62:41:b8:f7:05:8b:c0:26:65:
da:d9:60:ce:15:ff:24:c2:6b:ab:c1:b4:e9:db:43:23:bf:3a:
a4:77:6e:90:48:25:6c:60:fb:e1:be:92:6b:e9:2c:ec:ee:be:
f4:49:4c:8b:79:44:08:65:6d:cd:a3:5d:e7:9c:74:7a:de:1b:
18:0e:54:71:b2:f9:ef:32:a9:f1:5a:87:4d:7a:94:ea:a2:ec:
b2:3e:58:af:3c:12:29:d2:2e:ff:01:b4:4a:a7:ef:2f:47:48:
e0:fa:42:54:64:36:c9:e9:1a:28:98:d5:28:5b:f4:30:7f:e2:
76:9e:9d:cb:75:26:d9:eb:9b:c7:d0:62:34:3e:5b:6c:c3:b6:
48:9f:b4:49:2a:0f:58:67:c4:46:b3:89:40:f6:2f:f9:8f:e9:
f8:04:ae:8d:09:59:84:44:24:a1:1c:5a:0c:f1:a7:cd:52:f3:
c5:9d:86:6e:b9:5b:fd:4f:4f:d6:fb:d8:a5:f6:5a:aa:65:a0:
eb:2d:db:96:f3:37:6d:a5:dc:ad:c4:3b:67:a3:ad:20:5a:79:
b7:3d:d2:24:4d:86:ff:b2:7a:19:02:d3:fa:a2:2c:3b:a7:b5:
c0:ee:c9:c4
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUW6D84Bo6WXa5sovwTwozAMcjYFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VERDg1NDkzNjA4RkU5QUFFNTQ2Qjg0Nzk2RUMwRjE5
N0VGMkMwMjAeFw0yNTA3MDIxOTI4MTBaFw0yNjA3MDExOTMzMTBaMDMxMTAvBgNV
BAMTKDk5OEYzREEyNDkyM0FGOEY0OTRBRTkwOTVDRURFOTA0OTY2QTc3NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYDVc7ej2IGHC7WVQJK0mZ0BO
SzhrbuKBExVkBtB1xNMwI7FOSpt6+64h/x9GYNXVOWacOsnX5EEncRShn7aL1M00
XsAXMw61q7asNuTGo624AC2IuNVwJg8XKnYOLUG90R1EaarstopFWHntextbHVa3
Os9E8y2bddbaKGQLB41a6iWQJ9TRUohS+/Z0mDHclsL1QJPg3qtn3SMMMHVsL7Qh
PuUA/jeLTScVqBzJzDUaN8WX8RvQ2a8kPjKe9m/JryiUIpOZ+Endr5A3kd4VFHQF
lPfuVcnhCJteX8QQZvr+SGIhgvoPppiJlOZqQSPwnOCJeEujKJF5tAQVOetFAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUmY89okkjr49JSukJXO3pBJZqd0IwHwYDVR0j
BBgwFoAUft2FSTYI/pquVGuEeW7A8ZfvLAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMy83RUREODU0OTM2
MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNybDCBkwYIKwYBBQUHAQEE
gYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3Jl
cG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83RURE
ODU0OTM2MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS82OWY1NjVkNDNmYWQ0NTNkODgyZDFjMWFhNmIyOGMyMC8zL0FT
MjAyMjI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYAKgpgRHAwDQYJKoZIhvcNAQELBQADggEBAK0F0yNO
kL5WL3d4MO9da4eEsE8kOYmhdWgIOWJBuPcFi8AmZdrZYM4V/yTCa6vBtOnbQyO/
OqR3bpBIJWxg++G+kmvpLOzuvvRJTIt5RAhlbc2jXeecdHreGxgOVHGy+e8yqfFa
h016lOqi7LI+WK88EinSLv8BtEqn7y9HSOD6QlRkNsnpGiiY1Shb9DB/4naenct1
Jtnrm8fQYjQ+W2zDtkiftEkqD1hnxEaziUD2L/mP6fgEro0JWYREJKEcWgzxp81S
88Wdhm65W/1PT9b72KX2WqploOst25bzN22l3K3EO2ejrSBaebc90iRNhv+yehkC
0/qiLDuntcDuycQ=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:00:32 2025 by rpki-client