Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS204676.roa
File: AS204676.roa (raw, json)
Hash identifier: 57MNksIkCR2B230eLQOs4bU7Zor2Zx+ZvnuEwNbY+n4=
Subject key identifier: ED:00:8C:C2:6B:AE:F1:D7:3E:5F:09:F0:41:7A:5F:6C:1D:3E:72:94
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 6BF9AAA2524B3B2EA2FD6BF6B99F8EE635526C98
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS204676.roa
Signing time: Wed 02 Jul 2025 19:33:10 +0000
ROA not before: Wed 02 Jul 2025 19:28:10 +0000
ROA not after: Wed 01 Jul 2026 19:33:10 +0000
asID: 204676
IP address blocks: 2a09:54c6:8000::/36 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f9:aa:a2:52:4b:3b:2e:a2:fd:6b:f6:b9:9f:8e:e6:35:52:6c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:10 2025 GMT
Not After : Jul 1 19:33:10 2026 GMT
Subject: CN=ED008CC26BAEF1D73E5F09F0417A5F6C1D3E7294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:02:6e:e3:b1:be:c0:03:49:19:cb:15:12:
c2:4a:fd:90:9f:fd:a2:ea:08:e9:b6:3b:23:73:30:
5e:ee:2f:76:85:99:4c:ff:2f:b7:84:6d:04:6a:24:
e7:ef:c2:0d:f1:da:7a:52:c0:5d:0a:67:3a:db:52:
fe:ea:3b:8a:4b:39:70:60:38:58:e9:6f:18:91:58:
56:76:1e:21:b7:cc:55:25:cd:d8:e7:e1:ff:30:81:
93:af:57:d0:8e:f5:fe:32:39:a1:f6:aa:6a:28:95:
65:d8:65:eb:3f:b4:38:d1:31:20:58:89:16:8f:cd:
b4:35:21:f8:ae:57:e0:0f:4b:8b:ed:42:55:0e:c1:
1d:ad:f9:fe:f2:67:a9:6b:21:9b:73:fd:7f:88:84:
21:9c:48:c0:9a:f0:08:0b:85:07:c1:ed:4f:9e:ff:
54:84:86:15:f9:e4:a7:55:b7:c2:b8:b8:7c:8b:5d:
5f:ac:5e:5c:1f:39:a2:ea:4d:ad:d1:93:d3:b7:bf:
24:a9:e7:43:43:14:dd:7f:1e:6f:38:19:39:01:7f:
39:d9:df:87:e0:9c:26:23:7b:4d:e9:58:80:1b:be:
79:43:ec:09:55:4d:a7:9b:15:80:1a:32:b8:b0:4e:
2c:91:00:9c:ab:8e:fc:9e:77:f4:15:de:c5:3f:64:
12:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:00:8C:C2:6B:AE:F1:D7:3E:5F:09:F0:41:7A:5F:6C:1D:3E:72:94
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS204676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:8000::/36
Signature Algorithm: sha256WithRSAEncryption
af:53:0f:be:b9:68:eb:df:18:b6:fa:30:66:24:8c:0a:9d:7f:
b8:1a:0b:68:a4:1b:54:c3:7f:b4:70:1d:d7:a5:da:33:69:27:
f0:de:aa:c3:2b:0b:b3:e1:47:1f:a6:5e:0e:37:ea:17:b1:4b:
0b:dd:4d:66:a6:fc:8b:ad:9d:89:70:39:5b:b4:b7:49:0c:75:
18:42:11:23:fc:47:f5:4b:8e:1d:e8:63:be:4e:d2:57:89:ad:
b4:ab:52:16:94:20:eb:32:e6:ff:a9:64:5b:e6:6b:91:6d:a1:
72:9c:f9:3a:78:e3:ef:0c:10:d2:a2:f4:20:df:b5:70:d5:f7:
e2:ea:b5:81:6e:92:66:70:7e:84:0d:52:e0:4a:36:1f:ee:fc:
49:b9:d5:ec:e4:26:90:24:67:4f:ea:3b:d3:c2:c6:9b:5c:6b:
25:5b:f4:7b:f7:1a:d6:9a:1b:84:ec:de:1d:3e:fc:ba:07:b5:
22:6e:8d:54:17:35:8b:7e:ad:d5:ee:ca:0a:e2:1f:5a:c8:c4:
e8:f9:c5:b4:b1:84:17:18:fe:78:ab:cf:b1:cb:c1:a9:ef:bf:
aa:eb:8b:78:0c:1a:7f:91:79:1e:21:27:5f:14:1a:8f:fb:b7:
da:21:7a:f0:07:35:de:c5:46:d1:5e:0f:30:39:f9:0a:bf:fe:
e3:dd:88:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:43:54 2025 by rpki-client