Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: cF1ZXuHZcP1KukxiwfH2rhpy+MweDdxieOP+WaPZUI0=
Subject key identifier: C5:09:79:DC:79:50:9B:96:6A:C6:54:3B:92:30:46:D0:AE:84:35:98
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 4E58FCFC263FD7303DBB1473CBD48D28470AB05E
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS20473.roa
Signing time: Wed 02 Jul 2025 19:33:11 +0000
ROA not before: Wed 02 Jul 2025 19:28:11 +0000
ROA not after: Wed 01 Jul 2026 19:33:11 +0000
asID: 20473
IP address blocks: 2a0a:6044:ac60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:58:fc:fc:26:3f:d7:30:3d:bb:14:73:cb:d4:8d:28:47:0a:b0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:11 2025 GMT
Not After : Jul 1 19:33:11 2026 GMT
Subject: CN=C50979DC79509B966AC6543B923046D0AE843598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:c3:86:0f:38:f6:1f:4d:37:1e:2e:87:31:
f5:ab:83:4f:4c:cf:bf:e6:4b:84:4c:b4:db:b1:3e:
4b:89:d2:d2:6d:96:7d:91:9c:2a:32:c5:fc:f5:22:
fb:d0:63:87:6a:5e:5e:ec:24:14:1a:dd:03:91:b0:
bb:ae:b0:d8:af:14:48:2f:09:d5:0a:18:ab:85:65:
9f:a0:0e:2f:3c:b0:7f:0b:a9:7b:33:6a:37:e0:a4:
58:ae:b9:ee:42:cf:10:b6:72:5b:6b:1b:47:c5:28:
50:5b:94:da:6f:16:e3:b8:0b:bd:a5:1e:6a:45:0e:
e4:76:84:25:29:d6:72:2b:03:6a:ef:22:4c:dd:10:
50:c8:0e:49:3a:a8:86:fd:a2:90:cf:e8:34:c4:c2:
ed:dd:8a:59:9a:ff:33:1e:b6:73:c6:e5:bd:25:b6:
ac:dc:a4:32:bb:60:92:9e:a3:d0:74:a1:51:d7:4c:
7b:69:dd:77:06:ca:d2:35:be:ab:ff:25:42:b2:90:
43:0a:78:40:75:a4:05:5b:3d:ee:eb:7b:2a:25:74:
d8:51:da:b3:d0:d2:0d:5c:bb:d3:2c:ad:bc:75:06:
6a:ab:3b:49:2e:bc:e9:b8:36:3e:84:65:bb:1d:bc:
15:98:1a:09:83:af:5b:2d:2b:f0:82:6d:ed:96:02:
12:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:09:79:DC:79:50:9B:96:6A:C6:54:3B:92:30:46:D0:AE:84:35:98
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac60::/44
Signature Algorithm: sha256WithRSAEncryption
4e:92:95:58:13:fa:13:43:ae:9f:ef:3c:6e:0a:2f:ff:6b:75:
6e:f1:b5:0c:79:0d:9c:4d:17:c4:0a:da:9b:b4:5e:7f:e8:01:
45:d0:9b:a1:89:89:54:6f:9e:81:fc:ca:f5:7e:21:a3:d5:b2:
7e:09:b4:18:a1:ca:87:4b:4f:f2:a9:b1:ff:2a:bc:a1:9c:b6:
e7:6a:35:ac:c4:d1:4d:fd:99:76:b6:ca:90:5d:8e:cc:75:de:
e1:a3:8d:1c:75:12:76:02:ec:4c:d2:ff:25:79:74:08:ec:4f:
e5:f5:d5:ac:28:0b:79:8f:51:2b:04:26:f7:28:0f:b5:9c:95:
cb:90:e3:b5:8b:2a:bc:53:db:74:26:a8:d9:1a:d1:9c:cf:57:
f4:b6:3b:c1:fc:e1:ba:61:46:fd:5f:ae:13:cb:e6:5a:bc:88:
16:96:ff:09:8f:15:a5:28:17:0f:2b:85:16:c6:c3:28:68:99:
2a:64:f6:c1:ec:79:98:fc:54:12:09:55:50:bb:af:52:ca:94:
c0:4c:65:4e:ba:94:96:dd:90:a5:3f:40:1c:c0:07:fa:0f:0b:
70:95:1e:7c:93:c9:4d:ed:89:4e:a1:99:7b:51:b8:0c:77:5b:
69:92:0e:5e:e3:ef:d8:97:50:ae:c3:b3:e8:5c:50:26:46:3b:
55:dd:94:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:03:20 2025 by rpki-client