Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS209737.roa
File: AS209737.roa (raw, json)
Hash identifier: +s5q7YCeEfGqPcKEugy7eqx1FNtJk2m6eOcHGQmSjiY=
Subject key identifier: 7B:D2:2D:C2:BF:AE:D4:E5:3A:72:68:D4:C4:4E:80:E9:2E:F6:B6:8F
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 741D35B26DE25DFD1523DC5F8677178830A0EA97
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS209737.roa
Signing time: Wed 02 Jul 2025 19:33:14 +0000
ROA not before: Wed 02 Jul 2025 19:28:14 +0000
ROA not after: Wed 01 Jul 2026 19:33:14 +0000
asID: 209737
IP address blocks: 2a05:dfc3:fd23::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:1d:35:b2:6d:e2:5d:fd:15:23:dc:5f:86:77:17:88:30:a0:ea:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:14 2025 GMT
Not After : Jul 1 19:33:14 2026 GMT
Subject: CN=7BD22DC2BFAED4E53A7268D4C44E80E92EF6B68F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:c4:a2:e5:e6:da:36:fc:c7:a6:f9:e8:9b:
e2:f2:23:2a:2b:a0:0e:83:06:15:8c:78:34:08:fd:
42:ef:dd:0d:5c:9e:04:f6:cf:4d:c6:9c:89:de:ce:
20:71:25:0f:bd:ca:77:ab:60:b1:4c:a3:6b:20:a4:
a8:f1:31:a2:0a:aa:ab:e6:03:c8:6c:5e:ac:b0:6f:
c7:b4:9c:4b:07:1e:ff:e1:78:f4:41:07:ef:95:55:
f2:39:a1:a8:4e:ad:c5:a6:ae:ce:44:fe:9b:bc:ed:
e2:09:e7:c1:e2:59:b9:82:8c:32:94:cd:c4:be:d0:
74:8d:6c:72:7c:90:8c:82:98:78:c4:9c:f5:5b:2d:
f8:43:2f:a4:6f:a3:6f:46:7b:83:66:ee:01:ba:18:
a5:84:f1:84:a4:cd:30:8c:54:b0:7b:b5:aa:a5:b5:
4d:ce:f1:b6:c1:c6:aa:13:dc:40:ee:5a:32:7b:14:
87:00:83:e8:48:ae:9b:87:aa:a8:19:49:75:f1:a1:
5c:1d:17:d1:5a:e8:26:ed:08:e1:9d:bf:73:e0:26:
69:45:5a:57:eb:89:b8:da:f9:10:a3:b9:68:23:a1:
1b:01:cb:39:b9:9b:81:ce:f5:33:0f:5f:07:18:64:
22:7b:80:09:56:2f:57:64:5b:a7:06:2f:0a:84:16:
5d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D2:2D:C2:BF:AE:D4:E5:3A:72:68:D4:C4:4E:80:E9:2E:F6:B6:8F
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS209737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd23::/48
Signature Algorithm: sha256WithRSAEncryption
15:df:b3:58:a5:a2:26:b7:14:9f:cd:85:91:36:7b:1d:80:6d:
74:47:76:e5:6e:15:04:d2:a5:80:7c:44:e6:94:ef:93:3b:bc:
76:1f:b3:15:49:5b:75:d1:5d:d3:22:4d:73:9a:62:a3:32:93:
c9:d0:e1:d1:e0:af:f0:c8:31:1f:a8:c2:fa:59:b0:b7:9a:18:
78:c4:b7:b7:6e:dd:ec:92:44:d3:bb:1c:d3:d9:86:e3:63:02:
a0:59:ef:1c:8a:a8:b5:75:79:0d:1a:60:b3:34:dc:29:f7:bd:
d3:01:08:7b:a8:97:31:53:35:41:59:7b:5c:45:a0:22:90:c5:
31:69:b7:49:6c:e6:b0:9f:78:b2:6d:74:88:ec:cb:a9:5e:c5:
32:85:e5:d9:ea:f1:88:26:2b:e5:53:33:09:5c:ad:8e:1d:ac:
ca:e7:7f:aa:63:7c:38:14:a7:b7:a8:80:74:d2:60:c2:44:4d:
2f:4a:17:8e:f7:55:8a:c8:f0:13:c7:05:de:38:15:53:b7:42:
63:e0:58:c5:a0:21:c8:c7:92:d6:72:66:cc:56:f1:50:cb:51:
3c:7e:d4:8c:50:64:41:05:48:ca:8b:da:72:ab:dc:d6:d1:b3:
dd:84:96:ad:cb:87:ba:d2:fb:60:98:fe:49:d2:03:4f:aa:ed:
2e:8d:96:d3
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIUdB01sm3iXf0VI9xfhncXiDCg6pcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VERDg1NDkzNjA4RkU5QUFFNTQ2Qjg0Nzk2RUMwRjE5
N0VGMkMwMjAeFw0yNTA3MDIxOTI4MTRaFw0yNjA3MDExOTMzMTRaMDMxMTAvBgNV
BAMTKDdCRDIyREMyQkZBRUQ0RTUzQTcyNjhENEM0NEU4MEU5MkVGNkI2OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3uMSi5ebaNvzHpvnom+LyIyor
oA6DBhWMeDQI/ULv3Q1cngT2z03GnIneziBxJQ+9ynerYLFMo2sgpKjxMaIKqqvm
A8hsXqywb8e0nEsHHv/hePRBB++VVfI5oahOrcWmrs5E/pu87eIJ58HiWbmCjDKU
zcS+0HSNbHJ8kIyCmHjEnPVbLfhDL6Rvo29Ge4Nm7gG6GKWE8YSkzTCMVLB7taql
tU3O8bbBxqoT3EDuWjJ7FIcAg+hIrpuHqqgZSXXxoVwdF9Fa6CbtCOGdv3PgJmlF
Wlfribja+RCjuWgjoRsByzm5m4HO9TMPXwcYZCJ7gAlWL1dkW6cGLwqEFl0lAgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQUe9Itwr+u1OU6cmjUxE6A6S72to8wHwYDVR0j
BBgwFoAUft2FSTYI/pquVGuEeW7A8ZfvLAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMy83RUREODU0OTM2
MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNybDCBkwYIKwYBBQUHAQEE
gYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3Jl
cG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83RURE
ODU0OTM2MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS82OWY1NjVkNDNmYWQ0NTNkODgyZDFjMWFhNmIyOGMyMC8zL0FT
MjA5NzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgXfw/0jMA0GCSqGSIb3DQEBCwUAA4IBAQAV37NY
paImtxSfzYWRNnsdgG10R3blbhUE0qWAfETmlO+TO7x2H7MVSVt10V3TIk1zmmKj
MpPJ0OHR4K/wyDEfqML6WbC3mhh4xLe3bt3skkTTuxzT2YbjYwKgWe8ciqi1dXkN
GmCzNNwp973TAQh7qJcxUzVBWXtcRaAikMUxabdJbOawn3iybXSI7MupXsUyheXZ
6vGIJivlUzMJXK2OHazK53+qY3w4FKe3qIB00mDCRE0vSheO91WKyPATxwXeOBVT
t0Jj4FjFoCHIx5LWcmbMVvFQy1E8ftSMUGRBBUjKi9pyq9zW0bPdhJaty4e60vtg
mP5J0gNPqu0ujZbT
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:00:48 2025 by rpki-client