Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS211066.roa
File: AS211066.roa (raw, json)
Hash identifier: VkXBF88u5r0dO7bv4UXde5IIvo+kFi4MqkYhY0DmpnY=
Subject key identifier: 9D:57:5F:06:65:93:E8:3F:A1:31:23:DF:BE:FA:B6:E7:2A:95:B6:79
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 4593E47CEF8967511F962F5529B16750E48EC164
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS211066.roa
Signing time: Wed 02 Jul 2025 19:33:09 +0000
ROA not before: Wed 02 Jul 2025 19:28:09 +0000
ROA not after: Wed 01 Jul 2026 19:33:09 +0000
asID: 211066
IP address blocks: 2a05:dfc3:fc00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:93:e4:7c:ef:89:67:51:1f:96:2f:55:29:b1:67:50:e4:8e:c1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:09 2025 GMT
Not After : Jul 1 19:33:09 2026 GMT
Subject: CN=9D575F066593E83FA13123DFBEFAB6E72A95B679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:46:34:5d:8c:4f:b0:23:de:86:34:3e:14:
b5:62:a7:c7:68:af:ed:af:81:6a:ff:a5:d5:3d:18:
97:d3:5b:88:4e:13:39:45:03:73:f6:70:89:55:4e:
a6:93:26:0e:69:67:de:17:c4:6c:9c:ab:f4:cb:65:
4e:13:93:2a:fa:c8:2f:dd:e0:4d:1f:bd:0c:7e:fb:
aa:ee:f9:f8:2b:59:22:5d:c0:58:c7:cc:72:c2:4f:
5c:69:86:da:07:a0:88:6e:18:a8:9a:7a:d6:64:de:
f6:37:a2:82:76:0b:5d:af:3f:d3:6f:19:06:9b:2d:
92:60:11:73:2b:ca:62:f8:a6:c0:40:02:c8:9f:8f:
ad:c4:e8:1e:cc:55:ee:63:b5:fc:1c:7f:f8:1b:c1:
eb:9e:b3:fc:b7:b7:d9:a1:55:4b:21:53:9d:01:26:
a8:72:87:fd:81:a1:56:df:9f:c2:0b:b3:eb:0b:17:
d0:6d:b9:fa:f8:a5:1a:00:f0:da:a9:30:41:ed:78:
b9:30:35:9c:5f:57:11:7c:d1:8c:3b:c5:39:8a:c4:
af:0c:c4:3f:df:d1:3a:5b:b2:ff:76:0d:49:6c:da:
17:2c:f6:83:43:af:ad:b6:49:2f:04:31:0a:19:2c:
56:95:22:48:82:25:79:61:bf:95:1b:b8:e4:25:60:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:57:5F:06:65:93:E8:3F:A1:31:23:DF:BE:FA:B6:E7:2A:95:B6:79
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS211066.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fc00::/40
Signature Algorithm: sha256WithRSAEncryption
28:5a:bd:06:08:e8:9c:af:0c:39:e4:df:3a:42:7f:61:9c:d8:
06:05:28:10:71:fe:17:36:72:5a:cd:6c:cb:83:d2:c9:0e:97:
b7:14:1a:e7:69:51:55:06:a3:93:96:88:ea:77:92:32:9d:2b:
21:ee:91:4d:06:cb:cf:da:65:67:a9:bc:7f:ac:af:32:e2:86:
71:7f:67:bc:11:11:f9:29:06:24:83:ba:84:bc:f8:83:94:45:
96:1d:f0:fe:9f:8b:0c:7e:27:95:1d:e6:c8:dd:f0:c9:91:1a:
6c:0e:f8:62:08:be:80:8b:37:3b:05:1e:d3:7e:f9:d7:8d:55:
74:8b:ec:f1:14:9d:87:ac:8f:cf:74:dc:38:6d:d5:7d:4a:9f:
a6:17:8e:2d:2e:76:0f:2f:36:83:76:7c:36:68:e0:a2:e4:e4:
f1:93:f3:44:2d:ba:23:e6:48:96:10:b1:16:66:f6:55:d4:da:
e0:58:3d:05:da:70:83:f5:c2:84:00:dc:61:3b:f4:58:7b:12:
d8:36:bd:6c:52:74:3d:06:bf:1f:69:bc:91:f3:0c:b0:a5:37:
3b:eb:a5:5b:98:30:e0:33:ca:22:b5:6c:d0:63:0b:fe:73:32:
ee:ca:d0:72:74:55:07:71:a8:f9:78:2d:5b:f1:9d:4a:03:ed:
33:3e:98:75
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIURZPkfO+JZ1Efli9VKbFnUOSOwWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VERDg1NDkzNjA4RkU5QUFFNTQ2Qjg0Nzk2RUMwRjE5
N0VGMkMwMjAeFw0yNTA3MDIxOTI4MDlaFw0yNjA3MDExOTMzMDlaMDMxMTAvBgNV
BAMTKDlENTc1RjA2NjU5M0U4M0ZBMTMxMjNERkJFRkFCNkU3MkE5NUI2NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2FUY0XYxPsCPehjQ+FLVip8do
r+2vgWr/pdU9GJfTW4hOEzlFA3P2cIlVTqaTJg5pZ94XxGycq/TLZU4Tkyr6yC/d
4E0fvQx++6ru+fgrWSJdwFjHzHLCT1xphtoHoIhuGKiaetZk3vY3ooJ2C12vP9Nv
GQabLZJgEXMrymL4psBAAsifj63E6B7MVe5jtfwcf/gbweues/y3t9mhVUshU50B
Jqhyh/2BoVbfn8ILs+sLF9Btufr4pRoA8NqpMEHteLkwNZxfVxF80Yw7xTmKxK8M
xD/f0Tpbsv92DUls2hcs9oNDr622SS8EMQoZLFaVIkiCJXlhv5UbuOQlYBlvAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUnVdfBmWT6D+hMSPfvvq25yqVtnkwHwYDVR0j
BBgwFoAUft2FSTYI/pquVGuEeW7A8ZfvLAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMy83RUREODU0OTM2
MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNybDCBkwYIKwYBBQUHAQEE
gYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3Jl
cG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83RURE
ODU0OTM2MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS82OWY1NjVkNDNmYWQ0NTNkODgyZDFjMWFhNmIyOGMyMC8zL0FT
MjExMDY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYAKgXfw/wwDQYJKoZIhvcNAQELBQADggEBAChavQYI
6JyvDDnk3zpCf2Gc2AYFKBBx/hc2clrNbMuD0skOl7cUGudpUVUGo5OWiOp3kjKd
KyHukU0Gy8/aZWepvH+srzLihnF/Z7wREfkpBiSDuoS8+IOURZYd8P6fiwx+J5Ud
5sjd8MmRGmwO+GIIvoCLNzsFHtN++deNVXSL7PEUnYesj8903Dht1X1Kn6YXji0u
dg8vNoN2fDZo4KLk5PGT80QtuiPmSJYQsRZm9lXU2uBYPQXacIP1woQA3GE79Fh7
Etg2vWxSdD0Gvx9pvJHzDLClNzvrpVuYMOAzyiK1bNBjC/5zMu7K0HJ0VQdxqPl4
LVvxnUoD7TM+mHU=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:08:49 2025 by rpki-client