Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS213576.roa
File: AS213576.roa (raw, json)
Hash identifier: glZXWm5WCnfm8/jhIAfv4SW6flpt7wAVv9PjBX+/boM=
Subject key identifier: B4:28:04:B8:D9:9E:30:6C:08:D4:6B:13:D5:83:CB:89:64:26:42:98
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 3F13D71DD339AB9213E83314D6104CEE2EE5BC09
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS213576.roa
Signing time: Wed 02 Jul 2025 19:33:10 +0000
ROA not before: Wed 02 Jul 2025 19:28:10 +0000
ROA not after: Wed 01 Jul 2026 19:33:10 +0000
asID: 213576
IP address blocks: 2a05:dfc3:fe00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:13:d7:1d:d3:39:ab:92:13:e8:33:14:d6:10:4c:ee:2e:e5:bc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:10 2025 GMT
Not After : Jul 1 19:33:10 2026 GMT
Subject: CN=B42804B8D99E306C08D46B13D583CB8964264298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:53:a2:4c:fe:89:83:5c:9c:98:82:e7:5b:
af:2a:29:16:96:2d:35:23:52:e5:b4:29:5f:43:54:
f2:a2:d1:89:02:ff:98:52:6d:4b:2e:01:fe:d6:49:
23:b2:11:4a:43:42:6f:1d:4a:05:6f:38:86:4c:14:
b8:50:2c:71:ce:ae:f9:1c:b4:40:bf:c0:95:87:c1:
ea:50:22:ba:0a:55:a9:64:89:06:3a:9c:ae:78:72:
a8:e6:1d:ab:7e:3e:02:36:8d:44:b2:42:ef:89:61:
7d:a1:48:b7:ca:3a:1b:56:0c:ee:77:be:58:26:1a:
90:90:ce:6e:e4:14:37:14:dc:17:06:0b:d3:3c:fd:
32:6b:20:18:af:81:ef:1a:4e:5f:21:81:fd:16:0e:
08:3f:89:8a:3d:09:5c:36:31:ed:a7:6c:28:4a:87:
ee:38:7f:99:70:50:e8:79:54:39:fa:58:b5:60:b4:
b2:38:0e:d2:0d:73:3e:44:0d:c1:e0:83:5b:b0:1c:
33:4e:a0:58:ad:b7:03:eb:d7:cf:47:f4:46:a2:12:
86:0c:ed:f5:15:cb:ff:24:1f:f4:3c:07:16:38:78:
9b:5d:2b:31:9e:eb:cc:fd:db:3d:71:2f:b5:29:57:
a4:92:3e:c7:b9:b6:6c:2b:b6:42:c6:a3:78:50:db:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:28:04:B8:D9:9E:30:6C:08:D4:6B:13:D5:83:CB:89:64:26:42:98
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS213576.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
af:b7:63:37:d0:6d:60:39:1f:ea:52:86:ce:47:23:ea:2a:2a:
3b:a2:54:59:fb:90:01:5a:45:8b:60:ca:dd:82:2d:18:b0:e8:
dc:7f:30:f7:cb:c3:d8:fc:56:78:ee:97:b4:a2:e6:d9:be:82:
ec:78:40:be:22:62:60:a2:56:2a:d1:ad:78:f3:c1:33:a9:0f:
c1:46:ec:a6:4d:3c:b5:a0:00:ba:d4:48:c8:56:17:35:2a:46:
49:35:db:c4:16:bc:07:4f:de:60:a4:4c:f3:4f:ad:db:06:86:
8f:22:02:af:2b:84:cd:d1:74:4e:e0:ba:e0:22:03:88:3d:b9:
ae:4f:72:72:54:36:59:b5:63:4b:01:98:2e:de:86:82:81:5a:
4f:9b:4e:2a:31:d8:c6:95:e2:55:92:18:3f:6e:a9:56:ff:af:
cd:80:8c:3a:a1:a8:1b:1b:90:a6:52:cb:61:95:58:b6:8d:f2:
18:2d:fa:3e:64:8e:5a:38:bc:20:f8:0a:87:7a:c0:e4:4e:5c:
dd:3f:04:4d:2b:45:9d:38:1d:c3:08:c5:5f:a5:07:cd:91:f3:
e6:d8:95:25:d3:5e:28:a9:94:df:f8:7a:e7:f5:80:ca:62:8a:
a6:56:44:c9:f4:18:9f:fa:93:4c:92:b0:37:44:45:68:f9:07:
8e:0e:81:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:02:10 2025 by rpki-client