Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS213641.roa
File: AS213641.roa (raw, json)
Hash identifier: d1pDW1dtjgZzCsvZRVQkVcQITcglb8tYjQSSi60YivI=
Subject key identifier: 90:FE:51:DB:0B:E4:B3:14:77:D5:8B:82:32:1D:C4:EA:D8:AA:DB:2C
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 79155B2C04EFB1F89DB7ED9BC9F745467930C7E7
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS213641.roa
Signing time: Wed 02 Jul 2025 19:33:09 +0000
ROA not before: Wed 02 Jul 2025 19:28:09 +0000
ROA not after: Wed 01 Jul 2026 19:33:09 +0000
asID: 213641
IP address blocks: 2a05:dfc3:fd50::/44 maxlen: 48
2a05:dfc3:fd50::/48 maxlen: 48
2a05:dfc3:fd51::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:15:5b:2c:04:ef:b1:f8:9d:b7:ed:9b:c9:f7:45:46:79:30:c7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:09 2025 GMT
Not After : Jul 1 19:33:09 2026 GMT
Subject: CN=90FE51DB0BE4B31477D58B82321DC4EAD8AADB2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:a4:62:d7:11:2e:35:14:d2:82:a2:25:58:
6c:f5:a3:30:c0:e1:aa:f7:1e:62:2a:f2:0a:5f:20:
5f:52:4f:5c:6d:74:38:57:a2:f3:6a:bf:e0:8f:57:
c4:10:8f:f9:54:84:0e:9c:20:ba:03:82:25:78:f4:
df:93:a9:2d:9d:e0:6b:8d:e6:bc:bf:1b:e5:fa:a3:
af:d1:35:1d:61:2c:da:82:aa:93:3a:ee:71:8d:7a:
75:17:3f:a1:bf:c6:c8:3e:78:e6:a9:f2:e2:5d:43:
36:25:91:de:ab:7c:61:4e:fd:65:59:fa:44:c0:9f:
67:98:12:7a:82:68:ec:fe:91:62:64:4f:a2:50:76:
85:de:76:b4:44:67:84:0b:45:ce:10:b7:05:75:36:
7c:a4:85:06:a6:52:cb:14:37:30:15:48:cb:75:e0:
7c:45:4b:0c:9e:51:4b:ac:a3:f1:b9:09:e5:c1:34:
73:ff:d4:0d:cc:f3:36:7b:a6:93:38:88:33:55:d0:
95:c5:7c:ae:d5:0f:02:6f:bf:04:be:15:aa:b0:45:
15:7b:10:b3:ad:ed:13:26:24:7e:fe:56:30:e4:f2:
21:27:50:58:54:38:29:8d:1f:31:4f:af:6a:64:98:
fd:29:d7:02:dc:14:2b:44:eb:ef:5d:3e:b4:f0:58:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FE:51:DB:0B:E4:B3:14:77:D5:8B:82:32:1D:C4:EA:D8:AA:DB:2C
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS213641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd50::/44
Signature Algorithm: sha256WithRSAEncryption
04:a9:7d:a4:28:b5:51:92:64:75:ff:71:ce:14:0e:ed:6c:95:
da:0a:d5:f4:43:8a:3e:2f:bf:17:e1:f1:25:11:17:14:46:3a:
df:3c:cf:5a:44:f7:c2:7d:56:0f:02:a8:d6:53:c9:c1:f7:bf:
08:b8:4f:93:0f:35:66:2e:25:43:75:05:48:7e:8c:3c:68:19:
0e:1b:a1:6d:da:db:06:4e:ad:8d:a8:ef:65:27:fc:61:e9:f3:
59:60:60:03:80:39:3f:4a:82:47:ba:fc:14:db:76:ef:82:65:
fb:5f:60:bf:04:fc:aa:12:84:96:08:36:3b:fd:84:92:56:71:
7e:f0:d8:35:ea:a2:3c:4f:3d:1e:fa:da:b2:23:d9:e8:b9:65:
68:60:4b:02:4a:57:06:c8:e1:41:c4:9c:6f:cc:8d:56:df:4f:
7d:91:11:cb:7e:76:f4:b7:b6:13:bd:40:4a:c8:ea:26:58:a5:
2c:7c:a6:46:82:90:64:d6:d0:ea:ca:73:34:e6:93:be:7f:15:
23:88:24:cb:63:be:de:5e:8b:ae:a8:1b:fb:62:40:a7:6c:c7:
e8:60:9b:2c:0b:3c:90:d6:50:e3:d2:06:3b:51:5a:76:78:54:
4d:1b:82:0f:6a:ed:96:8e:d5:cd:9a:32:5c:72:09:d9:7b:75:
9e:e9:4d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:08:45 2025 by rpki-client