Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS213864.roa
File: AS213864.roa (raw, json)
Hash identifier: Zym7y2gk+8euvoNvnzWtFJT84RKE3Fiq6jVisL5tavM=
Subject key identifier: 4E:CC:56:5F:80:27:9B:12:54:96:50:EF:FA:A5:21:D2:B0:EB:E3:7C
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 54EABDF2A15B1631C9BF434CAC5BE7CC912BBAE3
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS213864.roa
Signing time: Wed 02 Jul 2025 19:33:06 +0000
ROA not before: Wed 02 Jul 2025 19:28:06 +0000
ROA not after: Wed 01 Jul 2026 19:33:06 +0000
asID: 213864
IP address blocks: 2a05:dfc2::/32 maxlen: 32
2a06:1281:7000::/36 maxlen: 44
2a06:1281:a000::/36 maxlen: 44
2a06:1284::/32 maxlen: 32
2a09:54c6:1000::/36 maxlen: 44
2a09:54c7:4000::/36 maxlen: 44
2a09:54c7:5000::/36 maxlen: 44
2a09:54c7:6000::/36 maxlen: 44
2a09:54c7:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ea:bd:f2:a1:5b:16:31:c9:bf:43:4c:ac:5b:e7:cc:91:2b:ba:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:06 2025 GMT
Not After : Jul 1 19:33:06 2026 GMT
Subject: CN=4ECC565F80279B12549650EFFAA521D2B0EBE37C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:35:33:dc:f5:4c:ef:02:5f:db:72:f6:29:
0a:b4:1c:41:94:d8:77:84:3b:a0:d2:09:c6:5c:81:
9c:63:14:a5:4e:52:aa:88:ee:5a:a6:52:3c:13:db:
44:da:1d:ef:1c:e5:92:ed:74:7c:ed:4e:47:07:0f:
41:9a:33:b2:d6:cf:2e:fd:f0:95:fb:b9:98:ef:65:
50:83:96:3f:c8:4b:64:5e:89:15:dd:04:67:43:56:
45:4f:b1:81:b6:b9:ff:78:42:be:32:f9:26:ab:7d:
70:b9:5f:2b:ff:c6:74:49:22:37:04:e9:91:b8:35:
30:2f:a6:44:97:62:5a:6a:36:3a:a4:a7:01:f8:61:
a6:2f:1f:43:be:9d:5d:c6:f7:92:0d:c5:67:b3:88:
f1:0c:11:5e:21:d3:a9:a3:03:e8:fc:74:a9:58:95:
aa:e2:04:e1:4c:bf:92:94:6c:75:c5:54:f5:1f:b4:
6c:a8:9a:d4:25:a4:32:11:43:3a:58:54:b0:b2:5d:
8b:4c:cb:80:0a:28:2e:f0:6a:6a:3c:eb:6b:7b:7a:
03:17:bc:9c:5e:c8:b9:a4:2f:9f:58:3e:9d:95:64:
ed:a9:b1:ea:3d:1a:ac:71:0f:67:82:35:c7:0b:b4:
45:7d:a1:8e:c2:c3:32:e8:63:e6:8e:f4:1d:8d:67:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CC:56:5F:80:27:9B:12:54:96:50:EF:FA:A5:21:D2:B0:EB:E3:7C
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS213864.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2::/32
2a06:1281:7000::/36
2a06:1281:a000::/36
2a06:1284::/32
2a09:54c6:1000::/36
2a09:54c7:4000::-2a09:54c7:6fff:ffff:ffff:ffff:ffff:ffff
2a09:54c7:c000::/34
Signature Algorithm: sha256WithRSAEncryption
47:0a:76:4f:2a:ac:08:8e:72:e9:41:86:28:78:d3:8d:4a:33:
09:31:54:ee:72:51:d9:0f:98:99:6b:ee:56:25:db:b3:06:15:
e2:dc:00:4a:9a:9f:c3:8c:1b:ea:f6:eb:12:f4:60:d9:de:8f:
11:63:96:6a:02:df:8d:23:d4:4d:95:85:15:93:c3:b1:2e:a5:
8f:8b:34:c3:59:a2:d3:32:14:46:b8:10:62:87:81:a4:64:c5:
98:79:9e:fb:d8:02:b6:cd:45:e1:d5:33:5f:68:f4:2d:a0:1f:
b5:3b:0a:ec:5c:cd:d8:f7:cb:42:e6:1e:15:cb:3d:1c:de:74:
57:49:75:48:8b:20:ec:84:a8:68:df:68:aa:2e:4c:85:bc:3f:
53:bb:f7:d8:82:d0:d4:69:48:98:c9:4f:a9:26:35:9a:5e:b0:
01:46:41:4c:a2:8b:55:8a:7d:48:b3:a8:27:7b:11:c8:80:df:
6b:e2:62:61:70:17:86:b6:62:c3:69:18:87:e9:b8:19:f2:e8:
c9:30:fe:97:a5:20:d0:f9:fb:43:6c:40:bf:1e:f6:73:0e:39:
db:b0:8f:dc:c2:01:d5:d9:d3:e3:ef:4e:24:e3:8e:f2:75:0b:
a6:73:dd:82:36:1d:00:e5:9d:58:74:1f:fe:3c:08:82:c7:b2:
78:35:ae:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVOq98qFbFjHJv0NMrFvnzJEruuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VERDg1NDkzNjA4RkU5QUFFNTQ2Qjg0Nzk2RUMwRjE5
N0VGMkMwMjAeFw0yNTA3MDIxOTI4MDZaFw0yNjA3MDExOTMzMDZaMDMxMTAvBgNV
BAMTKDRFQ0M1NjVGODAyNzlCMTI1NDk2NTBFRkZBQTUyMUQyQjBFQkUzN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChUTUz3PVM7wJf23L2KQq0HEGU
2HeEO6DSCcZcgZxjFKVOUqqI7lqmUjwT20TaHe8c5ZLtdHztTkcHD0GaM7LWzy79
8JX7uZjvZVCDlj/IS2ReiRXdBGdDVkVPsYG2uf94Qr4y+SarfXC5Xyv/xnRJIjcE
6ZG4NTAvpkSXYlpqNjqkpwH4YaYvH0O+nV3G95INxWeziPEMEV4h06mjA+j8dKlY
lariBOFMv5KUbHXFVPUftGyomtQlpDIRQzpYVLCyXYtMy4AKKC7wamo862t7egMX
vJxeyLmkL59YPp2VZO2pseo9GqxxD2eCNccLtEV9oY7CwzLoY+aO9B2NZ2GdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTsxWX4AnmxJUllDv+qUh0rDr43wwHwYDVR0j
BBgwFoAUft2FSTYI/pquVGuEeW7A8ZfvLAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMy83RUREODU0OTM2
MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNybDCBkwYIKwYBBQUHAQEE
gYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3Jl
cG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83RURE
ODU0OTM2MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS82OWY1NjVkNDNmYWQ0NTNkODgyZDFjMWFhNmIyOGMyMC8zL0FT
MjEzODY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEH
AQH/BEowSDBGBAIAAjBAAwUAKgXfwgMGBCoGEoFwAwYEKgYSgaADBQAqBhKEAwYE
KglUxhAwEAMGBioJVMdAAwYEKglUx2ADBgYqCVTHwDANBgkqhkiG9w0BAQsFAAOC
AQEARwp2TyqsCI5y6UGGKHjTjUozCTFU7nJR2Q+YmWvuViXbswYV4twASpqfw4wb
6vbrEvRg2d6PEWOWagLfjSPUTZWFFZPDsS6lj4s0w1mi0zIURrgQYoeBpGTFmHme
+9gCts1F4dUzX2j0LaAftTsK7FzN2PfLQuYeFcs9HN50V0l1SIsg7ISoaN9oqi5M
hbw/U7v32ILQ1GlImMlPqSY1ml6wAUZBTKKLVYp9SLOoJ3sRyIDfa+JiYXAXhrZi
w2kYh+m4GfLoyTD+l6Ug0Pn7Q2xAvx72cw4527CP3MIB1dnT4+9OJOOO8nULpnPd
gjYdAOWdWHQf/jwIgseyeDWu0w==
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:02:14 2025 by rpki-client