Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214016.roa
File: AS214016.roa (raw, json)
Hash identifier: KCH7G/GAcNOLHjvxBLs+r0sykcCgB+69NPBn4f3Q0nc=
Subject key identifier: 89:52:B8:4C:83:3A:DB:78:53:82:F6:BB:2B:D2:B0:6E:54:9A:EB:47
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 0A9DA27639F1CC54D8EBB0BF069F4DE893A6CCF5
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214016.roa
Signing time: Wed 02 Jul 2025 19:33:10 +0000
ROA not before: Wed 02 Jul 2025 19:28:10 +0000
ROA not after: Wed 01 Jul 2026 19:33:10 +0000
asID: 214016
IP address blocks: 2a06:1281:5000::/36 maxlen: 44
2a09:54c6:4000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9d:a2:76:39:f1:cc:54:d8:eb:b0:bf:06:9f:4d:e8:93:a6:cc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:10 2025 GMT
Not After : Jul 1 19:33:10 2026 GMT
Subject: CN=8952B84C833ADB785382F6BB2BD2B06E549AEB47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:67:a6:44:d1:59:ab:f4:c4:4d:e4:db:5d:
b8:01:1f:d8:a4:84:93:2d:61:e6:78:33:06:63:a4:
ea:44:86:3b:cf:12:d2:5f:76:46:3d:4c:bd:3c:ce:
50:9d:dd:09:84:33:3c:e3:b4:c3:78:4b:02:6a:ea:
bd:5b:b1:09:c0:e8:33:e8:a8:f5:02:8c:a5:92:0c:
f6:21:f9:ec:05:6e:f0:4d:db:2f:f9:84:fb:e1:d8:
eb:68:c3:53:fc:c8:8f:66:55:f9:83:3d:b0:1b:34:
e1:93:fc:12:1d:33:a9:d7:31:58:49:e8:98:4c:e2:
fb:f0:e0:b6:01:91:2d:e7:d4:02:9b:93:e4:23:41:
9f:ed:d5:90:2d:c5:d8:a5:e9:05:98:94:86:bf:df:
38:e8:ca:7f:66:eb:80:6e:c2:84:e1:a6:49:a3:b7:
f7:78:d4:74:73:eb:85:a8:40:05:85:f4:8d:03:4b:
10:a0:d2:90:71:8c:fc:d9:1b:b8:8e:c2:72:b8:17:
ce:01:f3:36:b9:ab:2d:43:34:c7:6c:8c:03:22:e4:
bc:12:91:a4:de:3a:b0:0a:f7:ac:57:63:4e:a2:c2:
b7:36:09:fa:d5:8d:7a:50:3b:82:ed:81:a8:94:2c:
7e:a6:06:c3:f2:df:3f:ee:29:4a:0f:54:de:ab:4b:
62:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:B8:4C:83:3A:DB:78:53:82:F6:BB:2B:D2:B0:6E:54:9A:EB:47
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214016.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:5000::/36
2a09:54c6:4000::/36
Signature Algorithm: sha256WithRSAEncryption
d3:88:b1:66:87:83:37:cb:93:ac:e2:23:40:22:de:03:10:07:
8e:ec:02:2b:6a:b6:a0:a1:38:61:51:3c:9b:96:0b:db:47:6a:
3d:dc:9c:ac:11:09:7a:06:d3:53:e8:7e:91:ea:11:94:a6:2c:
ad:38:05:c0:d4:23:e6:03:5a:55:01:50:e7:c2:bf:ed:1c:bf:
ac:a7:74:e3:e6:44:24:6a:58:a4:af:b1:de:ae:29:af:07:cc:
a7:f3:38:6b:63:d9:2b:29:7e:dc:88:8f:e7:7b:f9:aa:e3:79:
7a:bc:47:a8:98:db:6e:e8:d9:8a:14:51:6a:cd:ee:6b:89:fb:
09:9d:b2:cc:c6:79:fa:aa:e4:ca:26:f3:de:5b:63:1d:fd:a1:
e1:d1:3b:d6:58:0c:3d:90:ea:9c:5e:98:2a:79:ba:80:19:43:
88:47:33:ec:30:01:ae:d3:42:8d:24:b7:a5:b1:a6:6a:53:c2:
99:d6:6d:77:5d:7a:ed:72:1b:40:2b:dc:e9:c7:9e:5c:24:62:
4b:c1:3d:89:f7:3c:3f:e8:18:76:7f:ba:54:f9:72:f7:0d:0c:
11:40:cd:c9:74:80:91:16:62:56:33:9c:a8:83:c1:56:e4:1e:
5d:b7:96:d0:d2:4b:49:2a:9a:60:61:f2:ac:78:18:ed:95:b3:
5b:94:db:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:40:20 2025 by rpki-client