Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214040.roa
File: AS214040.roa (raw, json)
Hash identifier: P6sYDtyKQ5/Un0vnpvhMMawCtSIITlSb7QR2zYcXs38=
Subject key identifier: D4:0B:7A:20:98:6A:01:C5:E8:FB:BF:F8:EE:85:FB:72:8F:40:43:6C
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 38406F18069CE9DC3AE1D029FF27068D43150E00
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214040.roa
Signing time: Wed 02 Jul 2025 19:33:11 +0000
ROA not before: Wed 02 Jul 2025 19:28:11 +0000
ROA not after: Wed 01 Jul 2026 19:33:11 +0000
asID: 214040
IP address blocks: 2a09:54c6:c000::/36 maxlen: 44
2a09:54c6:e000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:40:6f:18:06:9c:e9:dc:3a:e1:d0:29:ff:27:06:8d:43:15:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:11 2025 GMT
Not After : Jul 1 19:33:11 2026 GMT
Subject: CN=D40B7A20986A01C5E8FBBFF8EE85FB728F40436C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:f6:78:14:c8:59:da:8b:87:f3:09:9d:43:
74:2b:c5:74:32:43:b2:d1:48:06:3d:fb:1b:7a:9b:
90:52:d6:80:48:d8:88:de:ea:71:45:01:4b:bc:47:
62:ff:54:71:68:db:4a:6a:63:66:a3:6c:d7:45:3d:
45:02:38:cd:3c:15:55:5f:20:b9:42:ef:71:43:60:
96:98:62:38:84:c0:e1:43:87:34:31:0f:e9:41:a8:
92:96:cc:57:9e:63:28:99:2e:47:dd:09:6f:8a:75:
bd:dd:64:12:ea:2c:62:d2:23:3d:0e:10:e2:32:f8:
31:1e:8a:b1:2d:c1:ed:73:ff:f6:b6:76:c4:e4:f4:
5d:ef:f5:1d:96:da:4d:3a:88:0a:96:be:fb:f2:56:
4e:dc:7a:e9:cf:1b:e2:f5:f9:b6:d5:fc:59:6c:f6:
a3:99:63:62:a1:a4:9b:0c:c7:27:06:60:b7:60:66:
47:4d:eb:21:ee:e6:2f:24:18:67:d7:3d:ac:71:96:
f7:2b:3e:e7:6d:3b:55:3d:4a:a1:d8:fa:b9:b5:e2:
57:2c:dc:2e:09:90:d1:ce:67:9c:6f:cb:74:0b:b4:
52:f9:b9:9e:7e:b0:d8:93:f9:35:f8:a6:37:a3:16:
d2:aa:9c:fb:b7:a5:59:49:a7:c6:80:ab:e7:45:17:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0B:7A:20:98:6A:01:C5:E8:FB:BF:F8:EE:85:FB:72:8F:40:43:6C
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:c000::/36
2a09:54c6:e000::/36
Signature Algorithm: sha256WithRSAEncryption
b3:95:51:39:8f:ab:fa:2d:29:de:f6:9c:41:28:7a:83:ab:ed:
15:06:d3:83:7f:44:ac:ad:76:da:d4:45:6f:88:74:20:16:f1:
7e:a7:4b:4b:e4:d2:25:44:c3:6d:81:27:79:93:55:b8:87:8e:
ad:72:8e:1f:02:c4:ef:22:07:b2:b5:3c:cb:24:df:21:fb:9c:
11:e2:2e:f9:eb:3d:e9:d1:f7:74:ea:df:e9:19:b0:7a:2c:05:
c9:2d:f2:bc:dd:d1:15:ae:03:e3:98:0c:cd:40:65:f3:1a:57:
0b:55:9a:68:3f:5f:d4:f3:98:63:45:11:ef:33:98:16:3b:6c:
2b:3c:9e:b1:c9:96:7e:0d:5e:05:f6:eb:cc:ea:70:55:03:e9:
20:29:ab:1d:f4:85:3c:23:4f:24:c1:1f:8f:fa:92:93:c6:19:
5b:74:39:83:3b:80:c9:7e:48:ef:98:18:71:56:bc:0d:d9:03:
82:2b:28:f2:ad:23:52:d4:b7:7a:dd:56:fb:1e:f9:51:68:62:
c9:4e:2a:9a:71:b9:34:ab:0a:ab:63:ea:1f:3a:ef:b9:d4:20:
82:ce:3d:c1:ca:55:80:c2:03:2f:49:b8:60:7c:b7:24:3b:fa:
70:2d:d8:fc:ed:cd:2b:24:07:f2:a9:d3:b8:54:70:a5:62:c4:
ad:b3:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:00:52 2025 by rpki-client