Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214203.roa
File: AS214203.roa (raw, json)
Hash identifier: /je7VMJ9F/4XFACmod/m2xKxKh4geS/LKVJWm6wZxjY=
Subject key identifier: 2E:22:01:EE:1F:00:FC:86:07:67:90:23:C6:69:EF:A4:61:54:03:6F
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 1061B8901297809E87AD8361D3E47F93612C8C78
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214203.roa
Signing time: Wed 02 Jul 2025 19:33:12 +0000
ROA not before: Wed 02 Jul 2025 19:28:12 +0000
ROA not after: Wed 01 Jul 2026 19:33:12 +0000
asID: 214203
IP address blocks: 2a05:dfc3:ff00::/40 maxlen: 48
2a0a:6044:6700::/40 maxlen: 48
2a0a:6044:7a00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:61:b8:90:12:97:80:9e:87:ad:83:61:d3:e4:7f:93:61:2c:8c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:12 2025 GMT
Not After : Jul 1 19:33:12 2026 GMT
Subject: CN=2E2201EE1F00FC8607679023C669EFA46154036F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:44:76:2d:52:6b:68:36:a8:79:5e:cb:e6:
2e:9e:8f:b7:55:ba:6b:52:bd:be:8e:0c:c2:aa:19:
64:f1:a4:f6:a3:e9:0b:08:35:fc:ce:7b:84:13:da:
1c:5d:b7:84:2c:8d:12:ba:64:82:b5:94:62:26:53:
f6:70:09:45:a0:10:66:b6:02:7f:0a:95:16:c3:25:
d6:bc:52:3f:c8:6c:c7:55:e0:e7:0b:2a:0c:f5:78:
a4:9a:02:a8:0f:fd:b5:f4:95:e2:79:34:ee:7e:de:
48:49:2b:0e:c6:f2:57:01:0e:5c:0b:22:8b:c5:15:
e7:d8:10:3f:b4:07:a9:1c:d8:6a:22:b7:62:5b:2f:
52:2f:85:af:19:1a:b1:c8:91:50:13:35:c1:27:e7:
c7:60:3e:d2:62:84:c4:09:83:6c:17:a4:b9:fb:f9:
fe:61:62:fa:3a:cf:d1:6b:91:c1:03:64:0d:65:a7:
ae:cd:c4:ab:86:55:b9:b5:3a:d7:78:f4:16:84:76:
26:86:a3:ac:6a:ab:ae:6d:5b:93:99:83:e6:ef:84:
56:75:e0:f7:05:b7:94:83:6a:6a:e3:a2:d8:1b:d8:
66:d1:bb:36:fe:07:13:0f:a2:32:56:e2:fc:ed:03:
e1:3f:5f:ad:75:41:69:38:2f:fd:5d:95:8f:8a:4e:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:22:01:EE:1F:00:FC:86:07:67:90:23:C6:69:EF:A4:61:54:03:6F
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:ff00::/40
2a0a:6044:6700::/40
2a0a:6044:7a00::/40
Signature Algorithm: sha256WithRSAEncryption
70:e6:3b:27:f1:ed:97:30:03:07:5e:30:bb:3d:8c:f7:ff:8c:
56:e9:bc:87:c5:47:8c:53:f9:4d:90:e8:91:39:50:91:e3:2f:
1e:f6:69:98:e5:09:b7:40:6f:1f:40:57:1c:9c:6a:2a:08:46:
12:fb:a7:69:45:c3:32:cf:ef:d6:47:b5:3d:1e:a9:8d:f0:28:
2b:6f:27:b5:8c:c6:9e:66:b8:bc:49:da:af:a4:8d:ff:2e:96:
90:d9:60:9c:7e:b7:7d:64:41:3a:c0:11:6b:88:c0:73:a1:c0:
fe:7d:34:c9:fa:74:34:ac:a5:a1:c5:06:99:5d:46:ee:ea:66:
aa:4d:a3:e5:82:67:f7:89:ba:fc:94:8c:db:2b:0e:f0:c8:c4:
e2:e2:86:4b:6c:73:f8:51:d8:d8:1c:1b:73:e6:34:ae:17:84:
75:dc:f4:3f:a7:b9:a0:af:6a:08:a3:59:5b:80:f5:c6:52:fe:
47:3d:ff:ba:3c:64:9b:ad:cc:67:35:7e:f8:24:5d:f9:c2:26:
7e:8a:81:50:24:42:5d:7c:0b:82:af:1f:3f:d3:5e:86:38:57:
05:3d:1e:a9:9b:b2:16:bc:22:f6:ad:42:22:4e:af:13:a3:67:
de:dc:83:a0:bd:ee:d3:f0:7e:d3:e6:99:81:8d:1e:5a:ae:6c:
9b:14:f2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:40:20 2025 by rpki-client