Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214223.roa
File: AS214223.roa (raw, json)
Hash identifier: CTFQ6S3eotvgIVtho8a0oX8QPxJUjycTiW8awqk/jsc=
Subject key identifier: 67:6D:47:87:98:E0:2F:A8:41:31:36:4B:AE:2B:C0:05:4A:88:1F:8A
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 463A72C55E06BAA38BD24F7BE89926C60DAABC94
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214223.roa
Signing time: Wed 02 Jul 2025 19:33:05 +0000
ROA not before: Wed 02 Jul 2025 19:28:05 +0000
ROA not after: Wed 01 Jul 2026 19:33:05 +0000
asID: 214223
IP address blocks: 2a05:dfc3:fa00::/40 maxlen: 48
2a0a:6044:6400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3a:72:c5:5e:06:ba:a3:8b:d2:4f:7b:e8:99:26:c6:0d:aa:bc:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:05 2025 GMT
Not After : Jul 1 19:33:05 2026 GMT
Subject: CN=676D478798E02FA84131364BAE2BC0054A881F8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:c6:f0:24:19:ab:49:ac:f0:17:1d:8e:5d:
a7:00:2b:47:65:64:ae:57:d8:3f:08:57:b6:95:f6:
17:64:d8:26:5f:1d:fd:e8:a3:54:c4:7e:99:70:98:
bc:7e:2b:52:77:ef:76:24:10:e7:52:04:9f:cd:53:
f2:6a:39:96:b3:37:3e:fa:06:f4:7e:6c:09:a1:fc:
3d:32:0a:9e:8d:5d:ea:ab:63:ff:01:54:9b:bb:7d:
0c:5c:00:e0:b6:a6:92:7b:06:fb:24:0b:d9:47:2c:
e3:ce:16:28:6b:fd:4d:6f:a8:40:e4:ba:c0:a6:3b:
19:b0:8a:a9:dc:f3:29:b7:a0:87:2f:6f:ac:a0:47:
76:bd:e2:fe:f3:11:60:91:ad:74:ea:77:17:f6:09:
cd:7d:d5:9d:99:8d:44:16:8e:1e:20:22:86:98:5b:
a5:5e:ab:41:c6:bc:10:1c:ed:ea:cd:21:67:d0:80:
33:5e:3b:a5:ad:ee:d0:9d:05:53:7f:b5:c6:e1:91:
f4:c9:00:a4:2b:ea:d5:e5:be:2b:54:4d:64:bd:cf:
74:9f:04:8c:45:5d:68:0d:05:11:d2:b7:a5:17:a5:
47:ae:12:30:20:2a:bb:61:f2:a7:a3:2d:ba:9d:14:
7b:77:7d:f3:46:9a:f1:1d:cc:b1:13:b7:fb:74:c2:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:47:87:98:E0:2F:A8:41:31:36:4B:AE:2B:C0:05:4A:88:1F:8A
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fa00::/40
2a0a:6044:6400::/40
Signature Algorithm: sha256WithRSAEncryption
90:d6:b5:40:b6:ca:14:27:c9:3e:bc:c8:d0:4c:f7:7b:1c:28:
7d:d4:ff:67:74:6c:aa:3b:4a:73:be:5a:77:ac:0e:4e:60:8b:
58:42:0a:b5:6f:7c:c9:5f:f9:73:d3:05:d1:c2:28:fb:76:62:
ad:cb:58:b9:85:f7:ce:fd:5d:a4:e1:01:a6:62:27:42:38:90:
69:59:6a:2b:90:8b:c1:65:61:49:94:d4:8c:e3:9d:b2:cb:f0:
0f:a0:1c:d4:2d:75:81:3e:50:14:c6:09:19:39:48:83:61:8c:
af:2f:61:ed:eb:16:4e:96:80:13:34:bd:c8:40:c4:96:dc:c7:
6f:00:5b:e8:a3:2f:59:9f:0b:df:64:4d:ee:8d:df:e5:0a:5d:
3b:c2:1b:5d:3c:80:6d:a6:90:e8:03:3e:d0:50:a5:6c:4c:71:
d5:d9:28:c8:a2:f9:d4:76:d5:42:6c:de:be:e3:94:2e:2d:c2:
e5:78:a6:f7:87:a4:16:2e:b2:20:26:c7:a5:24:a2:c2:0f:26:
da:c4:3b:e1:c3:72:b9:02:26:d6:8b:8f:79:2c:e0:1b:3d:d0:
63:94:2e:9c:d0:ab:92:c2:49:60:89:c8:ed:8b:af:61:5b:90:
6d:c6:c7:f4:16:ae:a9:f2:6a:22:8a:60:65:20:1b:75:c9:33:
e1:7a:1a:27
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIURjpyxV4GuqOL0k976Jkmxg2qvJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VERDg1NDkzNjA4RkU5QUFFNTQ2Qjg0Nzk2RUMwRjE5
N0VGMkMwMjAeFw0yNTA3MDIxOTI4MDVaFw0yNjA3MDExOTMzMDVaMDMxMTAvBgNV
BAMTKDY3NkQ0Nzg3OThFMDJGQTg0MTMxMzY0QkFFMkJDMDA1NEE4ODFGOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqQsbwJBmrSazwFx2OXacAK0dl
ZK5X2D8IV7aV9hdk2CZfHf3oo1TEfplwmLx+K1J373YkEOdSBJ/NU/JqOZazNz76
BvR+bAmh/D0yCp6NXeqrY/8BVJu7fQxcAOC2ppJ7BvskC9lHLOPOFihr/U1vqEDk
usCmOxmwiqnc8ym3oIcvb6ygR3a94v7zEWCRrXTqdxf2Cc191Z2ZjUQWjh4gIoaY
W6Veq0HGvBAc7erNIWfQgDNeO6Wt7tCdBVN/tcbhkfTJAKQr6tXlvitUTWS9z3Sf
BIxFXWgNBRHSt6UXpUeuEjAgKrth8qejLbqdFHt3ffNGmvEdzLETt/t0wkX9AgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUZ21Hh5jgL6hBMTZLrivABUqIH4owHwYDVR0j
BBgwFoAUft2FSTYI/pquVGuEeW7A8ZfvLAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMy83RUREODU0OTM2
MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNybDCBkwYIKwYBBQUHAQEE
gYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3Jl
cG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83RURE
ODU0OTM2MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS82OWY1NjVkNDNmYWQ0NTNkODgyZDFjMWFhNmIyOGMyMC8zL0FT
MjE0MjIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEH
AQH/BBowGDAWBAIAAjAQAwYAKgXfw/oDBgAqCmBEZDANBgkqhkiG9w0BAQsFAAOC
AQEAkNa1QLbKFCfJPrzI0Ez3exwofdT/Z3RsqjtKc75ad6wOTmCLWEIKtW98yV/5
c9MF0cIo+3ZirctYuYX3zv1dpOEBpmInQjiQaVlqK5CLwWVhSZTUjOOdssvwD6Ac
1C11gT5QFMYJGTlIg2GMry9h7esWTpaAEzS9yEDEltzHbwBb6KMvWZ8L32RN7o3f
5QpdO8IbXTyAbaaQ6AM+0FClbExx1dkoyKL51HbVQmzevuOULi3C5Xim94ekFi6y
ICbHpSSiwg8m2sQ74cNyuQIm1ouPeSzgGz3QY5QunNCrksJJYInI7YuvYVuQbcbH
9BauqfJqIopgZSAbdckz4XoaJw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:03:24 2025 by rpki-client