Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214299.roa
File: AS214299.roa (raw, json)
Hash identifier: 4UtK94eBcpjKO38Jp3sVnf9UAlvUtUN9ZP2pi412guk=
Subject key identifier: 64:63:99:F0:62:3C:76:63:EA:60:62:C2:A8:4A:83:6E:67:A7:B7:DD
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 27212E5F5333E1ED8CED3966CB63D0770B1ADFE8
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214299.roa
Signing time: Wed 02 Jul 2025 19:33:06 +0000
ROA not before: Wed 02 Jul 2025 19:28:06 +0000
ROA not after: Wed 01 Jul 2026 19:33:06 +0000
asID: 214299
IP address blocks: 2a05:dfc3:fd40::/44 maxlen: 52
2a05:dfc3:fd40::/48 maxlen: 48
2a09:54c7:1000::/36 maxlen: 48
2a09:54c7:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:21:2e:5f:53:33:e1:ed:8c:ed:39:66:cb:63:d0:77:0b:1a:df:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:06 2025 GMT
Not After : Jul 1 19:33:06 2026 GMT
Subject: CN=646399F0623C7663EA6062C2A84A836E67A7B7DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c2:0d:3d:8d:ca:32:3d:1c:b5:76:45:be:89:
e0:b3:73:2d:f6:21:1a:9b:fc:32:97:7a:d7:be:e9:
7a:3b:f7:52:36:7c:49:5f:64:d7:4c:dc:95:cc:66:
2d:d7:75:25:4e:67:a4:b6:98:c0:d5:1b:a1:c8:f4:
80:e6:e5:48:80:18:16:8f:83:81:b1:6f:f0:2a:6b:
de:69:09:9e:cc:ab:3c:2b:3a:26:d1:6f:df:57:8f:
8e:7d:73:dc:c3:c7:ea:b0:2e:d0:0c:57:1e:3c:1c:
0e:19:7d:6f:b4:1b:e1:04:c7:32:5d:ff:d4:d1:02:
37:3e:ef:d6:20:fe:31:17:4f:e7:a7:cc:b6:98:72:
7a:ba:c0:83:bf:83:d6:b3:d6:8c:e3:d0:cd:18:79:
1b:bc:14:3a:2b:7c:7b:9f:0e:65:f7:da:d6:91:2d:
fa:bd:30:11:c1:8e:b5:71:80:72:72:8c:18:27:08:
e1:c9:2c:c9:1e:82:48:89:d1:60:73:fc:c1:63:58:
43:ee:b6:58:3b:45:66:f9:d5:d4:4b:1c:36:31:16:
1a:aa:cd:f8:31:fd:47:66:8f:5a:f7:a8:4d:8a:70:
c3:5e:60:e4:ab:16:14:99:fa:91:21:da:0e:b6:39:
df:c7:38:be:10:b2:4e:ce:e6:d0:95:d3:27:fc:11:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:63:99:F0:62:3C:76:63:EA:60:62:C2:A8:4A:83:6E:67:A7:B7:DD
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd40::/44
2a09:54c7:1000::/36
Signature Algorithm: sha256WithRSAEncryption
28:1b:7d:17:65:d7:c2:4d:6b:38:4d:05:85:c3:b7:4d:37:3c:
c3:91:19:4f:f2:4e:54:2d:68:c5:59:60:3b:0d:7f:d0:e8:87:
1c:bc:ef:ba:43:2c:e8:ad:5f:d2:d6:ef:9b:2c:31:78:2c:f4:
da:11:52:c0:3a:52:8e:11:04:2d:5e:01:b2:ba:8d:95:ba:9e:
ee:03:24:ef:8b:1f:ee:b2:c5:e1:23:6a:04:11:93:aa:b5:09:
59:76:9a:44:ce:6e:30:de:98:38:64:76:83:9f:f8:e6:8d:01:
20:6c:84:30:d9:25:03:22:8c:d2:1b:6c:bf:2b:e5:f5:57:b2:
5c:33:55:a0:27:19:bc:28:c0:45:f0:30:7b:d9:23:34:de:4d:
52:9a:14:c0:29:65:38:54:07:43:b7:10:d7:47:f8:0d:15:28:
eb:35:16:0b:05:c2:c1:59:41:e5:bb:3c:47:2f:a7:1d:bb:e0:
cd:b3:18:9b:58:bd:8b:f5:5a:a0:72:2b:e4:79:0b:cb:af:d0:
46:c0:9b:71:9b:f8:4e:32:56:72:a2:d3:18:aa:f2:41:06:db:
83:87:09:ff:fd:0a:c6:d4:5c:3c:70:52:d3:ff:2f:d1:30:4b:
04:c7:86:e0:19:b6:28:8e:09:41:70:8d:9a:9f:2e:f2:d8:28:
98:3a:08:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:08:56 2025 by rpki-client