Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214323.roa
File: AS214323.roa (raw, json)
Hash identifier: BoB5b+XoaBaPNpdY5HHQJEM0IDvbpOGB9/m6p0tz+y4=
Subject key identifier: 9F:AF:32:DD:B6:DF:11:17:1A:B0:9A:54:6B:C8:39:3C:12:B8:51:05
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 0E0EF74465370692F485EFE3DD6BCBE1747A05E1
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214323.roa
Signing time: Wed 02 Jul 2025 19:33:05 +0000
ROA not before: Wed 02 Jul 2025 19:28:05 +0000
ROA not after: Wed 01 Jul 2026 19:33:05 +0000
asID: 214323
IP address blocks: 2a0a:6044:7900::/48 maxlen: 48
2a0a:6044:7901::/48 maxlen: 48
2a0a:6044:7902::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:0e:f7:44:65:37:06:92:f4:85:ef:e3:dd:6b:cb:e1:74:7a:05:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:05 2025 GMT
Not After : Jul 1 19:33:05 2026 GMT
Subject: CN=9FAF32DDB6DF11171AB09A546BC8393C12B85105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:45:84:6f:53:07:b7:85:06:4f:6b:8a:ee:
3d:13:e8:28:d7:17:65:49:92:ef:4d:f8:6e:76:77:
2e:2a:18:b6:3f:21:a8:88:9b:7b:5e:39:c9:e7:ad:
f6:0e:1a:37:b9:4a:6c:ef:c4:f1:b6:a2:90:13:ff:
b6:a8:43:87:63:a6:09:46:56:7e:27:70:b2:44:f9:
a8:02:1b:2b:fb:98:74:7b:ca:02:f2:e4:e7:7c:cb:
6e:23:61:12:70:fd:79:b7:9f:06:93:56:ab:84:76:
53:38:0f:df:02:8d:9c:cb:4e:7b:5e:83:be:10:40:
3b:b8:75:e3:fa:69:5c:cd:01:f4:89:83:48:76:95:
a6:0a:b0:cb:88:a0:31:fa:41:ac:8e:dd:df:94:1a:
66:8e:77:78:0c:c7:f9:32:57:26:0d:dc:b8:be:a1:
fa:ad:40:61:6f:94:18:e7:8a:1d:23:7e:4f:85:b3:
d3:e6:e4:23:90:17:9f:44:41:d7:60:89:bb:b8:ee:
d3:9c:da:6e:31:cc:4f:51:b3:9b:49:56:19:ca:c2:
54:9e:31:4f:d3:79:82:d4:73:83:75:9a:e7:2e:ec:
fa:18:f7:5e:1b:e5:33:55:d1:80:33:3b:78:cc:ae:
4d:68:95:ab:1e:94:26:7e:ef:c9:7b:60:d1:6d:73:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AF:32:DD:B6:DF:11:17:1A:B0:9A:54:6B:C8:39:3C:12:B8:51:05
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7900::-2a0a:6044:7902:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
78:1f:ba:eb:2d:82:fc:19:21:96:6d:0b:bf:5a:81:5d:ac:4b:
ea:cb:15:f5:ff:bb:1a:c2:32:7b:95:8c:a3:f7:65:bd:8e:cf:
dc:69:3f:81:91:6f:62:92:09:e2:43:11:b2:f0:36:ea:9c:aa:
87:9c:9d:09:be:bb:85:13:13:c8:0a:bb:61:60:f5:25:c7:dc:
e9:ba:55:c1:ad:96:e7:e3:60:7f:f4:0e:24:c8:d8:aa:4d:68:
85:cd:12:65:54:ee:df:4e:bc:13:0a:ef:98:17:84:1f:d7:1f:
6b:22:dc:f9:2e:9a:d1:05:ba:30:b0:23:8e:d2:7a:8a:4d:71:
74:cc:30:ef:73:91:d2:d9:ff:3b:6f:04:01:c9:95:7a:18:eb:
1e:b0:13:b3:a9:64:36:db:7c:ca:0f:e1:d0:9d:c0:11:8c:95:
ef:6b:11:cf:66:94:1c:ab:35:84:df:59:cf:2e:67:5d:04:d4:
a7:c5:77:ea:28:ea:70:33:b3:6a:b1:75:2f:05:3d:f8:1a:31:
72:cc:35:e7:2b:4a:90:9b:89:ce:28:2e:2a:da:86:b3:51:98:
ce:f4:cf:46:a2:3b:17:81:2d:16:05:eb:aa:21:5e:2d:5e:f1:
b1:10:fd:15:69:44:7d:5c:a2:4a:80:fb:dc:34:7b:f5:9a:c6:
11:ce:dc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:00:27 2025 by rpki-client