Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214675.roa
File: AS214675.roa (raw, json)
Hash identifier: rvZJK++N4YLKs9DDigJprm6WYu7wUQBzJsaMFmjO2qk=
Subject key identifier: 8C:C2:D9:F8:47:8D:0C:38:07:01:2D:58:88:60:D5:FC:7A:38:00:9E
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 6665A5A85D3C91EECFA42600CE369D7EF3DB06
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214675.roa
Signing time: Wed 02 Jul 2025 19:33:12 +0000
ROA not before: Wed 02 Jul 2025 19:28:12 +0000
ROA not after: Wed 01 Jul 2026 19:33:12 +0000
asID: 214675
IP address blocks: 2a0a:6044:aca0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:65:a5:a8:5d:3c:91:ee:cf:a4:26:00:ce:36:9d:7e:f3:db:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:12 2025 GMT
Not After : Jul 1 19:33:12 2026 GMT
Subject: CN=8CC2D9F8478D0C3807012D588860D5FC7A38009E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:d1:5b:4b:4a:2b:88:bc:73:1f:af:ad:21:
b3:92:da:1b:13:e6:9f:ec:d7:58:e5:86:01:d4:59:
84:cb:18:81:3f:dd:11:db:9d:4b:2b:a6:96:62:8b:
b4:ae:90:b8:b0:1c:ee:7d:cf:c4:6e:11:67:2f:cf:
1c:81:a9:cc:7e:4f:21:f6:6f:6e:e2:ab:b7:19:10:
42:ea:af:e2:17:d8:b7:0c:f0:ea:0e:15:69:a1:a9:
53:f8:cb:18:26:06:4c:3c:3c:79:17:6a:7b:c4:fc:
39:ef:c6:ee:14:1a:93:70:6c:4b:ac:47:a0:a2:7e:
54:9c:83:d2:e1:0b:53:bf:11:63:a0:e4:e1:2b:a5:
24:a6:c6:d1:78:d7:ac:23:d6:f2:02:07:e8:17:60:
89:c6:e8:68:b5:e8:be:27:24:54:76:f3:15:6c:7a:
18:ed:0f:72:05:00:d1:e3:26:ff:51:21:19:64:96:
dc:b0:2f:62:4f:c4:8e:3a:13:8e:72:d2:4f:1f:87:
84:72:a0:e8:d1:90:37:ca:58:a4:53:6d:71:d3:9d:
ea:e8:a5:21:c1:7c:59:37:f4:da:79:15:61:ae:7c:
68:e7:43:fd:c4:90:3d:75:77:c2:af:0d:48:fc:3b:
ba:b9:f9:5b:f8:25:99:72:f4:ac:8b:48:a6:20:19:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C2:D9:F8:47:8D:0C:38:07:01:2D:58:88:60:D5:FC:7A:38:00:9E
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214675.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:aca0::/44
Signature Algorithm: sha256WithRSAEncryption
47:22:a3:64:d6:00:65:50:0c:32:eb:c3:0f:8c:ac:62:36:3d:
1e:15:0c:9f:56:2a:28:df:58:5f:01:5e:f0:f4:57:00:2a:9b:
e7:70:03:d7:9e:d6:b7:81:5d:2e:f1:e6:3e:83:99:89:db:2d:
98:36:eb:48:fb:6e:41:48:d6:11:a0:05:69:eb:26:1f:32:b1:
f2:a9:5d:11:e4:50:22:c9:5e:aa:ac:38:1a:a3:54:1f:41:69:
ef:9a:d8:b1:0e:f7:c8:f9:82:27:6f:7e:4a:e1:94:cd:2a:2c:
7a:4f:0a:57:72:49:53:80:58:3e:b7:b6:f9:fb:21:6e:59:60:
4c:03:40:54:03:29:b8:46:b2:23:c1:52:35:6e:f3:3e:05:86:
6b:b0:72:24:59:db:dc:7d:2d:29:c6:f0:7c:65:df:a9:e7:47:
39:b4:e7:69:e7:a4:0c:79:ff:80:8a:cb:7e:cd:f4:e2:da:b8:
7c:09:0b:3e:20:ec:7b:3c:e0:87:68:eb:54:ae:ff:ff:c2:bf:
01:b0:30:c2:ec:2e:bd:2f:13:3d:34:5b:07:e1:a3:29:f5:0a:
9b:07:37:5d:13:19:d8:46:15:91:84:c7:bd:28:37:73:0f:f3:
df:f7:d2:ed:c7:a0:80:c6:a5:fa:b5:2d:a4:b6:99:3a:6d:8a:
8a:f9:ed:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:00:25 2025 by rpki-client