Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214731.roa
File: AS214731.roa (raw, json)
Hash identifier: JvIk2GfXJviUbxWz7Ol5bbl2RQkd7Z9FILnatzZkHbc=
Subject key identifier: BD:0A:CB:73:28:2A:FF:BB:53:2B:E4:84:CE:3F:46:A2:69:69:39:34
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 49482A688F9BBE9E08F142B987A640B1B0BFA908
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214731.roa
Signing time: Wed 02 Jul 2025 19:33:05 +0000
ROA not before: Wed 02 Jul 2025 19:28:05 +0000
ROA not after: Wed 01 Jul 2026 19:33:05 +0000
asID: 214731
IP address blocks: 2a06:1281:4000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:48:2a:68:8f:9b:be:9e:08:f1:42:b9:87:a6:40:b1:b0:bf:a9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:05 2025 GMT
Not After : Jul 1 19:33:05 2026 GMT
Subject: CN=BD0ACB73282AFFBB532BE484CE3F46A269693934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:ef:b5:e4:0a:b3:4b:94:20:f8:d0:05:99:
e0:28:22:90:fc:99:ec:2f:6a:61:18:f3:1e:42:7c:
fd:22:7d:01:0e:dd:f1:a0:5a:83:02:51:81:85:a0:
19:a8:97:a6:9c:b0:f1:25:15:31:5f:87:34:ab:33:
60:03:02:7f:45:78:bc:3c:95:85:07:ee:2c:5f:d3:
90:e9:92:26:88:c5:8c:c5:f6:dd:e4:30:10:8f:98:
65:ef:ab:e0:13:91:57:5f:1d:92:c2:74:b5:2f:ff:
09:14:b7:e6:06:34:72:9d:eb:68:76:1e:ad:fd:11:
8c:b7:e1:d0:bc:f6:06:1c:bf:71:27:7b:9f:cc:5b:
4b:68:6a:e7:fd:49:d4:19:dc:fc:84:5f:43:92:1f:
6b:0c:16:54:fb:f3:63:de:21:79:52:b3:b0:b2:74:
f8:12:ac:6a:ca:d5:94:11:81:f9:1c:93:64:5d:4f:
47:c2:63:10:27:8a:b2:d0:c4:f0:cc:5c:88:3a:5c:
da:e9:37:a1:d8:62:7c:e3:d9:5f:33:39:bf:18:e6:
65:0b:e4:29:4b:ec:2c:ca:48:c4:d3:15:a8:9c:04:
ec:94:e1:da:d7:10:79:2f:c9:aa:af:94:8a:6e:b6:
5c:5c:6c:06:3f:c9:2d:6f:b0:43:15:65:51:77:2d:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0A:CB:73:28:2A:FF:BB:53:2B:E4:84:CE:3F:46:A2:69:69:39:34
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:4000::/36
Signature Algorithm: sha256WithRSAEncryption
c5:42:36:5d:e2:1c:db:eb:94:47:f6:61:bc:68:f0:7e:4d:72:
37:8c:59:bc:bc:2d:46:68:3f:09:df:19:49:28:bd:e9:3f:44:
54:3f:d0:58:21:b6:ec:27:0a:d7:4b:f6:53:78:22:80:0f:c5:
b1:5f:fb:fa:cc:e7:ee:2c:dc:3c:08:20:0d:5b:f7:6a:3e:20:
77:10:03:f5:0a:52:4a:2c:c7:c2:3e:54:13:c0:c5:ff:a8:f1:
78:0e:40:6f:51:d4:f8:42:0f:da:8f:67:34:08:ed:2f:29:85:
3e:ca:73:fb:e3:f1:51:ea:b8:ea:c9:41:4e:84:89:74:5a:04:
e4:43:dd:76:bb:8d:6b:d7:b5:61:d2:f5:8f:9b:f8:99:01:91:
4a:7e:3e:66:79:8d:8b:c1:44:db:7c:cf:89:39:4c:25:ed:67:
77:c4:7a:fb:6b:fa:0a:55:e3:17:92:2b:7d:87:41:5e:c2:ba:
14:e6:fe:61:13:3e:08:c8:3b:9c:07:fb:53:f8:68:fe:3e:af:
8b:b4:72:1d:cd:b0:7e:af:73:34:4a:d8:20:cf:a1:42:bd:50:
97:f4:91:3a:b1:8d:4d:fb:2c:42:05:44:ff:87:9b:e4:28:56:
56:b4:4c:3e:96:4c:10:be:73:c6:d4:76:65:60:2e:53:cc:08:
e7:8a:1a:e9
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUSUgqaI+bvp4I8UK5h6ZAsbC/qQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VERDg1NDkzNjA4RkU5QUFFNTQ2Qjg0Nzk2RUMwRjE5
N0VGMkMwMjAeFw0yNTA3MDIxOTI4MDVaFw0yNjA3MDExOTMzMDVaMDMxMTAvBgNV
BAMTKEJEMEFDQjczMjgyQUZGQkI1MzJCRTQ4NENFM0Y0NkEyNjk2OTM5MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ku+15AqzS5Qg+NAFmeAoIpD8
mewvamEY8x5CfP0ifQEO3fGgWoMCUYGFoBmol6acsPElFTFfhzSrM2ADAn9FeLw8
lYUH7ixf05DpkiaIxYzF9t3kMBCPmGXvq+ATkVdfHZLCdLUv/wkUt+YGNHKd62h2
Hq39EYy34dC89gYcv3Ene5/MW0toauf9SdQZ3PyEX0OSH2sMFlT782PeIXlSs7Cy
dPgSrGrK1ZQRgfkck2RdT0fCYxAnirLQxPDMXIg6XNrpN6HYYnzj2V8zOb8Y5mUL
5ClL7CzKSMTTFaicBOyU4drXEHkvyaqvlIputlxcbAY/yS1vsEMVZVF3LfkhAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUvQrLcygq/7tTK+SEzj9GomlpOTQwHwYDVR0j
BBgwFoAUft2FSTYI/pquVGuEeW7A8ZfvLAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMy83RUREODU0OTM2
MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNybDCBkwYIKwYBBQUHAQEE
gYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3Jl
cG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83RURE
ODU0OTM2MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS82OWY1NjVkNDNmYWQ0NTNkODgyZDFjMWFhNmIyOGMyMC8zL0FT
MjE0NzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKgYSgUAwDQYJKoZIhvcNAQELBQADggEBAMVCNl3i
HNvrlEf2Ybxo8H5NcjeMWby8LUZoPwnfGUkovek/RFQ/0FghtuwnCtdL9lN4IoAP
xbFf+/rM5+4s3DwIIA1b92o+IHcQA/UKUkosx8I+VBPAxf+o8XgOQG9R1PhCD9qP
ZzQI7S8phT7Kc/vj8VHquOrJQU6EiXRaBORD3Xa7jWvXtWHS9Y+b+JkBkUp+PmZ5
jYvBRNt8z4k5TCXtZ3fEevtr+gpV4xeSK32HQV7CuhTm/mETPgjIO5wH+1P4aP4+
r4u0ch3NsH6vczRK2CDPoUK9UJf0kTqxjU37LEIFRP+Hm+QoVla0TD6WTBC+c8bU
dmVgLlPMCOeKGuk=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:03:21 2025 by rpki-client