Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214757.roa
File: AS214757.roa (raw, json)
Hash identifier: RWsBAAKuz9HJhV+EyVdRG++kGXo9iF/pcfvq0RDO1Zw=
Subject key identifier: 4A:CA:9D:2E:F6:12:5D:BC:F2:F8:C5:97:78:44:E5:19:2B:E1:AD:FD
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 7F6C73684F733B67B0490FBC223355F0B7A87C48
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214757.roa
Signing time: Wed 02 Jul 2025 19:33:07 +0000
ROA not before: Wed 02 Jul 2025 19:28:07 +0000
ROA not after: Wed 01 Jul 2026 19:33:07 +0000
asID: 214757
IP address blocks: 2a05:dfc3:f800::/40 maxlen: 48
2a0a:6044:a100::/40 maxlen: 48
2a0a:6044:ac70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:6c:73:68:4f:73:3b:67:b0:49:0f:bc:22:33:55:f0:b7:a8:7c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:07 2025 GMT
Not After : Jul 1 19:33:07 2026 GMT
Subject: CN=4ACA9D2EF6125DBCF2F8C5977844E5192BE1ADFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:dc:57:20:be:b0:c7:2b:9c:a1:28:a8:37:
ac:58:78:11:2c:30:80:28:3b:6e:91:38:02:1d:8d:
59:dd:d2:91:fe:6d:49:3e:28:0b:2c:db:27:6a:a5:
85:b2:69:d6:58:f5:79:86:f5:d8:30:7e:8c:8d:26:
a3:9d:66:92:f0:7f:12:15:36:a1:9b:21:c5:92:c0:
97:38:a5:e1:9d:16:39:ab:56:fe:18:a9:38:2c:35:
7e:fd:dc:00:64:d0:85:09:f2:cc:39:af:77:d9:7b:
2d:53:ad:70:7b:c0:ce:72:aa:db:d2:7b:05:fd:d1:
6c:e2:52:7b:b3:c9:b5:01:ca:14:b6:93:b0:87:cd:
b1:ae:56:42:31:19:ec:44:cb:1c:ac:a8:0b:68:0e:
87:71:d7:74:c0:7c:d7:bb:ff:38:02:43:7a:14:d8:
c1:a0:bc:73:2c:35:1a:8f:cc:c4:ec:b3:0b:d1:45:
e0:48:c8:98:e1:d9:9b:50:23:14:d5:a2:cb:c7:6e:
98:aa:16:30:96:dc:72:ee:ae:d5:4a:ac:68:4b:d2:
c5:2d:01:04:e7:79:49:a5:b4:78:ef:e6:bc:07:f5:
53:1d:27:f2:ad:29:0f:0b:dd:13:cd:fb:8d:a3:fc:
c6:52:15:0d:51:72:26:49:2e:fb:37:92:f7:24:73:
46:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CA:9D:2E:F6:12:5D:BC:F2:F8:C5:97:78:44:E5:19:2B:E1:AD:FD
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214757.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f800::/40
2a0a:6044:a100::/40
2a0a:6044:ac70::/44
Signature Algorithm: sha256WithRSAEncryption
2c:2c:b0:40:99:f8:df:7e:18:8c:c9:3d:71:70:c3:4a:bd:6c:
43:6b:cc:89:6b:02:ec:70:d2:3a:ec:a2:fc:ee:0a:28:c2:87:
fe:ac:8f:7d:75:1d:a3:e2:14:58:72:9e:71:a5:06:dc:24:1f:
fd:c6:c5:9a:d1:8a:ef:84:fc:fa:61:9e:ad:d5:f2:84:71:cf:
25:5f:de:16:70:06:37:29:ba:de:ad:7a:de:f0:6d:05:02:55:
19:c8:85:34:e9:60:f6:22:f6:49:16:7c:9e:f6:c6:22:72:eb:
81:1f:3e:57:af:a5:e2:07:b5:02:2c:d8:cb:59:75:0a:96:9a:
d2:57:66:b2:d4:7d:f9:98:b0:fd:74:ed:f9:4b:6e:9b:8e:93:
21:5b:b6:5e:cc:c3:06:4c:7d:5f:7c:86:f6:70:64:74:25:08:
6b:b8:37:4a:fe:5b:f7:ec:e2:e0:5d:a3:84:73:4d:c0:1c:8c:
74:f7:9d:f4:c7:f6:ba:21:c0:80:cc:74:71:29:ec:61:8f:5e:
49:85:37:1b:9b:e6:60:21:73:74:8b:b0:7f:99:cf:56:29:0a:
7c:1a:3a:e5:53:24:07:c6:90:10:46:39:29:9d:75:13:2b:4b:
2a:0b:9d:8b:b3:ee:f0:4f:66:3f:8a:0d:96:a3:6f:c8:0a:15:
61:11:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:10:12 2025 by rpki-client