Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215039.roa
File: AS215039.roa (raw, json)
Hash identifier: c+TYKFaeP3K2FbS+Khb+ZqPydm6FEK5Ofhur/b6U/Eo=
Subject key identifier: D7:8A:F0:96:E9:BB:AF:41:66:E6:6A:71:62:2F:01:FA:7E:7A:30:8A
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 4DC354BB92B2865DE95A72A0A45BC64F672B6006
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215039.roa
Signing time: Wed 02 Jul 2025 19:33:12 +0000
ROA not before: Wed 02 Jul 2025 19:28:12 +0000
ROA not after: Wed 01 Jul 2026 19:33:12 +0000
asID: 215039
IP address blocks: 2a0a:6044:ac50::/44 maxlen: 52
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c3:54:bb:92:b2:86:5d:e9:5a:72:a0:a4:5b:c6:4f:67:2b:60:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:12 2025 GMT
Not After : Jul 1 19:33:12 2026 GMT
Subject: CN=D78AF096E9BBAF4166E66A71622F01FA7E7A308A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:db:c6:df:9d:55:9c:43:e7:d9:eb:58:6c:
9e:33:85:a1:44:0a:f0:5c:50:2f:d6:05:71:28:0c:
56:e0:08:57:ce:a5:ef:12:db:e7:ed:c4:4a:d9:4d:
fb:bf:45:9a:20:fb:7f:a9:8e:bc:40:c8:10:c2:95:
47:16:c6:7e:81:8e:08:07:b6:ad:86:52:ea:48:aa:
72:20:69:78:83:73:d9:e6:ff:1d:f4:c5:04:72:4c:
21:46:3f:2c:ec:94:db:ef:67:a0:69:5e:38:54:18:
96:3e:d1:67:76:3d:86:5a:f1:df:38:73:bb:59:ea:
de:b8:0a:e9:41:35:92:67:22:06:54:cd:4d:b2:2e:
37:56:16:04:d4:59:c4:e1:4e:27:55:a1:37:ef:d8:
12:2d:5b:94:46:59:62:04:18:37:68:04:fe:1a:0e:
8d:ec:ba:ec:e8:09:d9:6e:ef:20:a3:39:6a:97:e9:
60:4b:b4:0d:40:8d:60:22:82:76:ad:9e:c4:3d:e5:
7c:0c:cf:57:e8:20:1b:b3:94:26:d6:4d:c3:0a:47:
77:3b:2c:b2:75:ae:c6:ad:ac:ef:35:37:32:5a:28:
ba:3f:95:b8:e8:a8:14:44:7f:ed:78:a4:52:da:0b:
b8:a1:ba:7c:ad:18:49:f5:8e:d5:8b:18:e8:e6:6e:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8A:F0:96:E9:BB:AF:41:66:E6:6A:71:62:2F:01:FA:7E:7A:30:8A
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:ac50::/44
Signature Algorithm: sha256WithRSAEncryption
83:bd:62:60:af:15:17:3e:3e:ef:a7:b7:a7:8f:e9:17:0c:49:
47:7d:12:ef:fd:2b:18:b8:0e:d4:49:1e:be:91:d6:0f:e8:75:
9a:01:46:c7:d9:1d:80:0a:4b:3d:ea:3b:f9:3b:e7:c2:59:40:
c9:0e:54:c6:1c:75:f7:56:03:2a:bb:4a:76:a5:36:08:01:5b:
44:da:99:2f:ea:4f:01:b4:cc:63:ef:4f:2e:d0:fe:2d:84:09:
53:ce:81:0c:83:87:c3:98:3e:ea:6f:04:e7:34:6e:77:99:11:
59:7b:6c:e7:13:1c:41:f1:51:1c:df:0e:2c:31:82:6f:b3:0a:
a9:15:07:96:b7:84:71:4e:05:f9:6f:e0:90:77:f5:cc:0f:16:
55:3b:f9:e6:aa:fa:12:03:7e:94:3f:0f:a7:d3:25:43:9a:ce:
f0:1a:75:81:91:f1:94:5a:93:96:bb:13:0e:f1:ea:d3:7c:0c:
23:c7:b3:49:b2:cd:53:46:b4:69:d7:d8:0e:1d:0a:dc:e2:4a:
70:46:05:0e:c0:3f:9f:59:fc:5f:a4:f8:6a:fb:fa:c4:44:ca:
1b:9c:c2:50:65:73:77:98:b2:d4:45:e4:3e:f2:bf:a9:c1:f9:
08:8b:84:51:0d:af:a4:02:f3:e2:a5:ba:aa:31:ee:15:5d:c3:
9c:40:62:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:10:39 2025 by rpki-client