Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215108.roa
File: AS215108.roa (raw, json)
Hash identifier: qYOy/ZBxo1pMfRcD6flqjCmOr1jotvmBz9Pf3XZba4g=
Subject key identifier: B8:0D:0C:21:7F:4E:EA:56:88:F6:0B:E7:7D:2A:41:34:8B:8D:4E:CB
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 7FBE4A6A7DA52AB6F140A92100376505396BE780
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215108.roa
Signing time: Wed 02 Jul 2025 19:33:13 +0000
ROA not before: Wed 02 Jul 2025 19:28:13 +0000
ROA not after: Wed 01 Jul 2026 19:33:13 +0000
asID: 215108
IP address blocks: 2a09:54c6:2000::/36 maxlen: 36
2a0a:6044:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:be:4a:6a:7d:a5:2a:b6:f1:40:a9:21:00:37:65:05:39:6b:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:13 2025 GMT
Not After : Jul 1 19:33:13 2026 GMT
Subject: CN=B80D0C217F4EEA5688F60BE77D2A41348B8D4ECB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:fe:d6:e7:53:5b:55:d7:78:0d:ed:8b:6e:
76:a9:1a:6e:bf:43:ac:fa:5f:c0:d3:32:76:d3:52:
dd:02:9b:8c:c9:f2:f1:25:ba:2b:41:6e:5f:2b:e0:
f8:31:73:d0:69:f3:77:3b:9b:77:94:ba:f8:9e:10:
a8:df:d0:67:e5:66:9f:fe:3e:06:5a:65:46:13:84:
26:27:47:e6:05:8e:87:94:f2:f4:d5:e3:72:dd:eb:
d4:8d:b0:4a:21:99:fb:bb:e3:8c:5b:5a:ea:d8:13:
be:af:81:1e:87:e1:73:9b:5f:63:d5:16:4a:cd:e9:
ba:7a:87:ac:5b:0e:30:6f:bd:62:7f:a5:b8:56:c5:
34:b2:e6:c3:a7:b8:dc:c1:74:fa:5f:90:09:83:5e:
5a:17:e7:c1:2f:bc:75:89:fa:2f:2c:61:ff:35:dd:
2d:01:fc:ba:3b:60:1c:94:0f:32:dd:f9:a4:5e:c6:
f8:d2:c5:eb:cc:ff:98:0a:59:6d:3d:a3:c8:69:31:
f8:d3:ea:0c:fe:af:16:8f:04:bc:e4:9b:28:6e:22:
47:1d:b5:31:ae:6c:de:f1:e6:4a:12:f1:36:99:a0:
f4:42:bd:5e:1a:5a:df:2c:1d:45:cd:94:4e:91:33:
61:ec:e6:be:72:18:9b:c0:3e:04:8a:9a:c6:7a:a3:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0D:0C:21:7F:4E:EA:56:88:F6:0B:E7:7D:2A:41:34:8B:8D:4E:CB
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215108.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:2000::/36
2a0a:6044:2000::/36
Signature Algorithm: sha256WithRSAEncryption
c4:3a:1d:9f:5e:5c:4b:a3:21:e4:c5:48:d5:88:45:f7:cf:b6:
a1:86:0c:b0:db:58:84:08:83:83:15:af:3f:f1:c7:e7:22:28:
15:a6:7f:6b:a4:5d:29:6a:dd:ca:27:2d:31:82:f2:f6:36:db:
b6:fd:21:27:c7:5c:9d:9f:57:b9:39:50:82:97:96:26:b7:b0:
d4:ac:47:f8:9e:ff:60:ee:97:45:8e:cc:e5:37:cb:b7:60:33:
22:9b:0c:94:fb:e3:e2:79:24:27:ac:66:5a:e2:c1:b5:49:aa:
48:60:85:57:62:37:35:4a:67:07:00:8e:18:99:5b:55:ca:68:
2d:c9:4d:8a:49:fd:a0:86:a3:d4:6b:91:af:a8:f7:2a:7a:27:
62:88:43:fd:95:82:fc:54:d7:2a:e2:87:10:4c:44:92:31:4b:
e1:c6:04:4d:c8:a2:79:cf:0e:79:58:ff:ff:bd:9b:d4:4d:ca:
3a:9b:72:23:37:c7:29:4e:d0:fe:c6:23:27:d6:3b:89:e3:13:
ae:b4:6a:5e:ed:85:ce:98:70:60:38:4a:30:31:8e:71:f1:f1:
84:89:2f:af:aa:ec:bd:6f:d4:71:e0:80:98:aa:1f:df:9e:60:
4b:e7:b3:2a:46:21:43:5d:ce:a3:ab:6c:23:dc:e4:d9:61:10:
42:eb:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:02:18 2025 by rpki-client