Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: A/cW9nhlU9GbhgeAocDm34742ZrfcxQvl2RNpjUSUMY=
Subject key identifier: 17:14:37:DB:0E:1F:5D:38:0F:57:F3:50:E9:B3:84:E6:63:87:E7:91
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 24B013395ECA512D5E996B07F867D47ADA94F4FB
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS31898.roa
Signing time: Wed 02 Jul 2025 19:33:04 +0000
ROA not before: Wed 02 Jul 2025 19:28:04 +0000
ROA not after: Wed 01 Jul 2026 19:33:04 +0000
asID: 31898
IP address blocks: 2a05:dfc3:f6ce::/48 maxlen: 48
2a0a:6044:6d00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:b0:13:39:5e:ca:51:2d:5e:99:6b:07:f8:67:d4:7a:da:94:f4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:04 2025 GMT
Not After : Jul 1 19:33:04 2026 GMT
Subject: CN=171437DB0E1F5D380F57F350E9B384E66387E791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:b7:9a:2c:1b:94:f3:c9:e4:9b:ce:6e:1e:
ec:07:c7:fe:9f:41:71:aa:91:fe:e9:15:69:20:79:
eb:7a:a8:dd:0f:2b:e3:f4:08:b9:71:e5:67:e6:07:
aa:22:11:77:39:51:b3:e5:d2:3c:53:88:12:93:a7:
f7:cc:cb:94:f2:63:e4:d1:12:d1:79:62:2b:73:c5:
38:6e:eb:48:ec:8b:cb:e4:48:b8:f5:ed:ab:92:01:
f0:ee:52:1a:e0:19:12:74:f0:af:a1:ef:32:68:51:
53:57:2a:71:a6:39:b7:cc:36:36:74:c2:ff:20:5f:
f4:7f:c4:22:c5:73:ca:eb:f3:c2:8b:5f:20:05:f2:
72:63:23:1b:94:e6:0b:41:8a:56:22:15:7d:df:08:
d9:9b:3d:31:cb:6a:cf:86:22:73:78:ea:27:d3:0e:
de:70:76:d5:17:9f:ad:2e:1b:1f:9c:f0:66:27:74:
5b:9b:cc:9c:18:35:6c:a0:1f:1e:3e:c1:96:5e:cf:
91:74:b8:e3:70:0b:c8:4d:84:74:39:a8:db:99:eb:
ec:e0:55:b9:88:40:4b:39:49:02:fc:48:01:d7:c1:
80:52:26:95:50:34:30:68:4c:6d:e2:d4:a8:b3:5e:
21:ad:4a:bd:86:21:48:9d:be:69:7a:85:da:c4:69:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:14:37:DB:0E:1F:5D:38:0F:57:F3:50:E9:B3:84:E6:63:87:E7:91
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f6ce::/48
2a0a:6044:6d00::/48
Signature Algorithm: sha256WithRSAEncryption
79:7e:cd:8b:00:73:e6:99:d6:3c:8d:ad:a6:23:83:46:83:e7:
bc:d2:5f:62:ff:d8:43:16:14:c8:27:ef:18:d8:ff:fd:29:b1:
a4:87:fa:0b:33:12:87:03:60:fe:e3:2c:00:ef:75:65:3f:c4:
df:77:c8:4c:76:b9:f8:59:ae:73:c6:ff:5e:38:15:48:26:88:
9c:da:6a:d1:84:3a:52:87:eb:6f:63:28:dc:d5:da:38:df:2c:
1d:fc:86:81:7d:5e:1c:74:ef:12:14:e8:6c:ea:cd:d9:f1:81:
f9:94:ce:dd:5a:01:48:d8:58:a4:69:39:3e:19:87:8b:4c:45:
5a:2b:af:f8:55:36:7b:3c:26:34:13:31:1b:40:e3:01:c0:6d:
fb:3b:92:5d:9e:e0:3d:42:9f:36:e5:c9:62:ce:b9:21:d1:88:
82:41:f6:31:15:8f:2c:47:2a:42:d9:d0:25:e9:fa:89:c9:d7:
cf:51:bf:4f:06:9a:3c:96:26:af:19:44:81:53:14:ad:a4:f5:
9f:96:74:d3:b7:f9:e5:92:50:bb:d1:39:d0:b5:4d:e5:6d:10:
4d:5f:c0:13:1f:91:fc:f3:08:91:70:8d:b0:ba:10:29:d9:56:
cb:1a:84:29:84:f2:7c:7c:af:6b:fb:0c:57:f3:57:2d:b1:88:
aa:96:46:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:08:56 2025 by rpki-client