Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS47509.roa
File: AS47509.roa (raw, json)
Hash identifier: rPDebKK4ZArVT09yf3oDZdHU5/DtQRROZGdOD/EfT8g=
Subject key identifier: 9F:00:BA:8B:6C:54:AC:8B:D4:C7:81:1C:9C:64:DC:CE:29:0C:F9:D4
Certificate issuer: /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial: 027DAAFF95AC92C702A0EC6D16969D2175C2CD18
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access: rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS47509.roa
Signing time: Wed 02 Jul 2025 19:33:05 +0000
ROA not before: Wed 02 Jul 2025 19:28:05 +0000
ROA not after: Wed 01 Jul 2026 19:33:05 +0000
asID: 47509
IP address blocks: 2a0a:6044:b100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7d:aa:ff:95:ac:92:c7:02:a0:ec:6d:16:96:9d:21:75:c2:cd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Validity
Not Before: Jul 2 19:28:05 2025 GMT
Not After : Jul 1 19:33:05 2026 GMT
Subject: CN=9F00BA8B6C54AC8BD4C7811C9C64DCCE290CF9D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5c:e1:02:c4:50:7a:a0:88:3e:13:41:b1:e0:
0e:00:18:f2:99:6c:b5:2a:bb:92:57:d6:d3:f5:f6:
90:bc:e2:ce:75:4b:a9:df:a7:f5:c4:b9:de:70:59:
89:ea:9f:d6:c3:78:07:94:e5:58:6b:4f:48:5e:4a:
4f:a1:38:0c:28:75:37:f1:52:49:cc:c5:b6:5e:d3:
da:55:bb:31:bf:9f:25:32:47:3c:ef:c9:a3:d0:d1:
7b:71:29:a3:03:d0:9e:a2:3d:c8:9c:fa:88:de:e0:
dc:0d:8c:81:1a:62:46:37:04:e6:02:b1:2f:73:50:
af:96:d0:69:a0:c2:12:69:34:52:fa:f5:ff:d6:1c:
02:1e:27:3a:90:f1:74:83:7b:93:5f:5d:2c:d8:e6:
27:07:d5:86:fe:7c:ae:c9:2d:1f:56:3f:3b:81:30:
9d:ec:73:06:b8:2b:74:a9:65:2a:95:12:ac:5e:c5:
b4:2b:04:b2:f0:d1:0b:e2:41:c6:b5:52:21:77:1f:
8a:ca:c6:32:88:55:43:af:3e:09:19:2f:e2:7c:d8:
ec:55:3b:da:4c:9b:88:97:f2:d6:72:3a:18:55:72:
87:81:7f:39:ad:1c:26:52:7c:9b:ba:fd:12:24:85:
25:4f:2f:e7:76:49:2c:b6:f6:a1:d1:8c:bd:06:9f:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:00:BA:8B:6C:54:AC:8B:D4:C7:81:1C:9C:64:DC:CE:29:0C:F9:D4
X509v3 Authority Key Identifier:
keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS47509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b100::/40
Signature Algorithm: sha256WithRSAEncryption
10:5d:56:d7:0b:f2:22:f3:82:51:40:4d:52:0a:ee:d9:77:cd:
8c:ee:5e:81:94:d2:a6:da:26:7d:cd:94:54:1f:66:ff:43:1f:
3c:4a:5d:e2:c0:23:90:b1:e1:84:97:fd:c3:70:21:10:ef:9a:
6f:96:ab:74:e4:2e:ec:2d:14:2c:80:2e:3a:7a:0d:18:d7:c1:
d0:52:ed:41:a9:9b:40:d9:a3:7e:4c:6b:83:11:1e:3b:03:71:
5d:44:1b:b4:8d:63:d6:8e:0f:4f:73:15:1b:d4:02:d7:8b:f9:
df:f9:99:33:8f:1e:47:1c:19:b7:ba:82:71:c1:71:06:1a:f9:
9b:21:60:ad:7d:eb:ec:2d:78:b0:cc:15:1e:d9:cc:83:3c:4a:
3d:a2:bc:73:8c:da:55:fc:d0:a5:06:05:f7:54:7d:3d:e2:4e:
8c:10:a1:8e:07:e4:f0:6e:af:4d:b1:d0:8c:14:81:61:c9:03:
f2:96:9d:33:d9:d7:6d:56:2b:ef:cd:d7:69:1a:fd:89:68:7b:
c1:57:50:63:7b:86:ed:1c:c6:62:86:f1:a4:b3:6f:a3:0c:3a:
27:d1:03:c4:6d:e5:9c:c1:28:56:64:bd:35:5f:82:9b:b3:7c:
c2:c1:da:65:73:3a:88:6e:bc:54:9f:7f:d7:94:0c:38:df:0f:
96:5c:b2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:02:04 2025 by rpki-client