Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: h55L7jbkdhvmyiy/ME99Fc6nE13/Uv2meHI3k1EdFtU=
Subject key identifier: 06:E6:1D:E4:F9:4B:54:62:2C:E3:03:E1:3C:B9:1A:B0:5F:35:6C:84
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 2EDEB3F485DEBB53A059008E400798029DDC5D9A
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214025.roa
Signing time: Wed 12 Feb 2025 00:00:27 +0000
ROA not before: Tue 11 Feb 2025 23:55:27 +0000
ROA not after: Wed 11 Feb 2026 00:00:27 +0000
asID: 214025
IP address blocks: 140.99.47.0/24 maxlen: 24
140.99.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:de:b3:f4:85:de:bb:53:a0:59:00:8e:40:07:98:02:9d:dc:5d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Feb 11 23:55:27 2025 GMT
Not After : Feb 11 00:00:27 2026 GMT
Subject: CN=06E61DE4F94B54622CE303E13CB91AB05F356C84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:b2:d0:96:4d:16:35:23:70:3b:c5:73:86:
f6:3d:8d:c7:ad:57:61:0b:b0:20:d1:e4:98:fd:6a:
d2:e6:20:04:84:a7:29:e5:ff:0b:6c:a8:04:fe:01:
72:92:ec:01:e5:9e:e2:4b:16:17:75:e4:e8:ba:d6:
23:8f:64:3a:b7:00:c6:fb:3f:d7:ac:66:2b:7b:57:
a3:70:dc:cf:a5:8b:51:a4:2b:8e:a9:39:9b:21:4b:
80:8b:cb:74:1a:27:d4:08:3d:ac:1b:35:d7:15:b8:
bd:98:d0:13:f6:ec:10:46:76:df:36:92:40:83:9f:
3f:1a:42:98:d0:5c:94:bf:6b:2b:c5:f6:70:1d:34:
86:1c:27:24:9c:9e:8c:4b:c6:12:51:f1:1d:7f:ca:
ac:41:ab:70:c8:7c:ae:2b:c1:1d:db:e0:64:ac:8d:
fc:3d:80:78:2d:43:8f:03:f0:c5:07:7a:e1:6d:39:
51:5a:68:26:a2:64:91:99:a2:cb:61:c1:1d:bb:b3:
53:fc:09:98:4c:49:35:2c:cc:6e:e4:50:a4:a8:30:
37:5d:c5:cb:c5:11:a0:3a:23:f9:86:36:e2:38:5b:
72:80:78:a2:ea:1a:03:bb:4d:81:6b:06:47:25:39:
68:be:85:fb:92:c5:83:3b:99:09:48:e9:27:35:5c:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E6:1D:E4:F9:4B:54:62:2C:E3:03:E1:3C:B9:1A:B0:5F:35:6C:84
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.47.0-140.99.48.255
Signature Algorithm: sha256WithRSAEncryption
37:29:46:ff:ac:1b:dd:73:72:aa:1d:18:f1:f2:44:5d:9c:39:
da:a5:1e:9c:f8:bb:09:ac:99:36:89:a4:20:79:3f:41:21:dd:
d6:35:0f:7d:10:f5:74:a0:92:72:5c:e7:49:63:16:5d:77:92:
2d:c1:6b:e5:93:54:94:a7:6e:e2:44:50:b6:41:66:07:d4:14:
96:00:6a:38:02:10:2b:c2:fa:88:82:c3:17:a4:1a:51:99:3d:
da:1a:7c:cc:bc:35:cf:bd:46:90:3e:89:69:70:81:c5:88:e0:
00:44:69:8a:77:5f:8f:0d:ac:c8:1e:66:72:5a:b6:ce:64:60:
75:83:6e:1c:81:83:99:6f:48:b0:ba:c1:d5:95:b9:63:59:21:
0d:09:bf:b5:c0:18:17:b6:0f:59:ff:3c:80:39:de:fe:fb:20:
44:45:3c:ed:ae:4d:9b:5f:c6:14:13:ed:94:55:b9:14:d3:3b:
2e:ca:04:1a:53:cc:0e:13:92:79:ea:3d:89:db:79:99:b9:56:
5c:f3:c7:29:34:da:c8:b1:03:90:6a:33:c6:b3:97:84:51:41:
0d:19:d9:11:aa:dc:01:ca:e2:51:49:d3:cf:35:05:10:f0:44:
a6:18:c8:78:8c:ec:7d:c2:eb:2f:59:b9:9a:43:b5:00:37:e6:
0f:78:db:5a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIULt6z9IXeu1OgWQCOQAeYAp3cXZowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwMjExMjM1NTI3WhcNMjYwMjExMDAwMDI3
WjAzMTEwLwYDVQQDEygwNkU2MURFNEY5NEI1NDYyMkNFMzAzRTEzQ0I5MUFCMDVG
MzU2Qzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH2y0JZNFjUj
cDvFc4b2PY3HrVdhC7Ag0eSY/WrS5iAEhKcp5f8LbKgE/gFykuwB5Z7iSxYXdeTo
utYjj2Q6twDG+z/XrGYre1ejcNzPpYtRpCuOqTmbIUuAi8t0GifUCD2sGzXXFbi9
mNAT9uwQRnbfNpJAg58/GkKY0FyUv2srxfZwHTSGHCcknJ6MS8YSUfEdf8qsQatw
yHyuK8Ed2+BkrI38PYB4LUOPA/DFB3rhbTlRWmgmomSRmaLLYcEdu7NT/AmYTEk1
LMxu5FCkqDA3XcXLxRGgOiP5hjbiOFtygHii6hoDu02BawZHJTlovoX7ksWDO5kJ
SOknNVyEGQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFAbmHeT5S1RiLOMD4Ty5GrBf
NWyEMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzIxNDAyNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAjGMvAwQAjGMwMA0GCSqGSIb3
DQEBCwUAA4IBAQA3KUb/rBvdc3KqHRjx8kRdnDnapR6c+LsJrJk2iaQgeT9BId3W
NQ99EPV0oJJyXOdJYxZdd5ItwWvlk1SUp27iRFC2QWYH1BSWAGo4AhArwvqIgsMX
pBpRmT3aGnzMvDXPvUaQPolpcIHFiOAARGmKd1+PDazIHmZyWrbOZGB1g24cgYOZ
b0iwusHVlbljWSENCb+1wBgXtg9Z/zyAOd7++yBERTztrk2bX8YUE+2UVbkU0zsu
ygQaU8wOE5J56j2J23mZuVZc88cpNNrIsQOQajPGs5eEUUENGdkRqtwByuJRSdPP
NQUQ8ESmGMh4jOx9wusvWbmaQ7UAN+YPeNta
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:13 2025 by rpki-client