Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210531.roa
File: AS210531.roa (raw, json)
Hash identifier: NrQVlu8RRCg+xCvqT5BIaVY2kVK+PsWak83HBwhFujM=
Subject key identifier: 0C:24:0A:7A:40:18:78:5E:04:8A:70:0B:B5:80:CC:9E:BF:47:21:3A
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 1390AEB694B156AEC5BD9F43D52EDA8054F1BBE9
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210531.roa
Signing time: Tue 24 Dec 2024 08:28:23 +0000
ROA not before: Tue 24 Dec 2024 08:23:23 +0000
ROA not after: Tue 23 Dec 2025 08:28:23 +0000
asID: 210531
IP address blocks: 98.142.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:90:ae:b6:94:b1:56:ae:c5:bd:9f:43:d5:2e:da:80:54:f1:bb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 24 08:23:23 2024 GMT
Not After : Dec 23 08:28:23 2025 GMT
Subject: CN=0C240A7A4018785E048A700BB580CC9EBF47213A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:06:29:82:3f:33:73:75:bc:c5:37:b3:0e:
5b:a0:39:ac:4d:71:ce:28:06:50:2d:e6:de:a6:0f:
c1:b1:9c:22:52:ad:6c:03:ac:1f:79:7a:91:61:2f:
ed:05:5c:f1:99:be:dd:34:a7:5d:27:a6:5c:4d:10:
e7:d5:50:44:d2:9b:2f:3f:f3:08:0e:57:f4:c6:12:
cf:3f:f2:2f:43:62:84:bb:2e:bb:7b:19:28:bd:23:
45:e6:c8:53:84:9b:eb:07:c4:2c:6f:e2:c3:68:24:
38:f2:c5:3c:bc:4a:b5:a1:49:df:8e:83:a9:78:13:
99:51:dd:22:17:55:c2:bb:3f:f0:95:62:23:36:07:
53:2b:8d:d1:b9:bd:e2:69:58:60:8b:25:ce:7a:74:
39:80:cd:cd:62:0f:37:36:eb:f0:01:25:d1:52:8a:
c2:0a:f6:f7:c2:bb:a5:77:83:9b:f3:b5:1c:71:69:
86:c6:0e:ed:d3:c1:e8:14:4d:2f:49:91:a6:8f:de:
65:52:be:91:9f:ea:07:96:e2:6a:14:b3:1a:9d:ed:
78:eb:64:2c:c6:5c:e6:7a:f9:1b:c3:4e:64:95:27:
a6:10:13:d6:3e:ac:a5:bf:53:6e:27:26:7c:e7:a5:
4d:4d:d4:cd:59:a3:83:2b:33:57:61:3e:1e:93:36:
72:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:24:0A:7A:40:18:78:5E:04:8A:70:0B:B5:80:CC:9E:BF:47:21:3A
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.244.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:fe:28:a0:6c:70:51:92:5f:47:4a:d3:30:7b:ac:3a:34:4d:
59:0e:67:1b:44:38:d5:df:3b:29:d7:43:da:2f:6f:0c:ae:31:
37:6f:f3:99:43:3d:0c:f6:d8:76:2e:37:88:64:0c:75:18:1d:
3b:9b:b5:50:89:68:88:72:f5:0a:db:b9:cc:db:b8:06:2a:ae:
f9:39:7e:d4:8f:62:1c:c7:29:8e:96:54:0f:8b:7f:b4:d3:ba:
88:cb:95:3f:52:ae:1f:95:d5:97:d8:93:06:b7:e9:eb:a3:3d:
11:d4:93:e3:03:d2:be:36:4f:5e:3f:68:12:37:ad:79:15:cc:
55:ca:a0:bd:df:bd:dd:43:e3:24:de:1e:e0:c4:95:57:ec:4f:
e7:37:93:76:21:b9:15:15:be:97:e9:b1:53:7b:51:41:aa:a4:
0b:f2:cf:09:6e:37:49:dd:45:c7:90:f9:0d:ca:33:20:57:8d:
5c:75:99:57:bb:a4:ba:47:a0:fe:3e:d7:66:8f:e8:de:be:f6:
30:a9:6a:82:ed:d1:29:90:51:bd:32:4b:8a:aa:c0:89:7d:aa:
d9:e4:56:91:62:a1:e0:9d:e1:7a:55:41:8a:b4:b4:4d:b6:bb:
a1:f7:47:28:6f:14:b5:a5:59:d2:9f:1a:08:e4:41:e8:62:19:
c5:92:8f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:34:10 2025 by rpki-client