Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa
File: AS215224.roa (raw, json)
Hash identifier: X7JTor13jWwX3KsGC8kwuGQO4TunOOUVjEHGaPKXPAg=
Subject key identifier: D0:31:7F:1F:FC:4B:1F:E9:33:23:1C:40:AA:44:E4:4B:FE:4E:AF:8E
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 29DC26C9BF67EA5B29C9AC7B1F62796F2D23B3CF
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa
Signing time: Tue 25 Feb 2025 13:27:42 +0000
ROA not before: Tue 25 Feb 2025 13:22:42 +0000
ROA not after: Tue 24 Feb 2026 13:27:42 +0000
asID: 215224
IP address blocks: 98.142.244.0/24 maxlen: 24
104.234.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:dc:26:c9:bf:67:ea:5b:29:c9:ac:7b:1f:62:79:6f:2d:23:b3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 25 13:22:42 2025 GMT
Not After : Feb 24 13:27:42 2026 GMT
Subject: CN=D0317F1FFC4B1FE933231C40AA44E44BFE4EAF8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:d1:20:af:72:2a:01:02:c3:65:4b:4e:c3:
3c:b2:52:f3:f8:77:4d:f6:2d:aa:d2:98:b0:a4:36:
f0:2f:bd:81:ef:20:eb:04:2e:e0:c4:f2:5a:2b:60:
ac:49:45:6f:c5:b4:0e:9a:47:f1:e3:55:e7:8a:c9:
5a:09:a3:ed:7c:04:88:82:2f:9e:3b:1b:ff:74:da:
dc:37:6d:00:ce:3c:16:65:81:6b:2e:44:33:09:92:
ed:24:d0:11:69:43:da:30:9c:1b:80:d7:c7:c1:1c:
a5:41:dd:64:a4:02:d4:ea:b9:78:6d:ba:71:80:51:
84:24:bf:88:aa:ef:2c:62:a3:b9:42:e5:69:e6:0a:
08:67:dc:5a:ea:0a:15:40:51:27:94:47:31:32:39:
46:09:26:e4:7f:a4:e7:16:27:28:ff:64:b1:86:08:
ef:c5:52:cd:db:8d:3d:f3:7b:d9:56:4e:ce:7c:f3:
7e:38:c4:3b:f4:fc:6a:4d:1d:3c:17:92:27:e7:c4:
98:ca:70:e5:53:20:ea:84:9b:e6:0b:e0:78:d1:56:
47:64:2c:56:ba:29:f4:7f:41:e7:c5:90:d3:94:46:
76:c8:3b:46:e3:a3:0e:00:3a:05:c2:3e:7f:0e:85:
78:cb:4c:e1:61:af:35:c7:f9:2b:8d:73:09:2f:87:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:31:7F:1F:FC:4B:1F:E9:33:23:1C:40:AA:44:E4:4B:FE:4E:AF:8E
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.244.0/24
104.234.243.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:33:1d:6f:21:84:1f:7e:9a:cc:07:fc:49:c5:a8:b6:db:65:
97:7d:69:fe:3c:6d:50:25:b5:2a:aa:0f:f4:eb:d8:9f:6b:ff:
92:21:e8:ff:43:9c:29:f0:82:f9:fb:ca:fb:bc:50:bf:a2:47:
81:76:22:83:24:b1:6a:8d:cf:54:19:86:00:dc:92:fe:64:5a:
eb:91:e2:42:1c:e7:86:6c:11:fe:f0:06:d7:0b:e3:11:31:63:
88:57:c1:e9:de:6e:35:ec:46:42:3b:41:fe:cc:e3:3b:fc:9b:
2a:35:36:71:f1:9f:ef:0f:2b:e6:45:b0:12:ed:7d:e4:f9:86:
6a:85:d1:9f:9b:8f:de:0b:c7:b7:b7:25:fe:1e:03:f1:25:97:
d2:2b:3c:71:fd:95:8e:12:a2:0d:9e:f0:55:63:c7:fd:5a:8b:
bf:c3:ea:a9:48:37:95:28:e5:86:69:e9:23:93:3e:d0:6e:99:
6b:94:a0:15:74:e8:b7:84:3b:16:12:9a:9a:68:f4:ed:8f:7b:
54:2f:49:b3:2b:df:0a:bc:dc:1f:9c:1f:b1:c4:77:e4:6d:1f:
36:34:4d:77:90:a0:7c:ec:39:c5:1e:b4:d6:5f:97:28:eb:62:
03:59:0f:d1:fb:e2:cc:4e:be:50:f6:3e:a8:7e:a1:69:8a:6b:
61:47:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:57 2025 by rpki-client