Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS212448.roa
File: AS212448.roa (raw, json)
Hash identifier: /usKyb7VZsO9S//UypQr4XJIbYZDNvVkvNAv57ZzXcU=
Subject key identifier: 84:2D:2C:78:18:FB:DA:05:71:33:90:66:9A:90:91:2D:AE:D6:5F:56
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 7DC46B64F9FF0023561F4E88E3621DA53EE298EF
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS212448.roa
Signing time: Thu 07 Dec 2023 00:00:05 +0000
ROA not before: Wed 06 Dec 2023 23:55:05 +0000
ROA not after: Thu 05 Dec 2024 00:00:05 +0000
asID: 212448
IP address blocks: 66.225.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c4:6b:64:f9:ff:00:23:56:1f:4e:88:e3:62:1d:a5:3e:e2:98:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Dec 6 23:55:05 2023 GMT
Not After : Dec 5 00:00:05 2024 GMT
Subject: CN=842D2C7818FBDA05713390669A90912DAED65F56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:05:4f:9d:55:95:66:74:a9:a7:53:c4:0e:
0d:36:a2:9d:c9:e4:38:de:ce:9e:97:34:65:b1:c1:
9a:81:a2:9c:b6:37:0f:4b:2a:ba:c4:c2:de:a0:dc:
7d:04:24:1f:87:80:50:0d:71:86:9e:49:fd:13:22:
56:24:76:8f:da:23:6c:90:ca:e9:4f:58:4d:40:69:
8f:44:f6:b6:8a:9d:bb:3f:ee:ea:1d:f1:18:10:fc:
c3:b1:5e:27:bb:8a:82:5b:0d:2d:dd:c5:9f:32:a4:
95:82:02:4b:f1:38:f2:37:5e:e9:6b:a4:51:3b:54:
c6:5f:e1:db:82:cf:8f:5c:c4:76:de:14:0a:63:11:
b4:94:e0:ab:1a:c3:8a:d2:73:47:94:f3:73:de:2c:
8f:28:26:8b:ca:77:f5:9a:8b:47:03:05:c6:ea:e5:
d3:49:4c:47:62:91:cb:13:3d:29:95:b9:ce:3d:a9:
38:30:30:e9:c5:b1:af:1a:37:a4:ad:4a:c9:31:06:
0a:87:8f:c5:10:e1:de:41:ce:09:f1:9d:cf:7b:d1:
fe:8a:1a:bf:d5:fd:6b:2e:1e:ac:ee:da:ce:a9:a3:
2a:0e:71:e8:03:81:26:6a:9b:6d:7e:16:73:9a:33:
66:3a:19:46:93:d6:86:d8:43:f2:21:81:00:4a:79:
27:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2D:2C:78:18:FB:DA:05:71:33:90:66:9A:90:91:2D:AE:D6:5F:56
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS212448.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e9:17:08:d3:41:9d:79:2d:b5:22:da:0e:2d:98:d1:5f:94:
ba:ab:f0:ff:8b:5e:f1:c8:3d:bf:5f:5a:3d:d5:c3:1b:c6:5e:
f4:9b:b1:de:c3:50:65:61:8b:9c:98:62:00:08:d4:42:71:22:
e1:ff:e3:47:60:3a:80:b6:50:06:e4:9e:35:8c:4e:79:c8:66:
be:d0:e1:64:95:f1:9c:7f:fe:e7:2e:4c:4a:cf:90:02:61:30:
19:49:65:8a:ca:d9:b5:fb:f1:e4:79:87:c7:d5:06:ce:1e:3e:
eb:90:23:15:4f:a7:f8:d2:3a:c5:42:14:62:4b:44:86:70:0a:
2b:55:ac:32:b5:9f:c3:3f:ef:b1:9e:83:4a:3e:45:cd:2e:db:
a6:b6:52:d6:1c:eb:96:ad:e1:3a:92:5f:ed:39:de:a2:e6:54:
60:83:22:34:30:71:34:ee:6e:03:e0:59:9b:33:90:ef:7a:04:
57:5e:9a:e2:3d:7e:b7:2c:00:59:47:5d:dc:87:5f:0e:a6:4b:
e8:62:af:54:34:77:d7:8f:11:5a:d2:48:ec:e3:6c:e2:b7:54:
c5:68:c7:cf:58:39:31:2a:5a:de:52:90:b3:10:b0:8f:c9:89:
a8:00:51:58:e5:7e:aa:90:6e:d9:af:09:aa:4c:47:5f:d4:2b:
f0:bc:a2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:17 2025 by rpki-client