Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: OJW7/YN/S+YgMCIdP9S36cpjx9SnZoepzMtKcutw2jA=
Subject key identifier: FE:78:BB:48:C4:43:91:45:0E:84:DB:A7:93:1E:86:77:96:83:6B:CE
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 2EB73343B3F77224F5A5054A88BC4EFC2DAD9D34
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21859.roa
Signing time: Mon 10 Mar 2025 09:02:51 +0000
ROA not before: Mon 10 Mar 2025 08:57:51 +0000
ROA not after: Mon 09 Mar 2026 09:02:51 +0000
asID: 21859
IP address blocks: 74.50.2.0/24 maxlen: 24
209.200.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b7:33:43:b3:f7:72:24:f5:a5:05:4a:88:bc:4e:fc:2d:ad:9d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Mar 10 08:57:51 2025 GMT
Not After : Mar 9 09:02:51 2026 GMT
Subject: CN=FE78BB48C44391450E84DBA7931E867796836BCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:d6:dc:9e:8b:e9:81:84:2a:7e:11:4e:1b:
41:54:fc:74:41:75:4c:8f:6d:5f:65:8c:8b:8c:6a:
33:76:e6:76:af:63:e5:e0:b6:d7:8c:5e:e5:c5:c6:
14:dc:cf:10:7d:8a:06:de:3c:3a:26:a8:db:80:ad:
8e:ff:f5:b8:1f:2b:5c:56:c0:bb:b6:36:8c:e7:c0:
32:05:68:25:89:ca:44:eb:54:24:8b:62:39:49:e8:
ff:3d:44:f8:e7:f6:40:0a:aa:fb:c5:f5:df:56:35:
59:6c:70:e6:c0:0d:9c:c0:e0:74:56:df:4a:97:1b:
16:80:e2:50:eb:a4:93:2d:08:48:c8:78:50:9e:03:
73:e3:61:51:c5:d2:48:9b:f7:0b:91:ec:5c:a0:79:
82:9a:33:92:80:a0:b4:8c:9e:71:c9:37:0e:3c:1c:
6b:41:68:eb:40:99:e5:6c:ea:32:ba:53:09:33:70:
e9:da:ad:fe:25:e5:7e:a7:c8:11:08:84:38:87:36:
b6:f2:00:b6:78:69:ca:ac:95:50:71:57:da:6b:63:
ca:ac:c6:e5:a9:a8:af:22:b6:38:3f:08:71:17:0b:
f9:d4:32:ed:3e:7b:9b:e1:c1:27:3a:62:75:af:a5:
50:e0:8a:f5:90:19:eb:cc:f2:b9:2b:5e:35:f6:f7:
46:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:78:BB:48:C4:43:91:45:0E:84:DB:A7:93:1E:86:77:96:83:6B:CE
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.50.2.0/24
209.200.228.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:b9:dc:f5:54:4f:0d:de:d5:bc:d8:43:ab:f8:c8:fb:e2:14:
bb:04:5c:55:1e:33:1d:d3:e8:91:97:2b:f4:6e:85:9d:bd:bd:
1f:be:ce:5f:0b:11:e2:1e:2d:b2:29:b4:bd:15:51:5f:25:b2:
31:23:a5:55:f5:85:55:56:89:43:10:36:e2:af:2c:7b:b0:6d:
be:ce:e7:15:10:9e:62:1c:f4:2e:c9:73:f0:cf:5d:28:82:59:
cb:67:68:78:8d:51:92:2f:e4:e0:21:11:22:37:24:6c:56:19:
c8:24:4a:e2:3a:42:6e:5c:50:77:77:fd:84:58:71:94:b1:c2:
da:b9:6c:dc:51:07:ae:b3:ce:96:7f:08:e9:a2:92:e1:46:e7:
7d:23:4b:e7:a5:d0:75:a9:fe:ff:b6:68:f7:8c:9f:af:0a:4c:
91:6f:da:f9:1c:3c:92:8c:1c:57:b6:eb:80:6d:94:3a:1a:51:
62:ef:d6:e7:c4:05:ef:ac:3e:34:5a:8d:2a:fe:30:75:ba:ae:
0c:a2:c1:12:20:d8:d0:6f:0d:6a:6f:1b:c5:67:87:78:df:b8:
76:97:f3:1d:72:dc:cd:b0:b5:e2:91:5f:a4:7c:6a:08:ce:b7:
11:4b:30:dd:f3:4b:b1:f9:ca:b3:d8:34:fb:e0:8b:ca:d2:1c:
08:8a:c9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:14 2025 by rpki-client