Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200570.roa
File: AS200570.roa (raw, json)
Hash identifier: bSqtCcPr4oYmbIMhx5lnkpAnzyIzj6z/CS5r2ipP28M=
Subject key identifier: 14:A4:02:58:04:A1:0B:0E:B9:F1:36:FC:E9:D6:9C:26:97:38:34:F6
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 51DC7FFA382C7FCD2E33C4A5705149B914903BAC
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200570.roa
Signing time: Fri 08 Nov 2024 12:40:12 +0000
ROA not before: Fri 08 Nov 2024 12:35:12 +0000
ROA not after: Fri 07 Nov 2025 12:40:12 +0000
asID: 200570
IP address blocks: 2a06:a005:2a50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:dc:7f:fa:38:2c:7f:cd:2e:33:c4:a5:70:51:49:b9:14:90:3b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 8 12:35:12 2024 GMT
Not After : Nov 7 12:40:12 2025 GMT
Subject: CN=14A4025804A10B0EB9F136FCE9D69C26973834F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8e:9f:2a:46:e2:09:b3:80:13:99:99:5c:f8:
82:ca:1e:d1:9b:48:6d:47:d6:af:22:08:73:5c:5f:
fe:55:ac:42:88:6c:b6:c0:b9:6b:6b:49:75:d6:e8:
c5:92:ed:78:46:cf:20:12:25:5a:ee:42:16:90:28:
1f:4b:18:96:c9:12:a2:b2:eb:ee:6e:98:91:55:0b:
63:83:f7:77:1a:ba:eb:bc:dd:83:c2:81:83:35:ce:
23:98:69:63:bb:4d:28:fc:59:53:44:ae:aa:c5:b1:
ff:38:64:3a:65:f1:98:04:c0:03:c4:1d:92:93:52:
61:89:97:13:a7:bd:02:96:bd:b5:3d:26:4a:f7:e6:
87:4e:3c:e0:4d:89:63:4f:81:d7:a9:43:b8:09:56:
84:70:b1:ef:4f:a0:f1:df:58:c2:25:24:06:7e:99:
74:c6:b1:bb:15:86:82:c1:12:02:87:42:1d:ee:36:
7d:f4:c5:91:64:93:36:01:c1:08:72:23:18:38:d0:
de:0e:d5:ae:3f:97:db:3a:48:77:7b:32:70:1e:d9:
dd:fe:87:25:47:84:f4:41:d1:bb:59:3e:98:f5:10:
35:8d:3b:f9:5c:f9:9e:d3:be:68:ff:58:15:70:c4:
0a:c2:37:f8:31:5d:6b:b2:2e:13:e0:b5:53:c6:0e:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A4:02:58:04:A1:0B:0E:B9:F1:36:FC:E9:D6:9C:26:97:38:34:F6
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200570.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2a50::/44
Signature Algorithm: sha256WithRSAEncryption
35:f6:cf:3e:49:d0:1f:f3:e6:29:d0:66:21:92:16:82:f5:d2:
04:fd:df:c3:67:ab:93:b8:1f:df:4f:92:f4:70:a6:a1:0b:58:
35:9b:ca:89:fb:81:b0:a2:c4:74:98:4b:5b:46:8c:0d:04:ad:
62:15:36:0d:07:c0:d8:9a:7d:72:cf:0d:b6:fb:b3:3a:d4:e1:
8e:fe:3b:db:f2:6f:79:94:54:0a:e7:d7:92:67:2a:70:2f:f7:
69:f4:95:52:bb:e4:bc:7b:69:08:ad:10:26:9f:3b:52:98:39:
6e:f4:c4:69:0f:5b:ae:91:69:84:08:e7:ac:74:60:bf:2a:e1:
62:38:69:6f:d2:06:10:7c:b3:13:46:62:e7:b6:46:7b:ed:9a:
da:9b:ba:f6:7f:fb:4a:2e:ac:53:1c:ce:34:4d:54:ae:2e:4c:
7e:28:02:ea:0d:d7:59:83:e0:bb:db:57:00:ea:a7:40:16:20:
77:03:bd:e4:95:79:bd:ca:17:78:60:3c:b9:12:c3:78:2d:7c:
9d:c1:4a:df:d1:95:82:c8:a2:65:27:76:81:7c:e5:c9:90:fb:
07:57:2b:a4:8d:02:f9:2d:87:85:91:18:b0:f7:68:61:cd:4c:
0b:58:5e:5c:a5:3f:8d:c6:45:0e:79:21:7b:87:22:2e:54:40:
52:40:94:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:14:12 2025 by rpki-client