Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211514.roa
File: AS211514.roa (raw, json)
Hash identifier: 6DslNAiZob/58IeQUOzRlJS80fIePFvuS/XlBQfwl/8=
Subject key identifier: 06:8A:2E:53:5B:D5:21:5F:7D:E4:89:66:E9:68:74:7E:98:98:C4:B1
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 720F1D0363A4F338873CBE3BFFDA7F7E3432A869
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211514.roa
Signing time: Sun 19 Jan 2025 23:40:16 +0000
ROA not before: Sun 19 Jan 2025 23:35:16 +0000
ROA not after: Sun 18 Jan 2026 23:40:16 +0000
asID: 211514
IP address blocks: 2a06:a005:484::/48 maxlen: 48
2a06:a005:5ae::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:0f:1d:03:63:a4:f3:38:87:3c:be:3b:ff:da:7f:7e:34:32:a8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 19 23:35:16 2025 GMT
Not After : Jan 18 23:40:16 2026 GMT
Subject: CN=068A2E535BD5215F7DE48966E968747E9898C4B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c5:e3:32:d4:54:d7:72:8c:b5:91:54:05:91:
f4:0f:0c:62:29:a1:72:af:d9:99:01:cb:72:24:82:
12:f0:3d:40:1b:59:d8:ef:2b:51:ee:13:0a:f6:bc:
33:e7:d0:4d:9e:e5:3c:00:9a:8a:8f:8f:d0:f2:f1:
77:2d:f2:95:82:e0:ba:b0:02:74:4b:06:9d:3f:b3:
92:75:28:fe:32:9c:e7:8b:df:e8:8b:bb:b6:07:d7:
28:fa:33:d5:5c:63:87:cf:a7:0d:22:ad:9d:ba:7c:
3f:a9:8f:9c:46:7b:51:7f:5c:b0:ec:4e:b7:4c:16:
77:ca:3e:71:35:f2:59:64:65:7a:e4:ae:4b:11:e8:
f9:6b:0a:ba:c3:73:d3:26:d0:cc:cd:be:c7:76:a6:
9c:a3:ce:ad:05:a2:84:a0:1d:2f:7e:4c:4e:05:0e:
39:55:09:da:81:1a:b3:c0:20:f4:1c:b6:e2:cd:a7:
0a:da:3e:c5:96:75:d0:43:bc:93:17:a3:d8:02:3e:
2a:e3:3b:ab:43:6c:52:d7:8f:c7:a5:df:4c:84:e7:
bf:3e:4e:44:fc:9b:28:cb:a0:2c:9a:e9:07:2d:ab:
fc:ea:33:b3:05:e8:43:e6:06:13:78:eb:51:f0:86:
d4:fd:8c:a6:89:59:f4:01:91:35:69:fb:e4:e0:c7:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:2E:53:5B:D5:21:5F:7D:E4:89:66:E9:68:74:7E:98:98:C4:B1
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211514.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:484::/48
2a06:a005:5ae::/48
Signature Algorithm: sha256WithRSAEncryption
23:14:20:87:58:6f:20:c5:b8:79:a3:b2:c3:68:54:29:0a:7a:
e0:55:34:02:c7:4a:3c:89:d2:7f:13:95:cd:59:a1:08:e1:84:
b4:30:1d:65:77:0c:cf:29:c5:96:be:73:31:2f:07:e3:e7:55:
0c:da:3f:a8:a9:6b:c7:30:2b:c9:26:b9:17:06:6e:6e:07:cd:
0d:4b:af:ec:c1:c8:30:b2:6e:fe:71:df:db:f4:b8:86:dd:15:
21:8b:1d:78:83:ae:85:1f:91:9a:af:36:64:4e:9a:55:6c:2f:
e0:0c:1e:41:96:67:d8:00:24:56:f5:e5:1e:40:a8:31:92:7a:
3d:94:56:ee:1e:91:1b:0d:ab:13:12:d5:d2:63:83:c4:e5:16:
c5:fa:56:9d:4b:f8:0d:30:49:6d:96:14:12:a3:2b:d0:30:c4:
6f:18:cf:db:53:26:db:57:6e:b1:c5:6b:47:79:d2:3f:24:37:
1f:58:5f:55:85:3b:22:bc:10:2e:ea:87:e6:6f:d8:a0:c4:c6:
6d:43:7d:2c:a4:a2:15:c5:e6:07:f5:30:3d:e4:2b:41:81:b5:
52:e4:72:35:0e:2f:5b:a7:39:42:12:5b:11:00:2b:b6:86:e5:
80:03:14:2c:f3:0b:8b:05:48:a2:a6:21:cb:81:22:d1:99:5b:
51:b2:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:40:19 2025 by rpki-client