Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212001.roa
File: AS212001.roa (raw, json)
Hash identifier: MX0r6IdkauiEPd6zKruHnkcTlmMuC0XqSmbS5/RYxLo=
Subject key identifier: 8A:31:97:BD:A6:7C:E1:E8:47:FF:22:19:0F:3E:4D:BD:D5:2B:25:AD
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 071B6C0C49C21B343F4B6B1C317BD49F2554AC94
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212001.roa
Signing time: Wed 05 Mar 2025 18:50:36 +0000
ROA not before: Wed 05 Mar 2025 18:45:36 +0000
ROA not after: Wed 04 Mar 2026 18:50:36 +0000
asID: 212001
IP address blocks: 2a06:9f44:d000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1b:6c:0c:49:c2:1b:34:3f:4b:6b:1c:31:7b:d4:9f:25:54:ac:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Mar 5 18:45:36 2025 GMT
Not After : Mar 4 18:50:36 2026 GMT
Subject: CN=8A3197BDA67CE1E847FF22190F3E4DBDD52B25AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:4b:f5:fa:f3:05:dd:ce:fe:fe:25:11:ce:
3e:59:71:b7:f6:f9:db:dd:8c:bc:d9:24:c9:da:db:
ae:ca:2c:b6:59:33:03:5a:8b:0b:27:a6:8f:49:77:
6a:09:36:6d:74:69:75:47:4f:78:6d:f9:75:83:01:
e6:33:74:d3:b2:17:6c:28:04:4b:01:f8:3c:ae:d6:
f2:11:51:06:e5:8a:e7:34:7c:f4:65:77:06:0a:e7:
6f:99:ec:2c:5b:7c:82:a4:48:9b:3c:59:2c:33:e1:
e1:f0:6f:20:d5:83:f9:8d:86:97:4b:74:d5:03:cd:
2e:dc:8f:03:24:f0:ba:bf:4e:1f:8a:12:67:90:76:
67:c3:2a:f4:39:da:29:88:cd:b0:11:a3:b4:84:f9:
21:5c:87:7e:76:52:d6:07:4c:fd:52:ca:c3:77:c0:
7d:3b:33:1c:94:9a:ef:8b:b2:0f:41:b7:93:fe:8d:
64:1e:d3:63:87:c2:c1:b2:92:89:04:51:5c:ba:38:
0c:b4:d1:14:a7:19:35:15:73:c9:23:1a:82:f8:96:
f2:92:1f:a2:ed:0f:f2:5d:73:27:8d:b8:6f:3a:51:
fb:9e:48:6d:93:c4:02:c5:80:04:4c:be:89:7c:55:
1a:ca:b7:ef:f1:04:88:01:bc:f8:94:cf:dd:49:8f:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:31:97:BD:A6:7C:E1:E8:47:FF:22:19:0F:3E:4D:BD:D5:2B:25:AD
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212001.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f44:d000::/36
Signature Algorithm: sha256WithRSAEncryption
5e:a1:db:29:70:47:b7:8e:dc:9b:ca:16:d5:90:db:72:9b:0d:
4e:f8:b7:ce:bb:44:72:cc:b2:66:8f:9b:97:28:5e:95:9a:99:
67:39:e4:be:da:04:24:ee:4a:64:bc:12:d9:6b:6c:34:87:b3:
7a:f3:dc:36:2f:21:64:fa:89:47:ad:c6:ac:d3:17:07:3d:33:
09:12:0a:f9:e2:c9:ec:57:31:53:0a:72:b2:4d:22:37:f9:5c:
9f:4f:6f:2f:f1:c5:6e:d5:80:f2:0e:65:60:19:de:2f:d5:dd:
2c:39:58:20:f7:c2:cd:51:38:36:09:e9:94:11:d8:3c:02:fe:
06:e0:b3:c4:f4:cc:20:9d:79:9d:b0:c6:55:be:e9:3c:d4:68:
49:8c:60:7b:cc:93:3a:74:f3:4e:b3:09:ff:9b:d6:95:1b:5b:
89:ea:d9:08:1c:cb:7f:03:81:c2:a3:bc:22:5b:9f:cc:78:60:
35:fd:a3:26:52:da:d2:ee:f9:66:4d:ba:1a:75:bf:bf:24:12:
26:3d:7b:fd:37:74:ce:43:9b:2a:af:85:b2:d1:49:bd:d9:df:
e2:eb:47:ea:1f:77:26:b4:47:f6:eb:9a:ff:bc:2a:06:0a:83:
bc:94:34:ea:af:f0:dc:4e:75:9c:48:aa:ec:c6:a9:10:60:4f:
a5:f4:14:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:24 2025 by rpki-client