Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212173.roa
File: AS212173.roa (raw, json)
Hash identifier: UUEYszPlgcGtDlvA7tw57HGiwSO2v1kgoCiCUD09H3I=
Subject key identifier: C8:9A:23:93:BD:D7:9D:3A:AF:7D:21:C2:C6:0C:A6:B0:72:C5:58:B1
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4B5142D71A50960E8C44A0E2D2136A4A2EE2CC23
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212173.roa
Signing time: Fri 13 Dec 2024 02:56:30 +0000
ROA not before: Fri 13 Dec 2024 02:51:30 +0000
ROA not after: Fri 12 Dec 2025 02:56:30 +0000
asID: 212173
IP address blocks: 2a06:a005:24d0::/44 maxlen: 48
2a06:a005:2550::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:51:42:d7:1a:50:96:0e:8c:44:a0:e2:d2:13:6a:4a:2e:e2:cc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 13 02:51:30 2024 GMT
Not After : Dec 12 02:56:30 2025 GMT
Subject: CN=C89A2393BDD79D3AAF7D21C2C60CA6B072C558B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:08:e0:d1:44:57:b7:36:59:1e:c8:a8:17:
a9:a2:e6:94:72:ed:c5:05:06:67:36:55:0a:2b:5b:
49:3c:ed:6b:63:6c:ab:d1:76:51:97:23:dc:ac:2b:
be:a5:4b:f4:27:cb:1b:7f:39:9c:25:a1:09:6c:65:
8d:7e:30:aa:06:3b:b9:e8:37:d9:4e:ea:e1:92:aa:
5f:77:57:1d:44:1d:bd:43:32:9c:74:6e:f0:f7:3b:
12:d3:e0:97:32:ab:35:f0:f6:27:ca:5a:3d:27:31:
d1:33:d9:36:f9:c8:6c:55:fe:38:1f:17:36:27:96:
4a:fe:c9:36:b2:f3:49:45:04:cf:8c:1b:95:4a:f9:
1a:20:96:79:e7:62:94:f9:da:9b:67:c7:f2:2a:bf:
2d:a2:db:b3:f2:4c:11:ff:26:a0:87:96:e3:c5:17:
18:b2:78:b3:c4:ed:9b:c3:b0:ab:38:7a:d8:c4:e8:
44:73:f5:68:6d:74:77:01:de:57:ce:d2:93:0c:09:
ea:4b:2b:52:c4:6d:f8:b1:e8:fa:d2:9a:3e:07:60:
dd:49:10:6d:61:dc:64:78:15:01:59:07:a0:eb:96:
55:65:e3:70:15:8d:ee:e6:1e:07:c5:c6:55:d8:03:
d5:18:e2:fc:f8:49:42:ff:f0:99:36:e1:a9:ba:77:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9A:23:93:BD:D7:9D:3A:AF:7D:21:C2:C6:0C:A6:B0:72:C5:58:B1
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:24d0::/44
2a06:a005:2550::/44
Signature Algorithm: sha256WithRSAEncryption
50:2d:13:cf:55:40:06:fa:3a:c7:7b:d8:a3:84:85:46:65:66:
ec:da:3d:ea:ba:cd:d0:b3:c0:81:e1:ce:b3:0c:4f:8a:b9:d6:
1c:00:86:17:c7:00:aa:2b:09:0b:ba:a3:da:b4:e6:50:38:b3:
17:ca:a5:18:ca:f6:a5:10:b0:78:21:a6:f5:dc:d3:84:7d:7d:
f4:b5:dd:5c:47:c6:82:d4:31:a5:ce:2a:78:26:d0:97:ef:87:
07:13:29:fa:cd:88:e6:d1:e0:73:04:a0:bb:2b:ba:84:c7:1c:
d3:89:37:0e:bd:25:32:ef:92:8b:c0:74:a8:09:cd:b8:ab:00:
8b:fd:56:b3:3d:35:0b:5a:25:66:2c:14:88:09:a2:84:5a:bc:
a4:ad:7b:a9:ec:60:39:f4:70:2b:39:89:f4:27:9b:3e:cb:aa:
ab:1f:83:8b:97:8b:a6:6c:f2:55:e0:82:1b:c2:92:e4:09:06:
c2:e3:99:44:cb:d1:5f:79:e9:d9:4c:3a:f3:88:86:20:91:33:
ae:f8:8d:2f:3f:a1:8e:1b:2f:41:bb:9b:2b:2e:79:61:97:b9:
c2:73:d9:45:21:44:ad:cb:31:27:31:c5:2d:5c:75:1c:fd:3d:
26:de:e9:b8:74:44:2f:b8:f8:f6:32:f5:b0:f2:6f:d8:a8:e4:
ec:01:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:26 2025 by rpki-client