Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213267.roa
File: AS213267.roa (raw, json)
Hash identifier: Z1qvhYt9BHh4ScBanlILttL99dI3o4dSyTOBssq9kVA=
Subject key identifier: 36:7D:84:F1:05:11:49:0E:43:CF:FD:1B:4B:9D:E9:1E:8F:B0:BB:B2
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 38888C23E057A50D19E679667EAE2833009C49F7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213267.roa
Signing time: Thu 16 Jan 2025 20:40:16 +0000
ROA not before: Thu 16 Jan 2025 20:35:16 +0000
ROA not after: Thu 15 Jan 2026 20:40:16 +0000
asID: 213267
IP address blocks: 2a06:a005:2f80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:88:8c:23:e0:57:a5:0d:19:e6:79:66:7e:ae:28:33:00:9c:49:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 16 20:35:16 2025 GMT
Not After : Jan 15 20:40:16 2026 GMT
Subject: CN=367D84F10511490E43CFFD1B4B9DE91E8FB0BBB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:ba:e2:fe:09:73:d0:91:2c:79:79:a3:ab:
fb:3d:f3:65:7a:75:e4:32:51:5f:df:76:ab:cb:29:
cb:eb:4a:2f:f2:93:0e:ee:f6:4b:61:64:cf:39:bc:
ec:ac:79:a8:e0:8e:9c:d7:01:e0:8f:50:77:67:b9:
89:73:c5:23:bc:e9:79:74:0e:44:b7:ba:13:1a:f1:
53:ff:3b:07:07:cc:97:91:47:f0:b0:60:b7:24:13:
bc:85:27:7f:8e:e4:43:bc:14:7e:f5:8c:54:9d:ac:
1f:52:6d:c0:37:63:94:34:71:77:49:70:e3:12:cc:
16:ca:22:37:74:1c:cc:f0:6e:8d:48:7c:6e:2c:61:
e3:cd:07:b2:5a:a4:6d:b4:b2:1c:0b:8a:1d:87:d3:
dd:0e:c0:0b:3c:7f:db:10:a7:25:42:d4:76:65:c8:
2e:f8:d5:e2:1c:aa:d8:75:de:74:4a:d5:92:fe:b2:
e6:c6:27:d5:9a:ae:e4:1d:5d:95:af:2b:1b:f7:a9:
28:f5:2f:9e:07:5c:55:3d:30:de:8d:43:3b:86:a4:
68:7e:68:54:78:ad:4c:b9:a9:54:11:ed:b2:82:88:
14:68:d9:6c:68:7e:79:b5:3a:4d:a5:81:44:37:f8:
37:8c:c1:09:48:91:62:96:0c:a2:9f:ef:f1:30:f7:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7D:84:F1:05:11:49:0E:43:CF:FD:1B:4B:9D:E9:1E:8F:B0:BB:B2
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2f80::/44
Signature Algorithm: sha256WithRSAEncryption
2b:29:95:69:26:0f:f2:00:c7:f4:62:c4:bf:72:b7:ee:8b:f4:
a9:c0:65:b9:4d:ee:cc:28:cc:0c:2b:89:9a:a0:09:7c:20:a1:
60:b6:1d:d4:48:b0:14:19:43:b1:c7:4d:ff:55:84:0b:a1:7e:
7a:0a:bd:ab:57:bd:62:cb:70:cb:66:ac:48:c8:02:6b:51:91:
45:60:30:dd:1a:85:16:ba:3d:3d:ef:3b:27:d3:58:88:28:1b:
35:4c:57:f1:85:e0:1d:69:aa:2a:27:ee:40:fc:c0:f4:7e:19:
18:3a:2d:e3:d6:bf:68:8c:3e:5b:7c:76:04:05:6e:20:7d:83:
7f:d2:d2:99:37:b2:f0:f2:71:82:22:81:60:c0:49:cd:eb:db:
94:18:a9:f0:aa:a3:cb:91:6e:c7:98:ee:33:29:03:8c:92:28:
77:0a:74:bd:77:35:3f:5f:52:f3:9d:ed:1d:ec:76:c8:48:18:
a6:08:31:c5:04:af:6a:97:0f:46:0e:fb:fa:06:6c:bc:e2:da:
c9:48:d8:da:7b:32:26:90:5f:45:64:7d:8d:0c:d2:01:ac:4c:
45:cf:0e:7e:f6:bd:56:b8:80:f3:35:b0:2a:a5:a6:92:be:11:
d3:0b:55:ae:df:70:c2:b7:1a:ed:82:f2:60:03:a9:65:67:c4:
d4:f1:ed:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:41:23 2025 by rpki-client