Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213707.roa
File: AS213707.roa (raw, json)
Hash identifier: pJqWqz2QliKkdbXyPUebWDEpZPgbffPKDFNJ77s1MF0=
Subject key identifier: F7:45:07:B8:77:70:0E:82:0B:6A:BB:50:91:49:4C:01:09:AE:32:23
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 16CD11B15A4065F24BDD950229E32DACBBF47337
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213707.roa
Signing time: Wed 22 Jan 2025 19:42:40 +0000
ROA not before: Wed 22 Jan 2025 19:37:40 +0000
ROA not after: Wed 21 Jan 2026 19:42:40 +0000
asID: 213707
IP address blocks: 202.50.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:cd:11:b1:5a:40:65:f2:4b:dd:95:02:29:e3:2d:ac:bb:f4:73:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 22 19:37:40 2025 GMT
Not After : Jan 21 19:42:40 2026 GMT
Subject: CN=F74507B877700E820B6ABB5091494C0109AE3223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:31:b7:d8:e8:91:0c:fc:ac:17:ad:f3:bc:
27:d8:d0:91:2c:cb:cc:34:30:63:47:67:0e:c2:b4:
8d:21:7b:7b:aa:fc:0e:65:56:96:03:bc:8d:50:5b:
7f:63:9a:20:5d:e0:ad:d0:70:bb:d3:61:86:bc:1f:
54:79:fa:7b:0e:24:f1:5f:14:9f:52:a0:65:69:10:
a7:7d:76:e8:77:ec:de:99:f7:ef:7f:a1:c9:40:99:
61:62:dc:55:3e:e7:fb:15:31:f5:fa:7c:e6:bb:54:
69:1e:04:e7:ae:9c:3d:81:aa:c7:29:96:04:e9:20:
6f:f7:1b:00:56:7e:a9:61:bb:ef:8b:ca:03:81:4e:
71:69:2d:28:00:88:3f:e9:fe:75:b8:af:50:3f:3e:
73:ca:a5:bf:55:82:ae:d8:14:3b:c2:88:9e:9d:6f:
1f:11:c0:02:76:29:ef:93:70:80:eb:b4:a6:39:2c:
24:74:c3:06:d0:e2:c1:0e:59:fe:41:db:d0:6c:49:
0b:3a:ba:56:e1:f0:3e:b6:82:3e:e0:7c:7d:24:37:
73:71:0d:b1:96:b6:99:6b:d8:46:af:6d:7a:81:95:
95:3a:79:e2:53:3d:23:81:31:84:f9:41:04:ee:09:
fc:08:8e:de:fd:7e:c9:94:a3:46:9c:c0:10:8b:24:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:45:07:B8:77:70:0E:82:0B:6A:BB:50:91:49:4C:01:09:AE:32:23
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.50.53.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0f:6c:ef:18:da:0f:0e:74:cf:b3:a7:b5:f6:49:d1:c4:9d:
26:8a:98:29:16:88:ef:9a:c7:7e:7b:49:74:46:6f:0b:57:37:
01:fa:91:b9:6d:69:2c:a6:17:0a:3a:f4:6c:72:b9:f0:2e:26:
e1:dd:0a:d5:12:d0:bf:bf:f3:4b:fd:0d:0f:3d:e1:52:a3:fa:
7f:ce:3f:90:ec:65:f6:aa:e9:90:25:66:f7:39:a5:05:46:73:
d6:62:21:23:57:48:0f:57:0b:56:07:08:ae:a2:f5:04:b5:a8:
5c:47:eb:8b:1e:0d:4d:35:2f:02:18:4f:7f:b7:d6:7a:86:f2:
c1:39:30:85:f5:26:92:b4:de:5d:64:64:28:a5:1b:3d:0e:a4:
6f:c6:b3:d4:7d:e4:c7:5c:82:b6:06:59:96:b7:90:e8:68:56:
4c:3c:a7:f5:60:1a:9d:82:21:93:07:81:ec:33:cd:f9:44:35:
e7:04:6b:6d:54:1d:3a:ce:15:d0:b4:00:16:10:33:7f:93:36:
70:d7:e4:ee:5a:54:76:c9:9f:3b:62:09:71:85:b7:2a:ea:b0:
e8:22:d4:04:46:72:54:1e:40:c2:df:ad:44:5f:66:a2:ed:24:
33:c6:0b:bf:4c:ee:06:9f:39:7e:a4:00:51:b9:57:81:04:22:
60:2e:2f:2e
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUFs0RsVpAZfJL3ZUCKeMtrLv0czcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTAxMjIxOTM3NDBaFw0yNjAxMjExOTQyNDBaMDMxMTAvBgNV
BAMTKEY3NDUwN0I4Nzc3MDBFODIwQjZBQkI1MDkxNDk0QzAxMDlBRTMyMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1xjG32OiRDPysF63zvCfY0JEs
y8w0MGNHZw7CtI0he3uq/A5lVpYDvI1QW39jmiBd4K3QcLvTYYa8H1R5+nsOJPFf
FJ9SoGVpEKd9duh37N6Z9+9/oclAmWFi3FU+5/sVMfX6fOa7VGkeBOeunD2Bqscp
lgTpIG/3GwBWfqlhu++LygOBTnFpLSgAiD/p/nW4r1A/PnPKpb9Vgq7YFDvCiJ6d
bx8RwAJ2Ke+TcIDrtKY5LCR0wwbQ4sEOWf5B29BsSQs6ulbh8D62gj7gfH0kN3Nx
DbGWtplr2EavbXqBlZU6eeJTPSOBMYT5QQTuCfwIjt79fsmUo0acwBCLJNz1AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQU90UHuHdwDoILartQkUlMAQmuMiMwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEzNzA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyjI1MA0GCSqGSIb3DQEBCwUAA4IBAQBfD2zvGNoP
DnTPs6e19knRxJ0mipgpFojvmsd+e0l0Rm8LVzcB+pG5bWksphcKOvRscrnwLibh
3QrVEtC/v/NL/Q0PPeFSo/p/zj+Q7GX2qumQJWb3OaUFRnPWYiEjV0gPVwtWBwiu
ovUEtahcR+uLHg1NNS8CGE9/t9Z6hvLBOTCF9SaStN5dZGQopRs9DqRvxrPUfeTH
XIK2BlmWt5DoaFZMPKf1YBqdgiGTB4HsM835RDXnBGttVB06zhXQtAAWEDN/kzZw
1+TuWlR2yZ87Yglxhbcq6rDoItQERnJUHkDC361EX2ai7SQzxgu/TO4Gnzl+pABR
uVeBBCJgLi8u
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:41:26 2025 by rpki-client