Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215649.roa
File: AS215649.roa (raw, json)
Hash identifier: ZDZNOTmW7nFS6cwAgEFjjM2+2Shem6cvA7aO2qyLOKs=
Subject key identifier: 70:24:54:50:80:31:D6:6E:FD:20:6B:06:94:58:5C:EA:7A:98:34:F4
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 66076072EDFD6650123C9D7184827C7385579666
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215649.roa
Signing time: Tue 18 Feb 2025 06:03:27 +0000
ROA not before: Tue 18 Feb 2025 05:58:27 +0000
ROA not after: Tue 17 Feb 2026 06:03:27 +0000
asID: 215649
IP address blocks: 2a06:a007::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:07:60:72:ed:fd:66:50:12:3c:9d:71:84:82:7c:73:85:57:96:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 18 05:58:27 2025 GMT
Not After : Feb 17 06:03:27 2026 GMT
Subject: CN=702454508031D66EFD206B0694585CEA7A9834F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:d0:b4:51:49:59:29:f4:62:2d:4b:68:2b:
ab:d9:40:6b:17:71:0c:e4:da:82:b1:ec:7b:10:88:
65:0c:6e:78:98:d9:fe:4a:a7:f9:3e:f9:27:1e:ac:
db:c9:e2:cd:29:69:53:c2:f4:70:dd:91:64:86:c9:
34:5b:4f:cf:c7:40:d6:e3:06:50:c6:a4:ca:f6:56:
f5:ed:cb:66:ab:a0:05:a4:68:55:1e:af:da:d8:66:
d7:78:4e:60:7f:24:d1:5e:0d:f4:15:a4:71:6e:ff:
f7:e0:4e:e6:62:4b:f0:66:01:10:13:5c:21:31:a4:
01:ac:09:a7:8e:97:54:54:94:e8:07:c6:15:70:78:
f1:7a:f2:9f:bc:7e:9f:e7:72:96:2e:58:ec:53:33:
15:10:5d:c9:a1:7a:dd:21:92:a1:79:1b:97:9a:d5:
f8:c0:66:8f:d4:b3:53:72:dc:1d:3e:bc:1a:0a:11:
cb:2e:fd:c9:ce:a2:53:0c:36:09:9c:85:0d:77:a6:
64:1b:8c:50:8e:30:ee:ed:c4:a7:f4:1b:4f:6c:f9:
28:14:06:8e:ff:5f:8a:db:fa:45:c0:e0:ac:d7:0a:
c9:7e:31:ee:f9:51:83:c3:3a:3e:ce:15:d3:e2:03:
0f:76:c9:20:52:f4:46:ff:95:8d:f3:13:2a:29:f5:
fd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:24:54:50:80:31:D6:6E:FD:20:6B:06:94:58:5C:EA:7A:98:34:F4
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215649.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a007::/32
Signature Algorithm: sha256WithRSAEncryption
74:09:38:97:32:bd:93:15:fb:13:24:03:06:87:11:0b:c8:26:
38:71:99:0b:fd:fc:90:b1:7a:6f:8d:70:04:74:a4:ac:a6:27:
da:40:d1:f6:57:34:47:8e:70:51:72:27:0e:0e:6c:55:e5:77:
52:ec:c4:ea:bd:f8:8e:73:15:65:3f:eb:02:eb:c2:63:a5:b7:
d0:b1:a0:82:a0:0a:32:14:7c:06:d6:b1:6f:61:25:61:44:11:
4b:f3:09:70:26:71:0c:f4:09:4d:e3:e7:57:8e:8b:2c:c4:4f:
fa:dd:db:70:6b:b9:ed:fb:6b:6d:fb:2e:9a:44:d5:29:d0:42:
4b:8d:eb:94:3d:73:8b:1d:03:95:38:3e:ba:75:67:7a:02:66:
51:7c:b3:4a:80:d3:e2:a1:41:49:71:28:de:e6:ca:27:fc:57:
a7:41:42:c9:64:c1:ac:26:74:92:d6:fa:93:ea:fa:00:e9:17:
e8:94:33:ff:9c:ba:71:05:fe:0f:b2:e0:59:c9:db:5f:c6:25:
0a:09:88:6a:35:22:08:17:c1:0e:2b:c4:c5:8e:54:78:6f:f2:
c5:e0:93:40:1c:a4:60:9a:f8:57:15:5c:e0:be:a2:52:98:3c:
c5:b4:08:93:89:2f:12:8f:79:bf:a6:e9:86:b8:87:fe:5a:c9:
17:65:ef:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:41:27 2025 by rpki-client