Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS48266.roa
File: AS48266.roa (raw, json)
Hash identifier: ya8hIs0FRT5CGh1sQJeGScTbDZf0YdF3TDKtNbU2A+o=
Subject key identifier: 3F:0A:09:6E:97:3A:DC:19:8D:A1:04:0E:04:99:28:A0:B2:B0:70:7E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: D89517BA1A677B930EE5D27D5DF8BDB1A497B2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS48266.roa
Signing time: Wed 04 Dec 2024 22:25:12 +0000
ROA not before: Wed 04 Dec 2024 22:20:12 +0000
ROA not after: Wed 03 Dec 2025 22:25:12 +0000
asID: 48266
IP address blocks: 144.48.80.0/24 maxlen: 24
2a06:a005:90::/44 maxlen: 48
2a06:a005:a0::/44 maxlen: 48
2a06:a005:350::/44 maxlen: 48
2a06:a005:870::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d8:95:17:ba:1a:67:7b:93:0e:e5:d2:7d:5d:f8:bd:b1:a4:97:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 4 22:20:12 2024 GMT
Not After : Dec 3 22:25:12 2025 GMT
Subject: CN=3F0A096E973ADC198DA1040E049928A0B2B0707E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:94:ae:98:09:52:17:90:9c:41:77:09:75:
d7:b5:4a:0a:1c:1e:c3:e2:e6:ba:68:32:f7:b5:3a:
ee:3b:14:b2:83:98:24:b6:13:51:b3:ba:78:9d:45:
c1:27:b3:03:0f:75:ea:ac:d8:6c:a8:a0:58:7e:07:
23:d9:80:78:24:2f:aa:2c:3f:0c:09:ef:74:db:58:
65:8a:24:8c:ce:36:87:97:15:0c:0c:f2:90:8a:a1:
68:18:25:16:3b:ee:af:48:19:1f:f7:70:0e:63:a7:
0a:31:de:6a:83:92:4c:35:3d:1c:40:d4:63:21:57:
b5:ff:c4:b1:1b:96:9a:e5:50:62:21:54:9c:23:fa:
9c:ed:e8:2d:5c:4a:ff:7a:37:3d:b6:3d:09:1a:64:
10:c5:c6:03:49:52:af:ae:15:fe:1d:4d:88:f7:3b:
fb:3f:1f:d4:de:07:7c:05:51:92:b5:47:1a:73:0f:
3c:2a:a0:7b:1f:e7:df:49:f7:aa:bf:57:29:21:ad:
fb:d2:8a:20:9f:0d:49:47:47:7e:73:79:92:fb:3b:
12:3a:0a:7a:30:4e:e4:f9:df:f4:3f:a1:e5:4c:b3:
1e:6f:82:a7:d8:5a:5d:6c:ea:c2:11:4e:c6:23:02:
2d:10:86:11:8a:bb:1c:6c:eb:96:7e:b8:e0:c5:e3:
3f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0A:09:6E:97:3A:DC:19:8D:A1:04:0E:04:99:28:A0:B2:B0:70:7E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS48266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.80.0/24
IPv6:
2a06:a005:90::-2a06:a005:af:ffff:ffff:ffff:ffff:ffff
2a06:a005:350::/44
2a06:a005:870::/44
Signature Algorithm: sha256WithRSAEncryption
04:2f:51:f8:e3:5a:ed:7e:b4:51:7b:33:6a:6f:c9:72:3b:f5:
f4:f1:ae:19:5e:35:fd:00:81:cf:37:46:35:8c:d3:65:d1:46:
30:05:56:5a:7e:a6:a9:5b:63:d2:d7:f1:92:41:96:b0:df:d9:
bc:bf:f0:01:e6:78:aa:6c:3b:db:d7:b9:02:bc:da:4c:05:7f:
79:eb:bd:51:c0:ac:90:df:40:57:97:ae:07:99:a3:aa:48:f5:
e4:45:dd:2d:56:c6:4a:24:83:40:d4:dd:73:e9:2d:02:30:70:
88:f5:62:6c:62:b0:8a:af:f2:a1:a4:70:a8:ec:6a:57:4d:a7:
8d:a1:4b:21:63:9e:d7:d0:7b:4f:bb:2e:b4:b0:1c:cb:a6:34:
41:9d:28:9a:16:03:c9:7d:1b:86:40:c4:75:d3:82:9d:8c:91:
9f:f7:c2:38:fd:b2:e1:a8:18:11:31:6b:98:8c:d6:42:c2:c9:
ad:c2:5b:ea:93:be:e5:49:97:33:1e:ce:11:01:e4:b9:f6:5e:
d8:bc:21:3f:20:2d:47:c7:da:5e:b0:b3:88:ba:46:20:21:8b:
9a:0e:9b:29:d2:a0:c3:d1:7a:a5:0a:7c:a0:70:87:1c:0c:ab:
e5:1e:8b:21:b6:02:52:94:71:82:5a:0f:10:35:d4:1c:61:23:
82:a1:31:bc
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUANiVF7oaZ3uTDuXSfV34vbGkl7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDEyMDQyMjIwMTJaFw0yNTEyMDMyMjI1MTJaMDMxMTAvBgNV
BAMTKDNGMEEwOTZFOTczQURDMTk4REExMDQwRTA0OTkyOEEwQjJCMDcwN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFV5SumAlSF5CcQXcJdde1Sgoc
HsPi5rpoMve1Ou47FLKDmCS2E1GzunidRcEnswMPdeqs2GyooFh+ByPZgHgkL6os
PwwJ73TbWGWKJIzONoeXFQwM8pCKoWgYJRY77q9IGR/3cA5jpwox3mqDkkw1PRxA
1GMhV7X/xLEblprlUGIhVJwj+pzt6C1cSv96Nz22PQkaZBDFxgNJUq+uFf4dTYj3
O/s/H9TeB3wFUZK1RxpzDzwqoHsf599J96q/VykhrfvSiiCfDUlHR35zeZL7OxI6
CnowTuT53/Q/oeVMsx5vgqfYWl1s6sIRTsYjAi0QhhGKuxxs65Z+uODF4z+FAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQUPwoJbpc63BmNoQQOBJkooLKwcH4wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
NDgyNjYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTQYIKwYBBQUHAQcB
Af8EPjA8MAwEAgABMAYDBACQMFAwLAQCAAIwJjASAwcEKgagBQCQAwcEKgagBQCg
AwcEKgagBQNQAwcEKgagBQhwMA0GCSqGSIb3DQEBCwUAA4IBAQAEL1H441rtfrRR
ezNqb8lyO/X08a4ZXjX9AIHPN0Y1jNNl0UYwBVZafqapW2PS1/GSQZaw39m8v/AB
5niqbDvb17kCvNpMBX95671RwKyQ30BXl64HmaOqSPXkRd0tVsZKJINA1N1z6S0C
MHCI9WJsYrCKr/KhpHCo7GpXTaeNoUshY57X0HtPuy60sBzLpjRBnSiaFgPJfRuG
QMR104KdjJGf98I4/bLhqBgRMWuYjNZCwsmtwlvqk77lSZczHs4RAeS59l7YvCE/
IC1Hx9pesLOIukYgIYuaDpsp0qDD0XqlCnygcIccDKvlHoshtgJSlHGCWg8QNdQc
YSOCoTG8
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:39:24 2025 by rpki-client