Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209242.roa
File: AS209242.roa (raw, json)
Hash identifier: +4K1F9mQ3db7S4Ne3QWxYjhxxuYjXIhmmv+pyHUhyMs=
Subject key identifier: C6:C7:83:51:F5:AD:70:D3:04:FF:18:9E:0B:D9:F9:D9:CF:5A:2D:9D
Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial: 5537E9BFBEEC3EC2953D1EB4D486EB6F05DC67C2
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209242.roa
Signing time: Fri 15 Nov 2024 18:38:36 +0000
ROA not before: Fri 15 Nov 2024 18:33:36 +0000
ROA not after: Fri 14 Nov 2025 18:38:36 +0000
asID: 209242
IP address blocks: 66.225.252.0/24 maxlen: 24
204.93.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:37:e9:bf:be:ec:3e:c2:95:3d:1e:b4:d4:86:eb:6f:05:dc:67:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Validity
Not Before: Nov 15 18:33:36 2024 GMT
Not After : Nov 14 18:38:36 2025 GMT
Subject: CN=C6C78351F5AD70D304FF189E0BD9F9D9CF5A2D9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:a4:62:c8:c9:13:a3:7b:cd:73:c6:f4:d4:
00:99:16:8c:a1:72:e8:f8:f8:0a:b3:90:b4:4e:c1:
52:dc:28:d0:f0:fa:96:e2:50:bc:7a:19:6e:47:38:
7b:c2:40:84:62:da:f3:12:16:fe:9f:59:b8:58:86:
1a:f3:d2:4c:8f:2d:8e:56:ce:5f:b0:e5:7a:b9:dc:
8b:b4:fb:33:19:a5:7f:89:3b:06:c8:8e:de:84:49:
68:19:a9:88:11:dd:10:04:3b:71:71:11:41:35:45:
d5:f4:fe:ed:ec:c5:2d:97:a3:78:69:94:49:f3:58:
fe:aa:4e:dd:52:55:b9:c5:f1:00:38:27:71:21:45:
7e:82:9b:98:21:da:21:4a:20:11:37:91:b5:81:1f:
ae:fc:43:d4:c2:8e:9e:69:f4:b0:6e:50:58:17:17:
e6:44:34:58:84:f7:6d:5f:b2:cb:7d:88:56:dd:db:
b0:b8:b1:4a:b5:5d:64:6e:7b:9d:b1:f3:a2:52:a8:
00:60:2c:59:db:3f:f0:24:e6:8b:90:62:1a:e6:3e:
fe:4d:e5:3f:75:5f:c6:2a:78:1e:68:3f:fd:db:04:
23:1c:e5:b4:db:85:ed:cf:67:5f:12:a2:06:60:55:
93:18:a9:2c:18:ea:c2:5f:f2:ea:48:5f:cd:c4:24:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C7:83:51:F5:AD:70:D3:04:FF:18:9E:0B:D9:F9:D9:CF:5A:2D:9D
X509v3 Authority Key Identifier:
keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.252.0/24
204.93.210.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ae:f9:57:d5:31:7e:aa:e0:06:71:98:f2:aa:ca:fe:52:a9:
e0:7e:aa:93:e9:c5:0d:17:e6:5f:75:ec:04:e2:10:bf:59:28:
a7:b5:e3:d8:51:e6:c6:c6:f9:1b:3c:8a:bd:70:e9:2d:66:99:
9c:56:40:28:93:eb:0e:9b:0f:34:71:76:75:ca:36:98:e1:24:
2c:59:26:89:ee:56:66:38:4b:ad:0e:42:7e:f9:27:63:91:39:
ca:9d:06:37:22:67:da:f2:e9:65:0c:94:2b:a9:37:c8:ba:8d:
e7:2e:47:d1:8b:ed:5e:dc:ee:32:bf:c7:d7:7d:87:41:f0:a1:
14:05:28:3f:56:a5:bd:4c:57:16:f9:63:b0:61:3c:b7:0b:a6:
62:eb:c4:43:33:5b:30:a1:17:6a:2c:9c:c1:0b:3a:32:f3:52:
ce:80:df:f5:6c:65:e6:68:ac:73:df:49:41:fd:8f:22:76:dc:
8c:81:cd:38:e5:f4:0b:31:04:88:c0:4f:17:e3:0d:b0:5c:73:
5e:8f:cd:9d:7b:f1:cb:a3:32:da:db:64:97:d2:c0:af:6e:e6:
32:b6:36:a9:a9:e3:b2:b4:85:6f:ed:05:a6:1c:c7:d0:a7:25:
8b:69:c0:c5:35:23:11:fa:90:aa:a9:1a:a8:e0:8b:17:34:68:
5b:e9:cb:1c
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUVTfpv77sPsKVPR601IbrbwXcZ8IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjQxMTE1MTgzMzM2WhcNMjUxMTE0MTgzODM2
WjAzMTEwLwYDVQQDEyhDNkM3ODM1MUY1QUQ3MEQzMDRGRjE4OUUwQkQ5RjlEOUNG
NUEyRDlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wqkYsjJE6N7
zXPG9NQAmRaMoXLo+PgKs5C0TsFS3CjQ8PqW4lC8ehluRzh7wkCEYtrzEhb+n1m4
WIYa89JMjy2OVs5fsOV6udyLtPszGaV/iTsGyI7ehEloGamIEd0QBDtxcRFBNUXV
9P7t7MUtl6N4aZRJ81j+qk7dUlW5xfEAOCdxIUV+gpuYIdohSiARN5G1gR+u/EPU
wo6eafSwblBYFxfmRDRYhPdtX7LLfYhW3duwuLFKtV1kbnudsfOiUqgAYCxZ2z/w
JOaLkGIa5j7+TeU/dV/GKngeaD/92wQjHOW024Xtz2dfEqIGYFWTGKksGOrCX/Lq
SF/NxCTXnwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFMbHg1H1rXDTBP8YngvZ+dnP
Wi2dMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzIwOTI0Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAELh/AMEAMxd0jANBgkqhkiG9w0B
AQsFAAOCAQEAcq75V9UxfqrgBnGY8qrK/lKp4H6qk+nFDRfmX3XsBOIQv1kop7Xj
2FHmxsb5GzyKvXDpLWaZnFZAKJPrDpsPNHF2dco2mOEkLFkmie5WZjhLrQ5Cfvkn
Y5E5yp0GNyJn2vLpZQyUK6k3yLqN5y5H0YvtXtzuMr/H132HQfChFAUoP1alvUxX
FvljsGE8twumYuvEQzNbMKEXaiycwQs6MvNSzoDf9Wxl5misc99JQf2PInbcjIHN
OOX0CzEEiMBPF+MNsFxzXo/NnXvxy6My2ttkl9LAr27mMrY2qanjsrSFb+0FphzH
0Kcli2nAxTUjEfqQqqkaqOCLFzRoW+nLHA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:06 2025 by rpki-client