Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: vw6ffiRbMFSsSSb/UrKltUmGmr7sznl0navo+Ait3H4=
Subject key identifier: F8:D4:54:D3:CF:A3:6C:18:92:64:52:5C:3D:77:1D:24:DA:79:62:15
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 0E805CA36E90BADB28EBEA86C96C62C9DFA4228D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa
Signing time: Fri 25 Oct 2024 00:01:54 +0000
ROA not before: Thu 24 Oct 2024 23:56:54 +0000
ROA not after: Fri 24 Oct 2025 00:01:54 +0000
asID: 212238
IP address blocks: 172.245.102.0/24 maxlen: 24
192.228.124.0/23 maxlen: 23
209.200.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:80:5c:a3:6e:90:ba:db:28:eb:ea:86:c9:6c:62:c9:df:a4:22:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Oct 24 23:56:54 2024 GMT
Not After : Oct 24 00:01:54 2025 GMT
Subject: CN=F8D454D3CFA36C189264525C3D771D24DA796215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:da:c6:80:c2:98:f5:42:14:18:05:c6:18:
e7:a2:2d:21:88:eb:ea:5a:12:f3:72:2f:69:e5:d2:
25:e8:01:e5:61:14:e0:ed:fb:c4:44:40:e4:f0:51:
27:d1:ea:76:45:a0:ae:81:a1:5c:fa:a9:c4:f4:65:
74:77:ac:dc:10:04:b8:0e:26:47:61:b3:15:39:cc:
2a:f6:4e:38:48:9f:3a:98:47:30:7f:83:f5:f8:36:
da:16:9a:08:0e:71:84:69:f6:fe:a0:44:77:fb:73:
cb:34:26:4f:2c:8e:22:7a:f3:b1:6f:f1:51:a7:c3:
e7:8f:d4:ed:76:c9:81:c0:5e:84:72:34:6c:c5:bb:
de:85:8b:44:cf:d6:61:4b:d6:87:94:7c:b3:e6:b0:
de:40:16:06:87:1c:68:23:98:ca:50:77:7c:54:b8:
c7:04:64:18:a0:97:37:05:c6:15:ca:50:2b:bf:70:
7b:d2:67:10:a0:51:28:20:f4:9e:c8:5c:f6:d2:db:
42:6d:1c:a6:f1:65:40:a2:18:db:2c:24:be:81:bc:
02:8f:c1:9b:e5:01:60:db:7b:b3:9d:86:bb:81:09:
19:83:e9:c1:04:d8:c4:91:39:7b:6a:c0:0a:c7:1a:
73:df:b3:66:d3:bd:40:ca:2f:05:38:a6:07:b4:25:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D4:54:D3:CF:A3:6C:18:92:64:52:5C:3D:77:1D:24:DA:79:62:15
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.245.102.0/24
192.228.124.0/23
209.200.234.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f5:5e:f5:de:37:40:dc:1d:1a:58:02:f1:7b:5f:45:05:25:
f8:33:f7:df:c3:21:55:c0:36:1e:51:79:78:4b:42:86:9d:f1:
a0:91:63:e2:26:fc:17:21:ef:f1:e3:d1:49:5e:b4:ed:f2:af:
d5:a4:2c:38:1d:d1:31:11:43:a8:14:de:31:df:ba:10:85:e7:
cf:87:0f:f8:74:e1:72:3d:ae:dd:38:d2:68:ad:95:c6:3d:16:
22:c4:f1:d1:3e:b3:f0:0f:30:96:2a:da:46:8c:67:44:0d:e6:
45:69:10:f5:7a:66:fb:2d:d1:f5:fe:5c:f9:cb:e3:f3:91:cb:
08:1c:89:19:a4:a1:ce:a1:5f:c9:27:53:d4:4e:c1:06:d4:3f:
f0:3c:dd:1f:d7:fc:b9:94:4d:28:61:59:b0:bc:87:5f:c4:7f:
70:be:b5:65:c9:58:0d:22:ec:95:f4:0f:44:a7:c3:39:f5:da:
cd:e5:8b:cf:a7:9c:3c:fc:d1:46:b5:4a:14:f0:23:43:6c:a2:
3c:5d:11:23:4a:8c:60:6b:02:e9:cd:24:71:08:00:3f:3f:43:
25:be:ee:22:4f:5e:53:61:f4:9b:1d:3e:5b:d7:cd:17:e8:11:
8b:58:bd:74:5a:16:05:70:64:63:f3:6c:77:b2:3d:7f:de:de:
7e:6e:ec:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:51:17 2025 by rpki-client