Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214768.roa
File: AS214768.roa (raw, json)
Hash identifier: 5F3+u0L6V9oipTd/hEu6zYWPNEPPQn0qV8Ad70mmfLQ=
Subject key identifier: AF:18:18:D1:2C:AA:0F:0E:94:E3:20:15:2F:AB:56:26:E0:B4:48:AB
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 734814C5AE30B37B5C50B41DC408C3194EE413D5
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214768.roa
Signing time: Thu 23 Jan 2025 22:30:04 +0000
ROA not before: Thu 23 Jan 2025 22:25:04 +0000
ROA not after: Thu 22 Jan 2026 22:30:04 +0000
asID: 214768
IP address blocks: 194.58.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:48:14:c5:ae:30:b3:7b:5c:50:b4:1d:c4:08:c3:19:4e:e4:13:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 23 22:25:04 2025 GMT
Not After : Jan 22 22:30:04 2026 GMT
Subject: CN=AF1818D12CAA0F0E94E320152FAB5626E0B448AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:34:e1:c4:99:11:a2:c2:85:3f:1e:48:63:
ec:b2:ea:ca:88:78:af:15:51:f0:7d:da:b0:3e:8a:
b3:61:a0:a1:70:2e:d9:c4:c6:2b:13:14:40:05:0b:
25:bc:af:de:02:3f:89:e8:fb:68:a4:a4:92:7a:7f:
3b:10:d7:7e:b5:22:5f:42:22:11:12:f4:6f:3d:c1:
9e:61:78:f4:4f:5b:23:e9:9e:2b:29:dc:63:c8:18:
e5:ef:0c:7a:b2:2e:da:01:f0:34:61:0b:7a:e7:19:
ad:39:aa:1b:b6:bb:5b:b9:29:b4:3a:00:c2:4c:b2:
35:bf:b3:97:fd:db:f9:e1:33:04:18:d2:04:c5:e7:
ce:46:39:62:8f:14:9e:d5:57:03:cd:d2:92:84:d8:
7c:2b:d7:cf:d7:cd:5e:f2:ea:ae:35:44:90:c7:e8:
4e:11:ec:06:a6:39:75:21:2f:8b:79:c9:62:74:1f:
05:ca:cf:b5:99:ab:c7:7f:dc:a3:7a:22:2b:9e:0a:
b9:c9:6e:99:41:ba:4a:73:0a:b7:97:a7:98:c3:98:
8b:94:d0:82:d8:77:7a:31:86:1c:0a:bf:2a:1b:d4:
55:15:6b:86:39:05:88:77:08:a3:0c:ae:e2:a4:26:
79:e8:c9:df:f2:41:da:38:f3:dd:c1:14:07:b1:e9:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:18:18:D1:2C:AA:0F:0E:94:E3:20:15:2F:AB:56:26:E0:B4:48:AB
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.65.0/24
Signature Algorithm: sha256WithRSAEncryption
68:59:95:f7:f5:c0:ca:f4:cc:de:4a:bf:23:1c:43:04:3d:54:
e7:80:f5:61:3d:e2:ab:85:67:f0:c2:02:aa:3c:92:21:4b:a9:
59:0f:49:9b:cb:7c:58:17:2b:5e:cd:db:87:8c:c4:0a:fb:b0:
6a:c1:ba:79:61:fc:a1:cb:27:46:57:d0:4f:a4:fd:72:39:ac:
40:71:0a:87:c2:33:16:c2:c7:b7:7d:fd:0c:8d:ce:95:8a:03:
51:e7:b9:bc:53:70:88:d0:fc:c8:4c:1a:01:71:7e:9c:bf:33:
5e:02:8a:2b:ef:69:63:18:35:f1:11:5b:19:67:54:17:a9:76:
fe:ee:1e:9d:5b:4a:07:28:a4:8e:c3:75:30:bb:15:17:14:5b:
72:b8:54:1a:31:02:65:be:8b:9a:cf:98:28:23:dd:9a:87:14:
fb:d9:fa:f2:81:2a:9b:0c:ad:3a:f9:92:c1:5d:dd:09:93:7c:
77:b0:7d:eb:98:fa:60:21:73:5f:7b:1b:a7:40:5e:66:b2:93:
30:7f:33:27:73:aa:85:a3:bc:02:bb:7c:58:c9:a1:df:66:ad:
86:a4:15:f3:7c:bf:2a:15:ae:83:10:af:1f:ca:a2:72:a2:bb:
51:77:0e:e9:bb:95:f7:d1:a8:18:29:71:98:74:6e:e0:f0:11:
1f:8b:af:ad
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUc0gUxa4ws3tcULQdxAjDGU7kE9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTAxMjMyMjI1MDRaFw0yNjAxMjIyMjMwMDRaMDMxMTAvBgNV
BAMTKEFGMTgxOEQxMkNBQTBGMEU5NEUzMjAxNTJGQUI1NjI2RTBCNDQ4QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjTThxJkRosKFPx5IY+yy6sqI
eK8VUfB92rA+irNhoKFwLtnExisTFEAFCyW8r94CP4no+2ikpJJ6fzsQ1361Il9C
IhES9G89wZ5hePRPWyPpnisp3GPIGOXvDHqyLtoB8DRhC3rnGa05qhu2u1u5KbQ6
AMJMsjW/s5f92/nhMwQY0gTF585GOWKPFJ7VVwPN0pKE2Hwr18/XzV7y6q41RJDH
6E4R7AamOXUhL4t5yWJ0HwXKz7WZq8d/3KN6IiueCrnJbplBukpzCreXp5jDmIuU
0ILYd3oxhhwKvyob1FUVa4Y5BYh3CKMMruKkJnnoyd/yQdo4893BFAex6ZMXAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUrxgY0SyqDw6U4yAVL6tWJuC0SKswHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjE0NzY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAwjpBMA0GCSqGSIb3DQEBCwUAA4IBAQBoWZX39cDK
9MzeSr8jHEMEPVTngPVhPeKrhWfwwgKqPJIhS6lZD0mby3xYFytezduHjMQK+7Bq
wbp5YfyhyydGV9BPpP1yOaxAcQqHwjMWwse3ff0Mjc6VigNR57m8U3CI0PzITBoB
cX6cvzNeAoor72ljGDXxEVsZZ1QXqXb+7h6dW0oHKKSOw3UwuxUXFFtyuFQaMQJl
vouaz5goI92ahxT72frygSqbDK06+ZLBXd0Jk3x3sH3rmPpgIXNfexunQF5mspMw
fzMnc6qFo7wCu3xYyaHfZq2GpBXzfL8qFa6DEK8fyqJyortRdw7pu5X30agYKXGY
dG7g8BEfi6+t
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:16:48 2025 by rpki-client