Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS202015.roa
File: AS202015.roa (raw, json)
Hash identifier: I3D3zA5imb8vxXqPmkXb8e7JetPIr6JBS92y2ajquXY=
Subject key identifier: 7E:BC:8A:07:11:4D:E2:3A:65:06:FB:96:21:7C:5B:0C:9D:7D:E8:E2
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 1AC4A934A6287293D0B7DCE717A32C7B876736D8
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS202015.roa
Signing time: Fri 14 Mar 2025 10:28:26 +0000
ROA not before: Fri 14 Mar 2025 10:23:26 +0000
ROA not after: Fri 13 Mar 2026 10:28:26 +0000
asID: 202015
IP address blocks: 98.142.240.0/24 maxlen: 24
206.53.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c4:a9:34:a6:28:72:93:d0:b7:dc:e7:17:a3:2c:7b:87:67:36:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 14 10:23:26 2025 GMT
Not After : Mar 13 10:28:26 2026 GMT
Subject: CN=7EBC8A07114DE23A6506FB96217C5B0C9D7DE8E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:41:81:01:aa:2c:3c:5d:be:99:d6:1d:71:
ee:c2:40:36:42:dc:9f:f2:de:4d:43:79:7d:84:b0:
bc:4b:df:57:67:7e:43:78:39:07:98:1b:ba:79:96:
39:94:63:10:e3:1d:3c:26:57:37:c8:6c:67:91:c6:
f0:ce:43:cf:0d:ff:89:7f:56:54:0d:c8:fb:8f:43:
40:1e:e2:a4:9d:ce:01:19:4e:1f:bb:db:f9:9c:0b:
30:4d:08:ef:f5:5c:de:5d:85:4e:3b:13:a1:69:b9:
52:b3:23:44:c1:77:6f:f2:93:02:8f:83:89:c5:2d:
97:0d:1c:28:08:9a:95:05:60:fd:48:51:bf:c7:66:
55:f6:b1:b0:76:e1:d9:bb:57:3a:77:78:14:5d:fa:
f4:82:b7:f2:5c:3c:2f:e0:a1:e4:19:bf:37:b5:82:
27:2a:24:19:37:2c:ce:82:25:94:19:ba:c0:0c:6d:
6a:ea:3f:76:c0:2a:0c:0b:78:d8:f4:aa:b3:41:76:
12:62:8e:be:0c:52:54:32:20:bd:c1:5b:02:39:00:
7b:88:8a:0d:2b:4e:83:14:f0:e5:ce:a6:a0:dc:19:
37:ea:d0:95:fc:d0:80:af:72:f3:d7:89:77:1b:6a:
15:b0:94:ff:ff:44:eb:87:5a:bf:41:0a:91:e8:95:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BC:8A:07:11:4D:E2:3A:65:06:FB:96:21:7C:5B:0C:9D:7D:E8:E2
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS202015.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.240.0/24
206.53.48.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:6d:9c:c2:e1:72:48:c5:55:6f:6e:f1:8b:1d:0d:bd:91:b6:
09:01:21:64:13:af:39:62:dd:af:bb:82:b4:33:86:34:97:2d:
9f:55:80:bd:b8:f2:8e:1b:09:be:9d:34:76:ca:44:03:6b:ae:
59:79:a4:e7:95:c2:ea:f0:71:20:8c:02:4e:2a:ac:05:80:8a:
db:24:30:a3:83:57:f8:e8:c0:84:5c:92:df:66:5a:ab:b2:52:
0f:47:ed:83:ef:a6:e5:9c:9b:68:ec:3d:e2:48:7a:33:11:4e:
c2:0f:e5:89:18:3c:9f:bd:b6:ec:e0:1a:53:2d:b2:ab:20:42:
92:da:a8:7a:b5:f7:11:ac:5f:cc:74:dd:95:91:09:87:9f:df:
38:04:a1:05:0f:79:46:d8:5c:c8:4b:aa:cc:b5:ac:75:7d:37:
fa:b7:0c:db:8b:e3:09:ed:80:eb:27:b7:7b:6c:88:de:a7:bc:
0b:64:75:3c:fd:45:16:e5:ac:ff:6c:40:60:5d:e7:ef:a7:0d:
9f:d8:71:12:89:43:0a:ed:b1:d0:be:74:d9:79:b7:da:d1:b7:
7a:b2:09:5d:5e:41:ff:5e:bc:48:f3:82:49:21:a8:a5:79:c9:
5b:8f:34:d9:94:28:46:ef:78:f7:27:87:10:6a:4b:4c:c8:a3:
bc:92:52:e5
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUGsSpNKYocpPQt9znF6Mse4dnNtgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMzE0MTAyMzI2WhcNMjYwMzEzMTAyODI2
WjAzMTEwLwYDVQQDEyg3RUJDOEEwNzExNERFMjNBNjUwNkZCOTYyMTdDNUIwQzlE
N0RFOEUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJFBgQGqLDxd
vpnWHXHuwkA2Qtyf8t5NQ3l9hLC8S99XZ35DeDkHmBu6eZY5lGMQ4x08Jlc3yGxn
kcbwzkPPDf+Jf1ZUDcj7j0NAHuKknc4BGU4fu9v5nAswTQjv9VzeXYVOOxOhablS
syNEwXdv8pMCj4OJxS2XDRwoCJqVBWD9SFG/x2ZV9rGwduHZu1c6d3gUXfr0grfy
XDwv4KHkGb83tYInKiQZNyzOgiWUGbrADG1q6j92wCoMC3jY9KqzQXYSYo6+DFJU
MiC9wVsCOQB7iIoNK06DFPDlzqag3Bk36tCV/NCAr3Lz14l3G2oVsJT//0Trh1q/
QQqR6JV5bwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFH68igcRTeI6ZQb7liF8Wwyd
fejiMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzIwMjAxNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGKO8AMEAM41MDANBgkqhkiG9w0B
AQsFAAOCAQEAHG2cwuFySMVVb27xix0NvZG2CQEhZBOvOWLdr7uCtDOGNJctn1WA
vbjyjhsJvp00dspEA2uuWXmk55XC6vBxIIwCTiqsBYCK2yQwo4NX+OjAhFyS32Za
q7JSD0ftg++m5ZybaOw94kh6MxFOwg/liRg8n7227OAaUy2yqyBCktqoerX3Eaxf
zHTdlZEJh5/fOAShBQ95RthcyEuqzLWsdX03+rcM24vjCe2A6ye3e2yI3qe8C2R1
PP1FFuWs/2xAYF3n76cNn9hxEolDCu2x0L502Xm32tG3erIJXV5B/168SPOCSSGo
pXnJW4802ZQoRu949yeHEGpLTMijvJJS5Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net