Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211440.roa
File: AS211440.roa (raw, json)
Hash identifier: +B+w+48pR4m+G3Giizzl3rgewdfwbdSmWh6eC5sViWY=
Subject key identifier: 31:FD:1A:85:ED:07:F3:41:29:4C:6D:12:AE:92:21:1E:C6:74:C8:58
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 4DB7A483B7E55858BC8ACDDEBFF296E557F24BD4
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211440.roa
Signing time: Mon 07 Apr 2025 13:11:46 +0000
ROA not before: Mon 07 Apr 2025 13:06:46 +0000
ROA not after: Mon 06 Apr 2026 13:11:46 +0000
asID: 211440
IP address blocks: 67.210.126.0/24 maxlen: 24
209.200.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b7:a4:83:b7:e5:58:58:bc:8a:cd:de:bf:f2:96:e5:57:f2:4b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Apr 7 13:06:46 2025 GMT
Not After : Apr 6 13:11:46 2026 GMT
Subject: CN=31FD1A85ED07F341294C6D12AE92211EC674C858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:7f:33:93:e6:84:24:04:00:7d:37:17:9f:
94:99:aa:b7:2c:7e:56:02:ef:20:01:29:2f:07:87:
a9:d9:c2:7f:86:c3:1b:7f:9d:c4:68:98:ec:9c:49:
2f:9c:09:9c:82:54:02:50:5f:06:32:e5:a5:e5:0f:
52:53:0b:3f:01:a3:92:d2:65:44:6f:80:31:ed:75:
b7:23:eb:40:87:4c:bb:cb:56:22:ee:0f:2f:d4:b2:
21:0a:18:f2:e2:76:e1:f1:e6:6a:c4:fd:d1:b9:9c:
83:5c:f4:8b:7a:8f:20:dd:30:1f:07:41:b0:89:1f:
a2:f3:d9:1c:12:24:f3:70:dd:64:85:c2:32:c8:fb:
35:88:ed:10:72:b0:b7:21:5d:0e:44:31:71:9a:fd:
25:b0:b2:7e:1b:39:36:3e:a0:ab:bf:c6:2b:71:a3:
fc:90:5e:81:de:5c:c4:dc:c3:5b:4d:c9:b7:ff:bc:
15:c1:9e:69:9c:96:26:3a:81:c1:2c:6e:f6:31:08:
fa:ec:c0:92:b0:63:7d:a5:2d:c4:50:e7:00:7f:a4:
d8:6f:7c:e2:96:27:3a:94:58:46:9d:63:22:6f:a2:
8f:96:a6:19:cb:9f:d6:ba:fe:35:54:cc:26:96:29:
d5:d7:95:8f:9b:f6:07:8f:df:9f:98:4f:05:29:1e:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FD:1A:85:ED:07:F3:41:29:4C:6D:12:AE:92:21:1E:C6:74:C8:58
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211440.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.210.126.0/24
209.200.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:09:ec:1d:44:68:51:eb:03:28:64:3f:1d:cd:78:aa:ea:c1:
b1:11:54:88:b7:a3:71:ca:0f:78:ac:bb:7f:68:77:37:2d:b2:
10:29:20:17:4a:b9:76:10:1e:5c:ac:5d:9a:b9:1a:50:4b:06:
84:e3:c4:4e:fa:8a:1a:32:c6:81:8a:6a:d3:73:12:88:39:e9:
8e:ce:aa:2a:09:fb:02:ef:c7:1a:08:1d:4e:bf:46:af:66:4b:
ad:2c:0e:59:75:42:45:5f:43:18:3c:1f:64:b7:89:8a:d3:02:
0b:3f:e8:c4:a1:2a:7c:ee:36:22:b4:cb:8e:9e:69:3b:81:be:
e0:c9:7c:48:aa:96:8a:b4:95:29:d3:6f:e8:b2:12:61:78:fe:
6e:c0:b8:3b:ad:64:64:5c:c6:50:cd:d9:74:93:01:42:da:e8:
89:f2:a4:91:ed:18:27:43:6c:7e:4e:2e:cf:17:cc:f5:92:9a:
89:0b:22:94:5d:7f:4d:53:85:02:d0:6f:1b:e2:70:4f:07:76:
a1:79:34:74:e3:7c:ae:76:fe:97:a0:41:d1:a5:5a:3e:9d:24:
41:98:26:94:41:f9:d7:95:64:94:dc:df:36:1c:e1:fd:7e:66:
7e:6e:af:2e:27:88:97:ab:0a:1d:f3:a2:cb:a1:b9:05:1c:eb:
cd:67:3b:86
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUTbekg7flWFi8is3ev/KW5VfyS9QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNDA3MTMwNjQ2WhcNMjYwNDA2MTMxMTQ2
WjAzMTEwLwYDVQQDEygzMUZEMUE4NUVEMDdGMzQxMjk0QzZEMTJBRTkyMjExRUM2
NzRDODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hJ/M5PmhCQE
AH03F5+Umaq3LH5WAu8gASkvB4ep2cJ/hsMbf53EaJjsnEkvnAmcglQCUF8GMuWl
5Q9SUws/AaOS0mVEb4Ax7XW3I+tAh0y7y1Yi7g8v1LIhChjy4nbh8eZqxP3RuZyD
XPSLeo8g3TAfB0GwiR+i89kcEiTzcN1khcIyyPs1iO0QcrC3IV0ORDFxmv0lsLJ+
Gzk2PqCrv8YrcaP8kF6B3lzE3MNbTcm3/7wVwZ5pnJYmOoHBLG72MQj67MCSsGN9
pS3EUOcAf6TYb3zilic6lFhGnWMib6KPlqYZy5/Wuv41VMwmlinV15WPm/YHj9+f
mE8FKR6G6wIDAQABo4IChTCCAoEwHQYDVR0OBBYEFDH9GoXtB/NBKUxtEq6SIR7G
dMhYMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIxMTQ0MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAEPSfgMEANHI/TANBgkqhkiG9w0B
AQsFAAOCAQEAXQnsHURoUesDKGQ/Hc14qurBsRFUiLejccoPeKy7f2h3Ny2yECkg
F0q5dhAeXKxdmrkaUEsGhOPETvqKGjLGgYpq03MSiDnpjs6qKgn7Au/HGggdTr9G
r2ZLrSwOWXVCRV9DGDwfZLeJitMCCz/oxKEqfO42IrTLjp5pO4G+4Ml8SKqWirSV
KdNv6LISYXj+bsC4O61kZFzGUM3ZdJMBQtroifKkke0YJ0Nsfk4uzxfM9ZKaiQsi
lF1/TVOFAtBvG+JwTwd2oXk0dON8rnb+l6BB0aVaPp0kQZgmlEH515VklNzfNhzh
/X5mfm6vLieIl6sKHfOiy6G5BRzrzWc7hg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net