Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: cgyTcATRb/R5zUtXYVst9+jS8Kj4WObb9pCQKBqhR5E=
Subject key identifier: 36:65:2B:6A:AB:7A:C0:CE:7F:0E:5B:0E:0D:67:E7:33:46:72:E2:B6
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 2250771A93EDCADE2FACBC461341B6B0E1BF9F01
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa
Signing time: Wed 09 Apr 2025 11:07:01 +0000
ROA not before: Wed 09 Apr 2025 11:02:01 +0000
ROA not after: Wed 08 Apr 2026 11:07:01 +0000
asID: 212238
IP address blocks: 64.50.188.0/22 maxlen: 22
67.210.96.0/22 maxlen: 22
172.245.102.0/24 maxlen: 24
192.228.124.0/23 maxlen: 23
209.200.252.0/24 maxlen: 24
216.227.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:50:77:1a:93:ed:ca:de:2f:ac:bc:46:13:41:b6:b0:e1:bf:9f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Apr 9 11:02:01 2025 GMT
Not After : Apr 8 11:07:01 2026 GMT
Subject: CN=36652B6AAB7AC0CE7F0E5B0E0D67E7334672E2B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:50:ca:25:44:bf:53:79:a4:92:c0:11:04:43:
5c:24:5f:ae:a3:5c:65:6e:b5:eb:8d:34:aa:f0:87:
7c:be:db:a8:46:56:a9:7a:02:ca:9f:93:17:c0:b0:
d2:9e:01:d2:b7:b0:42:14:68:e2:7e:72:5a:96:b2:
09:96:39:5c:ac:fe:f8:3f:c0:e3:ab:22:ec:4e:ec:
80:2c:41:c8:5b:41:1e:17:c6:1f:b4:a1:39:01:78:
c9:de:e6:63:f2:57:cc:c6:51:33:d6:5a:d4:7e:8f:
95:92:99:35:47:b5:43:5f:07:df:2c:0d:72:c6:2e:
02:03:35:bb:e2:46:13:7e:bf:13:b0:36:79:5c:6c:
9a:39:f4:4d:ac:7f:8a:1f:4f:49:6c:69:39:eb:b4:
39:62:40:72:18:4f:a2:7d:8b:33:51:36:0b:b6:60:
4c:61:37:be:d6:c4:24:3e:4e:54:74:5d:b5:57:76:
03:61:5c:84:10:b4:81:2c:47:bf:68:0f:61:39:86:
8f:3b:c5:29:3e:be:b8:f1:c3:cc:51:f2:e8:92:ef:
85:90:70:e0:8d:23:24:ea:ca:9b:3d:09:41:86:f6:
cb:3e:54:6e:84:3e:9b:bf:1b:08:27:56:48:ef:40:
2e:d5:cd:22:2a:65:46:ba:2e:93:bb:db:69:e4:61:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:65:2B:6A:AB:7A:C0:CE:7F:0E:5B:0E:0D:67:E7:33:46:72:E2:B6
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.50.188.0/22
67.210.96.0/22
172.245.102.0/24
192.228.124.0/23
209.200.252.0/24
216.227.208.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:57:2c:26:f7:ba:7e:12:69:35:b2:b4:4e:82:1f:b6:bc:df:
76:e1:6e:22:a5:65:f8:99:fe:c6:37:de:e1:00:8f:38:ef:53:
44:50:62:19:12:af:6c:5f:81:4a:4d:c9:4e:6b:c1:7f:4c:7e:
1c:e0:e4:4a:67:d6:35:cd:45:e0:b4:98:17:b9:9a:b8:f2:e7:
e1:b9:45:2f:63:b6:1d:8a:01:d2:50:13:69:ae:4c:8e:0d:52:
7c:8e:14:9a:5b:58:da:1c:92:6e:ca:28:bc:7c:38:94:ca:97:
81:4a:c5:af:b9:9f:08:a4:51:9d:0e:62:e7:1a:31:85:e9:7d:
03:64:c0:bf:a8:d1:d4:85:ea:6c:d2:61:7c:82:70:41:64:36:
ce:47:72:f2:4f:8e:f0:73:d1:8f:2c:8c:67:9e:78:c1:f7:12:
88:ea:03:c0:67:b2:66:5b:ae:ab:f4:da:fc:a1:89:f5:cb:91:
6c:f2:0a:a6:08:92:54:90:f5:67:5b:ef:28:ff:2b:ac:58:84:
e1:8a:02:de:e9:aa:52:d6:55:77:dd:e6:ec:57:d9:a0:07:cb:
cc:bd:c8:f7:19:c9:ab:4a:9c:51:3f:e2:d0:53:23:21:a8:60:
e5:5f:63:19:f3:b4:60:28:81:df:62:73:4a:ba:24:ea:92:27:
b0:e3:cf:51
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIUIlB3GpPtyt4vrLxGE0G2sOG/nwEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNDA5MTEwMjAxWhcNMjYwNDA4MTEwNzAx
WjAzMTEwLwYDVQQDEygzNjY1MkI2QUFCN0FDMENFN0YwRTVCMEUwRDY3RTczMzQ2
NzJFMkI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VDKJUS/U3mk
ksARBENcJF+uo1xlbrXrjTSq8Id8vtuoRlapegLKn5MXwLDSngHSt7BCFGjifnJa
lrIJljlcrP74P8DjqyLsTuyALEHIW0EeF8YftKE5AXjJ3uZj8lfMxlEz1lrUfo+V
kpk1R7VDXwffLA1yxi4CAzW74kYTfr8TsDZ5XGyaOfRNrH+KH09JbGk567Q5YkBy
GE+ifYszUTYLtmBMYTe+1sQkPk5UdF21V3YDYVyEELSBLEe/aA9hOYaPO8UpPr64
8cPMUfLoku+FkHDgjSMk6sqbPQlBhvbLPlRuhD6bvxsIJ1ZI70Au1c0iKmVGui6T
u9tp5GGzNQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFDZlK2qresDOfw5bDg1n5zNG
cuK2MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIxMjIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAkAyvAMEAkPSYAMEAKz1ZgMEAcDk
fAMEANHI/AMEAtjj0DANBgkqhkiG9w0BAQsFAAOCAQEAClcsJve6fhJpNbK0ToIf
trzfduFuIqVl+Jn+xjfe4QCPOO9TRFBiGRKvbF+BSk3JTmvBf0x+HODkSmfWNc1F
4LSYF7mauPLn4blFL2O2HYoB0lATaa5Mjg1SfI4UmltY2hySbsoovHw4lMqXgUrF
r7mfCKRRnQ5i5xoxhel9A2TAv6jR1IXqbNJhfIJwQWQ2zkdy8k+O8HPRjyyMZ554
wfcSiOoDwGeyZluuq/Ta/KGJ9cuRbPIKpgiSVJD1Z1vvKP8rrFiE4YoC3umqUtZV
d93m7FfZoAfLzL3I9xnJq0qcUT/i0FMjIahg5V9jGfO0YCiB32JzSrok6pInsOPP
UQ==
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net