Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215224.roa
File: AS215224.roa (raw, json)
Hash identifier: 86ST38ZmrT6xhi1p/Owc0sh8Vh0WmTY6zJmnYOAxmZc=
Subject key identifier: A2:69:05:35:99:BC:05:60:CB:6D:27:3D:B4:CB:8E:A9:89:DA:22:A7
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 58CE7B8089C98EF3AF5D52B0CCB4AA25FD88C51B
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215224.roa
Signing time: Tue 08 Apr 2025 11:25:39 +0000
ROA not before: Tue 08 Apr 2025 11:20:39 +0000
ROA not after: Tue 07 Apr 2026 11:25:39 +0000
asID: 215224
IP address blocks: 216.227.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ce:7b:80:89:c9:8e:f3:af:5d:52:b0:cc:b4:aa:25:fd:88:c5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Apr 8 11:20:39 2025 GMT
Not After : Apr 7 11:25:39 2026 GMT
Subject: CN=A269053599BC0560CB6D273DB4CB8EA989DA22A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:6d:7c:60:61:61:4a:de:d9:ea:bf:f1:5c:
39:b5:61:dc:24:99:68:fc:34:47:c1:6a:f1:39:e0:
30:f7:8d:eb:65:73:f9:37:87:ba:0a:42:be:10:37:
ab:c7:2f:67:ba:a0:1a:77:31:c1:72:0c:e5:cd:7d:
69:1b:1d:d4:02:da:17:74:c0:55:ef:da:f6:b9:af:
cb:b4:3d:67:4a:2b:e4:73:a9:71:15:75:63:4a:70:
47:62:94:0e:a5:82:0e:e5:29:9a:82:49:d1:08:0e:
c4:f5:0d:ca:fd:44:31:0b:dc:7d:98:44:cd:2e:df:
94:cb:02:27:a5:ee:e1:90:bb:88:2f:06:be:9b:5b:
8b:fa:5f:ca:70:26:69:a9:80:a7:85:a9:ae:71:65:
38:be:f0:a3:33:c4:d6:8f:8f:f6:f9:e8:91:05:8f:
a1:57:b1:81:14:3a:05:46:61:9e:7c:58:e1:a6:ff:
c5:01:27:df:51:73:6d:76:03:ff:22:e4:df:c4:40:
a3:e0:b5:69:ec:57:f7:48:ba:30:a3:8e:91:28:c1:
af:2e:0f:22:e6:80:d7:e7:86:c0:35:f3:7b:cc:39:
52:01:98:d6:0f:a5:1d:f6:76:54:f5:95:ce:4a:4f:
e3:48:70:25:d9:42:33:c5:fb:8e:71:a3:51:df:71:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:69:05:35:99:BC:05:60:CB:6D:27:3D:B4:CB:8E:A9:89:DA:22:A7
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.227.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:b0:aa:72:9f:8d:72:71:3d:00:79:ac:96:79:9b:5a:d9:ee:
30:88:90:ba:0d:79:3c:8b:b1:d0:57:31:03:f7:3e:54:78:0d:
bb:02:bd:4c:ff:31:e8:e3:09:98:17:ff:ef:c9:fb:65:94:db:
ef:5b:78:a0:b7:db:9f:8d:72:d3:eb:11:3c:5e:97:13:f6:17:
8b:ec:79:65:e8:36:02:e2:5e:1f:4c:e3:9e:2c:28:f2:1c:d6:
b7:da:e0:a2:db:cb:2b:e6:6b:d7:05:16:3b:fc:7d:8b:c2:07:
25:ea:eb:9d:c5:22:c1:61:f8:57:ca:8c:d8:fb:eb:45:f9:77:
39:09:46:fc:5e:54:33:3d:e4:e4:78:44:18:21:ab:25:ce:1a:
eb:b9:d9:7e:68:c1:cc:29:f5:05:15:b2:13:e6:01:e8:f4:0f:
0a:b6:6c:b6:5a:0a:f7:bc:9d:24:8e:38:5f:4f:92:a8:de:ca:
ba:c6:e1:ea:bc:7d:e8:b9:5f:51:6f:eb:c3:d6:62:9c:d9:fd:
ab:6a:7f:b5:bd:8a:db:77:aa:ed:a1:c7:e3:3e:d3:f5:ce:17:
e1:0b:ca:9e:3c:96:2a:0b:d0:63:7d:c1:5b:e5:85:9a:e1:f3:
07:6f:58:12:cb:4d:92:38:6d:65:b1:17:7c:e7:b9:5c:2d:5c:
c5:e3:50:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net