Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa
File: AS215672.roa (raw, json)
Hash identifier: c2cqyP635XG2luOm6WZgXBuTNJB4Cz4Jm0u9jHa6fMQ=
Subject key identifier: 02:43:25:89:DE:8F:96:57:83:39:C2:37:AF:16:3C:30:ED:DA:44:2C
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 0D8E1190B384D631FD3C3A99741B4570C74F9AD0
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa
Signing time: Fri 28 Mar 2025 16:51:32 +0000
ROA not before: Fri 28 Mar 2025 16:46:32 +0000
ROA not after: Fri 27 Mar 2026 16:51:32 +0000
asID: 215672
IP address blocks: 23.94.129.0/24 maxlen: 24
74.50.4.0/24 maxlen: 24
162.213.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:8e:11:90:b3:84:d6:31:fd:3c:3a:99:74:1b:45:70:c7:4f:9a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Mar 28 16:46:32 2025 GMT
Not After : Mar 27 16:51:32 2026 GMT
Subject: CN=02432589DE8F96578339C237AF163C30EDDA442C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a2:9a:f8:91:b3:e9:74:e2:8c:98:3b:00:48:
0d:62:79:17:a6:82:f6:36:79:cd:75:df:74:e9:36:
3f:80:1d:b7:65:a2:32:a6:28:1a:8e:9c:de:5b:9c:
27:57:28:80:c9:21:ef:30:3e:3a:5d:2e:45:e0:d5:
24:1d:e3:78:9e:ed:a3:71:4d:d4:e0:b6:2d:e4:84:
be:91:6b:a6:7b:7f:c8:65:2c:f4:48:e5:dd:c2:fd:
2a:27:cf:af:f6:8f:49:6d:8c:76:c1:30:9c:ce:56:
83:55:ea:5b:01:a4:6b:91:a3:68:c5:c3:36:b8:6b:
2f:b1:e6:d2:14:76:d9:95:a4:a8:c6:e8:45:6c:64:
21:e7:97:84:20:d7:ad:1f:ed:17:6e:ab:76:0a:1f:
71:bc:a2:1c:52:a9:05:4d:52:d4:f6:00:a4:e0:9e:
01:26:28:b3:08:55:89:77:15:6e:f7:49:d4:39:1b:
df:a8:ac:11:ab:03:28:64:58:2d:72:89:70:9a:bc:
68:20:91:07:87:17:d9:69:7d:7e:5e:c2:ec:3d:d3:
85:b7:4e:5e:a5:86:cc:bf:20:a2:d9:2e:7d:58:71:
b2:9f:61:ed:a0:8f:35:e8:82:a2:70:24:2f:51:34:
08:a4:97:08:43:df:33:92:c5:9a:9b:43:88:60:4f:
5c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:43:25:89:DE:8F:96:57:83:39:C2:37:AF:16:3C:30:ED:DA:44:2C
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.94.129.0/24
74.50.4.0/24
162.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:86:64:f9:50:00:2c:bc:2d:e2:14:db:07:16:18:41:98:2c:
d8:f1:ba:4c:4d:e5:da:e7:fc:3a:89:de:5e:6b:8e:ec:aa:4f:
1d:1c:68:59:73:8e:6a:09:ca:08:ab:12:14:4a:a4:0d:f6:b6:
b9:0d:8b:9e:82:ef:8b:f9:a9:53:80:d9:f5:e8:f5:87:27:86:
4d:03:c5:28:ed:5f:a4:bb:19:bc:6b:47:1d:42:79:25:5e:6b:
1e:6b:38:b7:b0:f2:f1:e3:47:b3:63:9d:a0:d1:0e:ec:9d:03:
c0:ae:c9:d7:38:66:f3:42:71:a7:34:7e:fb:ae:ba:a8:8a:22:
ba:9f:47:15:a8:e3:4e:be:91:c6:f5:06:0b:dd:42:14:06:54:
e3:a8:16:85:ad:c9:5d:2d:b7:53:6a:ef:4a:50:9c:7a:94:2b:
2b:ad:28:14:54:e0:aa:99:02:16:52:86:cf:89:17:3f:cd:2b:
df:c4:5b:0c:42:9b:22:85:b5:7a:b8:21:2a:4d:79:2c:b1:8c:
f7:a0:05:22:ab:53:38:32:ec:60:0b:6c:60:60:ea:6b:3d:71:
c0:f7:58:9b:0b:e0:22:36:61:f9:2e:70:91:69:f4:10:ef:bb:
13:c4:90:b6:24:ad:94:be:4a:f6:81:5e:b3:29:24:05:00:a4:
9e:98:18:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net