Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151106.roa
File: AS151106.roa (raw, json)
Hash identifier: X1iRZyS4+V+L5w8VpoDvQZc0umD7sG5Ft9OJ2aAcWW8=
Subject key identifier: C6:AF:68:64:A3:68:6A:70:55:13:94:DE:88:5B:BA:E6:D3:94:9F:7D
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 29D38BB708CB6BDAF3D21494365B554565D668C7
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151106.roa
Signing time: Tue 21 Jan 2025 00:01:56 +0000
ROA not before: Mon 20 Jan 2025 23:56:56 +0000
ROA not after: Tue 20 Jan 2026 00:01:56 +0000
asID: 151106
IP address blocks: 104.234.82.0/24 maxlen: 24
104.234.104.0/24 maxlen: 24
104.234.211.0/24 maxlen: 24
104.234.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d3:8b:b7:08:cb:6b:da:f3:d2:14:94:36:5b:55:45:65:d6:68:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 20 23:56:56 2025 GMT
Not After : Jan 20 00:01:56 2026 GMT
Subject: CN=C6AF6864A3686A70551394DE885BBAE6D3949F7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:94:d9:ae:fc:85:a8:21:d5:2b:87:be:0f:
c9:54:ec:06:33:6d:9d:ff:04:cd:ba:a6:06:18:4b:
5c:98:cc:6d:7a:a2:bc:78:f3:4c:1b:a8:a7:3a:88:
d3:61:22:2b:c4:88:1b:0e:47:f0:37:b1:24:61:38:
18:df:d9:d3:c1:60:ea:89:8a:12:0d:22:71:b6:09:
4b:cd:e3:40:03:74:34:73:c8:e2:8f:de:41:90:75:
5b:61:59:bb:bb:68:b8:92:3e:09:20:b1:e4:95:4c:
64:cc:e5:89:96:e7:08:d5:22:50:74:9d:2b:d4:d1:
a6:c5:0f:4a:05:91:3d:d6:e8:c3:8c:5e:21:04:2f:
44:d2:1b:68:72:c4:c9:da:65:0e:7c:9e:cc:70:fe:
cf:15:f9:10:19:61:b9:d1:f3:de:93:e1:02:fb:d9:
db:23:fc:28:91:08:8c:56:d3:14:fc:eb:e7:73:b4:
ac:5d:a6:02:e0:4a:dc:72:b0:3a:3e:cc:81:76:4f:
e5:e9:64:ef:1e:0f:a2:72:37:02:94:c8:30:ee:d4:
3a:da:1a:1d:37:d3:5b:46:09:c7:17:20:01:0d:ad:
56:cd:5f:de:0b:f5:20:05:8e:50:72:50:a9:08:cb:
46:84:f4:32:78:bd:d4:11:2e:e3:67:97:09:b1:55:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AF:68:64:A3:68:6A:70:55:13:94:DE:88:5B:BA:E6:D3:94:9F:7D
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151106.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.82.0/24
104.234.104.0/24
104.234.211.0/24
104.234.215.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:0f:cc:c0:91:ec:a3:40:d6:3d:00:3d:32:2c:fd:e3:0c:47:
cd:f9:b9:fd:e4:23:34:9d:ea:63:9e:57:be:bb:b3:02:9f:e1:
96:eb:6d:22:dc:06:6b:a6:9f:a5:d4:b3:c5:9f:6d:12:b3:0f:
47:aa:c8:ee:d2:25:fc:d6:11:62:4c:2f:83:ad:bc:23:8d:72:
1e:70:97:89:c2:ac:f6:15:f9:7f:79:cb:5a:56:63:0e:c8:af:
0b:8c:8f:b6:42:3e:8b:98:24:28:f3:de:9e:e8:0b:59:2d:af:
41:be:93:fc:e9:85:fb:70:95:13:87:4a:4c:fe:6c:2e:12:1f:
6b:0c:2a:7b:5e:1a:7d:be:a0:97:97:51:1b:2c:79:79:ec:8e:
ac:ca:ff:da:4e:88:74:2e:9a:2e:a6:e3:d1:60:c2:f6:30:64:
7e:1a:06:00:f3:3d:84:3d:e5:2d:7b:2e:cf:39:4e:f2:38:8c:
d3:13:b5:5a:4b:df:2c:65:3d:12:5c:01:14:7d:ac:51:38:7e:
3d:cb:9e:c2:b5:89:99:22:42:c4:c8:de:45:37:c3:e4:81:e9:
ec:6c:cb:37:e0:0b:07:69:e6:f9:bb:b0:51:21:e9:fd:ea:78:
03:1b:70:5e:74:fb:5c:98:19:fa:70:64:33:75:3d:50:60:28:
d6:ab:e6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:24 2025 by rpki-client