Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: EwknD4DdPIVg8Cy0VEPtPOgz7AQl2Ljbb4h0UXxmjj8=
Subject key identifier: F3:54:AB:45:55:50:F2:5A:BB:06:3A:A7:02:C4:C2:76:2F:1D:A3:1E
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 099F85978EEAD8735D23CC309AE0EE8BBB3A0C3D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa
Signing time: Wed 27 Nov 2024 07:55:22 +0000
ROA not before: Wed 27 Nov 2024 07:50:22 +0000
ROA not after: Wed 26 Nov 2025 07:55:22 +0000
asID: 16509
IP address blocks: 104.234.13.0/24 maxlen: 24
104.234.137.0/24 maxlen: 24
104.234.141.0/24 maxlen: 24
104.234.143.0/24 maxlen: 24
104.234.160.0/24 maxlen: 24
104.234.175.0/24 maxlen: 24
104.234.187.0/24 maxlen: 24
104.234.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:9f:85:97:8e:ea:d8:73:5d:23:cc:30:9a:e0:ee:8b:bb:3a:0c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Nov 27 07:50:22 2024 GMT
Not After : Nov 26 07:55:22 2025 GMT
Subject: CN=F354AB455550F25ABB063AA702C4C2762F1DA31E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:26:fe:8f:1b:d9:d8:fa:4b:33:b4:f2:aa:83:
82:f9:33:f1:07:4c:bc:e8:73:23:1b:5d:24:eb:89:
20:ee:68:16:51:06:a6:ed:25:36:2c:eb:d5:c3:2b:
19:f4:7d:11:12:ce:4b:ed:42:f9:94:10:9e:ac:c9:
c0:eb:fd:74:f8:31:ff:2c:3a:83:fb:75:ee:23:72:
ab:f3:9c:19:bc:dd:e7:f1:28:0b:aa:6f:17:f0:f1:
63:12:05:cc:b0:c1:7c:98:66:ab:5d:3e:20:e7:1b:
0d:b7:43:ba:44:90:a7:04:88:78:fe:94:f3:9e:70:
24:56:9a:ab:be:95:6e:90:55:2b:35:52:35:f0:51:
87:f9:d8:cc:53:89:d2:67:bf:b1:28:13:8b:47:fa:
1a:40:89:38:2c:30:01:78:cc:dc:34:5c:05:69:42:
55:c1:85:ae:03:e0:f0:ae:57:2c:b2:14:67:d6:48:
31:b7:08:42:8d:8b:41:b7:cc:59:82:e6:60:af:dd:
bc:e5:12:ea:c7:0f:e1:37:bf:74:97:46:9d:f9:03:
bb:5f:2b:0e:3b:cb:fa:4e:28:f5:3d:ab:1c:82:8e:
4a:da:bd:2a:5d:ba:0d:d7:f2:5e:26:d7:2f:90:f4:
0d:e7:79:98:5d:44:9f:50:39:9a:cb:c7:d6:65:d8:
85:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:54:AB:45:55:50:F2:5A:BB:06:3A:A7:02:C4:C2:76:2F:1D:A3:1E
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.13.0/24
104.234.137.0/24
104.234.141.0/24
104.234.143.0/24
104.234.160.0/24
104.234.175.0/24
104.234.187.0/24
104.234.245.0/24
Signature Algorithm: sha256WithRSAEncryption
23:23:7e:df:25:0e:cc:00:fa:74:63:4a:6c:39:3a:58:6c:36:
5c:68:27:fb:13:d3:d9:78:5a:1f:29:f3:56:35:fa:9f:59:d5:
ea:09:4f:77:f4:98:be:67:3c:35:72:ab:5f:60:1f:6c:77:de:
a2:f9:20:5e:90:2e:93:82:df:ce:03:5a:d5:5b:21:51:b4:7b:
67:57:5d:5d:73:56:4b:35:ba:f0:48:a0:de:90:ba:70:5b:d8:
e2:20:94:e9:f7:91:93:38:8b:1e:d5:ff:4b:a4:c5:d7:1d:28:
d7:61:6e:71:22:72:e3:41:a7:ee:0f:6d:68:0b:13:20:57:0c:
5f:e1:71:7f:ce:4f:83:16:50:8c:27:d5:9e:fe:a3:77:0a:37:
11:81:2f:05:96:86:2f:53:02:a7:7f:e6:42:f7:ee:12:d6:3a:
fe:71:08:dd:fb:84:a6:15:21:1a:b0:7d:19:c9:90:e6:bb:a5:
91:68:3a:ca:6d:a6:2a:30:11:e4:f5:28:8d:aa:3e:67:a3:54:
37:47:3c:5d:a0:23:50:db:45:e6:c2:1a:a4:b4:b1:18:18:33:
c5:ab:7c:12:03:97:1d:90:22:09:7f:16:56:a3:0c:b8:de:f0:
8b:c3:4a:e1:47:02:89:c9:b0:13:d6:9a:16:e4:03:82:f3:58:
92:09:6d:1f
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIUCZ+Fl47q2HNdI8wwmuDui7s6DD0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMTI3MDc1MDIyWhcNMjUxMTI2MDc1NTIy
WjAzMTEwLwYDVQQDEyhGMzU0QUI0NTU1NTBGMjVBQkIwNjNBQTcwMkM0QzI3NjJG
MURBMzFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yb+jxvZ2PpL
M7TyqoOC+TPxB0y86HMjG10k64kg7mgWUQam7SU2LOvVwysZ9H0REs5L7UL5lBCe
rMnA6/10+DH/LDqD+3XuI3Kr85wZvN3n8SgLqm8X8PFjEgXMsMF8mGarXT4g5xsN
t0O6RJCnBIh4/pTznnAkVpqrvpVukFUrNVI18FGH+djMU4nSZ7+xKBOLR/oaQIk4
LDABeMzcNFwFaUJVwYWuA+DwrlcsshRn1kgxtwhCjYtBt8xZguZgr9285RLqxw/h
N790l0ad+QO7XysOO8v6Tij1Pascgo5K2r0qXboN1/JeJtcvkPQN53mYXUSfUDma
y8fWZdiFawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNUq0VVUPJauwY6pwLEwnYv
HaMeMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkG
CCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAaOoNAwQAaOqJAwQAaOqNAwQAaOqP
AwQAaOqgAwQAaOqvAwQAaOq7AwQAaOr1MA0GCSqGSIb3DQEBCwUAA4IBAQAjI37f
JQ7MAPp0Y0psOTpYbDZcaCf7E9PZeFofKfNWNfqfWdXqCU939Ji+Zzw1cqtfYB9s
d96i+SBekC6Tgt/OA1rVWyFRtHtnV11dc1ZLNbrwSKDekLpwW9jiIJTp95GTOIse
1f9LpMXXHSjXYW5xInLjQafuD21oCxMgVwxf4XF/zk+DFlCMJ9We/qN3CjcRgS8F
loYvUwKnf+ZC9+4S1jr+cQjd+4SmFSEasH0ZyZDmu6WRaDrKbaYqMBHk9SiNqj5n
o1Q3RzxdoCNQ20XmwhqktLEYGDPFq3wSA5cdkCIJfxZWowy43vCLw0rhRwKJybAT
1poW5AOC81iSCW0f
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:15 2025 by rpki-client