Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: g3staCusyhcL5cnCOroFzZDMSsJFOxFK2KRDkYHEYIQ=
Subject key identifier: 11:13:74:C9:D6:F4:64:94:5C:62:D9:B0:28:8C:5E:0B:B0:37:D4:DC
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 44B84D5A5FF0163C7166B6EF3A619B9AB0148880
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
Signing time: Wed 25 Dec 2024 00:00:05 +0000
ROA not before: Tue 24 Dec 2024 23:55:05 +0000
ROA not after: Wed 24 Dec 2025 00:00:05 +0000
asID: 174
IP address blocks: 104.234.12.0/24 maxlen: 24
206.53.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b8:4d:5a:5f:f0:16:3c:71:66:b6:ef:3a:61:9b:9a:b0:14:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 24 23:55:05 2024 GMT
Not After : Dec 24 00:00:05 2025 GMT
Subject: CN=111374C9D6F464945C62D9B0288C5E0BB037D4DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:30:a6:fb:85:ae:9a:6e:47:38:b0:f8:32:
67:8a:9e:ed:2e:ef:ac:06:24:ca:64:21:8c:2f:22:
8b:c5:17:de:25:7a:ed:6d:94:16:ad:04:4f:b5:a0:
1e:8b:b2:75:a5:98:c6:d2:fd:cf:8f:05:75:76:f9:
cb:e8:c2:a2:58:3a:8b:28:cb:66:e5:4c:6a:80:6b:
cb:0e:21:ff:ce:ff:6a:4a:94:dc:83:a4:28:86:0b:
5d:57:68:c9:64:a5:6c:d9:41:f2:9e:07:e6:3c:7f:
4e:93:f5:e5:c0:68:66:ef:fe:a1:d1:3e:2c:5d:99:
0c:d5:0f:32:a5:be:42:67:f4:79:03:08:6f:92:cf:
b7:66:37:83:56:dc:06:06:8c:f6:3b:ea:d6:e1:93:
42:f9:54:7a:2a:6d:58:91:6e:ea:a4:df:bc:fd:0f:
e9:04:ad:81:f9:33:25:4f:d5:cf:5c:27:c7:41:18:
56:57:8c:80:c0:61:cc:73:fb:08:91:2d:9b:b5:23:
55:47:da:e3:75:87:85:2f:8a:f8:52:45:77:b9:d3:
6b:eb:97:c3:f4:6f:ca:43:3e:b2:bf:11:39:68:6a:
84:a2:67:05:3c:ae:e4:b2:d0:2a:78:3d:ef:d0:a4:
62:4f:39:dc:37:ea:28:8e:29:f0:92:d3:c5:f1:fd:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:13:74:C9:D6:F4:64:94:5C:62:D9:B0:28:8C:5E:0B:B0:37:D4:DC
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.12.0/24
206.53.58.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:68:fd:97:51:9f:b4:92:29:d7:17:37:63:35:84:0e:ad:fb:
ca:07:a6:56:1d:31:ce:bf:5e:0e:d0:5a:e5:af:bb:92:40:a8:
ce:f4:77:39:9c:c4:9d:19:4d:66:e9:ef:b2:15:de:e4:4d:fa:
0e:8a:d3:ff:3e:7e:ae:14:35:f1:7d:48:44:28:e2:44:38:fc:
5a:64:04:b4:3f:dc:51:b2:c8:ed:7f:fe:7c:bf:1c:ea:a1:72:
47:68:42:75:43:8b:4f:08:83:ba:66:54:d4:38:11:18:f3:15:
81:6d:e7:97:6c:36:f3:8d:22:1a:cd:f4:d8:f7:cb:9f:22:05:
63:e8:dd:f5:64:46:1b:ee:15:17:b4:f3:0f:64:8e:24:3c:83:
83:7e:21:f2:8a:e0:a0:78:0b:0e:91:d8:fb:ca:49:26:d8:91:
e3:39:5b:7a:bd:4e:33:e4:81:c3:ce:aa:b3:0c:c9:fa:0d:42:
76:50:03:d8:5c:be:c7:7f:8d:47:54:ea:ad:af:09:9f:88:29:
56:1f:98:b4:5b:fe:93:a9:f9:f1:07:4c:3b:82:7d:a4:a6:1d:
80:f9:30:d5:c8:6b:35:02:c7:63:e0:74:a5:0e:ae:da:7b:2b:
be:20:96:c6:19:26:27:f5:d6:1c:73:ea:2b:02:3c:67:41:79:
07:62:69:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:55:40 2025 by rpki-client