Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: T89orKNKkJWfPmwDKZv9GFbFhyxdPL/PDEXfcpwrbIU=
Subject key identifier: 9E:3D:D4:C3:44:00:99:89:B2:00:38:E7:84:C1:A8:E1:D2:2F:F7:3B
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 4C0840573EF7069472D8D8D0AB1D54E8194AE223
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS206092.roa
Signing time: Thu 30 Jan 2025 09:28:26 +0000
ROA not before: Thu 30 Jan 2025 09:23:26 +0000
ROA not after: Thu 29 Jan 2026 09:28:26 +0000
asID: 206092
IP address blocks: 104.234.32.0/24 maxlen: 24
104.234.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:08:40:57:3e:f7:06:94:72:d8:d8:d0:ab:1d:54:e8:19:4a:e2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 30 09:23:26 2025 GMT
Not After : Jan 29 09:28:26 2026 GMT
Subject: CN=9E3DD4C344009989B20038E784C1A8E1D22FF73B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:00:d8:20:4a:a3:e1:f0:78:43:b9:73:00:55:
4e:a9:97:ce:53:f6:8f:d9:52:cb:a5:fc:8d:20:92:
6e:62:46:e4:9d:cb:17:49:6b:bf:62:ca:a5:3b:4c:
d3:82:e5:88:c3:c4:ad:4a:27:35:b1:17:60:cf:b7:
37:e2:97:a5:24:da:49:e1:71:6f:a3:47:3e:71:7d:
4e:2c:da:39:28:2c:88:2c:83:0b:a1:0d:28:05:5c:
52:e6:65:ec:8b:5f:1f:d7:bf:90:35:ab:d0:95:71:
07:50:22:b2:c8:ff:3b:8f:4d:49:57:bb:f7:bf:6f:
ca:46:25:09:08:28:9f:66:ab:1c:53:08:5f:83:c7:
e0:38:40:5c:ac:ec:c5:1c:e1:e9:5b:65:b0:1f:13:
cc:8b:c0:1d:4d:1d:84:54:78:88:bd:ed:f5:b6:fb:
5a:72:d2:06:ac:c0:7b:51:c3:c1:5b:4c:3a:a2:c0:
ec:b8:53:5b:6e:be:3d:54:4c:1a:57:ae:97:78:65:
d7:65:a3:ea:1e:b7:67:16:38:0d:7f:d9:f6:25:59:
aa:52:12:e5:6f:6c:af:7f:95:59:de:d0:ce:4b:a5:
ea:e3:38:87:02:bb:2d:5e:ac:f0:e3:0e:bb:27:66:
29:20:e4:d4:bf:eb:78:ef:59:8a:50:f1:c6:3f:94:
7b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3D:D4:C3:44:00:99:89:B2:00:38:E7:84:C1:A8:E1:D2:2F:F7:3B
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.32.0/24
104.234.53.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d0:ca:fb:83:d2:f0:07:84:5d:19:32:89:2a:34:5c:25:21:
ce:00:df:97:67:b7:0e:73:35:b2:29:5b:a8:81:71:04:19:b2:
d4:94:ce:09:b3:51:5d:4f:3a:ed:b4:41:9f:9e:af:a0:b3:2a:
9e:a7:1a:3c:41:4f:1b:ff:6b:d3:c9:6b:d4:a0:1d:43:50:14:
69:b4:95:04:c9:e6:5b:42:b2:71:1a:30:48:46:76:9b:2a:a0:
ba:a4:24:bc:56:f3:ef:30:93:9e:d7:54:5e:d8:3f:f8:6a:c0:
b5:a5:76:fb:36:91:55:19:6b:95:7e:4c:f9:a1:8d:d4:41:95:
21:4f:7f:70:da:f0:ef:79:67:fe:24:82:f6:4c:ee:5d:4b:e5:
92:92:15:92:6a:0f:a6:a3:53:87:13:3c:2e:8a:01:bc:a3:41:
bd:43:27:72:a0:42:f9:ad:2e:80:56:31:88:8a:7e:d6:f1:2e:
e5:a9:96:11:d5:be:e3:f2:23:15:ab:5a:b4:ae:28:7c:64:c2:
a7:d9:c5:af:50:6d:30:89:4a:c0:f3:be:fa:be:34:6d:ba:31:
ec:d9:c9:8c:42:ca:79:0f:7d:60:37:95:00:49:6b:fa:5e:40:
e4:a1:30:b0:64:e3:f5:a2:d8:2e:12:4e:59:00:66:3c:5e:f9:
57:b5:9c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:27 2025 by rpki-client