Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa
File: AS214024.roa (raw, json)
Hash identifier: y68wB6bjWzd9kAiLK29jhNbxxqzLHDtIRBFQqbX5eOg=
Subject key identifier: 9B:5D:87:05:8E:B5:2D:ED:EF:9C:16:60:08:FB:A0:84:77:82:E1:89
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 1B817ED1CF068DD44D2D0088D035FDD5FDDC4B6A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa
Signing time: Thu 16 Jan 2025 00:01:58 +0000
ROA not before: Wed 15 Jan 2025 23:56:58 +0000
ROA not after: Thu 15 Jan 2026 00:01:58 +0000
asID: 214024
IP address blocks: 104.234.107.0/24 maxlen: 24
104.234.158.0/24 maxlen: 24
104.234.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:81:7e:d1:cf:06:8d:d4:4d:2d:00:88:d0:35:fd:d5:fd:dc:4b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 15 23:56:58 2025 GMT
Not After : Jan 15 00:01:58 2026 GMT
Subject: CN=9B5D87058EB52DEDEF9C166008FBA0847782E189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:fc:8b:cb:5e:19:1c:6e:ea:7e:b8:41:22:
0b:5f:d2:ce:1c:90:88:19:24:30:7e:80:0b:dc:4e:
27:4c:df:47:55:55:bc:ac:a1:32:fb:3c:d2:78:51:
dc:f6:cb:d6:39:4c:c5:85:a1:e2:0f:40:4b:0d:64:
e8:f0:22:a5:fe:86:31:32:72:f4:cc:d9:69:fc:ad:
3a:be:fb:27:aa:27:28:f4:04:52:85:30:8a:ff:1c:
9b:f6:d8:9a:7a:13:b2:de:6d:8e:89:46:01:c3:ad:
78:11:ae:aa:bc:a3:0c:4d:c5:bc:8b:6d:53:cd:d7:
ed:a8:22:c4:41:e9:d8:b9:20:bb:d3:48:ab:fd:6c:
7a:5e:78:5d:63:f4:2f:ac:fd:ac:3a:51:0a:de:41:
c3:cd:92:0a:2f:39:f5:b6:ef:d9:d9:41:0e:de:70:
bd:0a:a4:2d:9d:74:e9:9a:a2:df:02:9e:0b:dd:64:
32:b4:bb:77:ef:18:a3:56:22:c0:8b:62:2a:d2:36:
96:c5:58:83:c5:6f:28:fd:3d:6d:f6:43:fe:ea:3c:
7b:f0:98:b1:e1:ea:fa:4e:06:1a:df:c1:40:f9:93:
eb:8c:e6:31:8a:28:ac:e9:3f:ab:15:51:f1:a1:a3:
b1:c5:aa:98:7b:68:65:c6:bd:eb:d5:3c:08:7c:a6:
b5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5D:87:05:8E:B5:2D:ED:EF:9C:16:60:08:FB:A0:84:77:82:E1:89
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.107.0/24
104.234.158.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:70:d3:8a:f8:ae:98:93:2c:64:bd:a7:54:06:10:5a:fe:7c:
07:8f:09:d9:dd:19:af:db:57:51:5b:a3:ef:d8:2a:f1:9a:22:
db:67:47:cb:95:6e:cd:c6:21:52:25:10:16:dd:76:f4:6d:c5:
44:f0:81:9b:7f:80:c8:18:b6:d6:bc:63:7c:2f:8a:4e:08:97:
c5:8a:59:2f:8b:29:6c:2e:2b:8b:94:93:8b:64:94:43:9e:1d:
64:f4:0c:d9:3c:ef:56:00:47:0c:d8:ed:3b:42:f1:00:d8:17:
f4:ca:19:ed:c7:c2:44:99:cd:42:d6:cd:37:14:cc:38:20:92:
ab:3d:b3:bd:3a:5c:de:4f:48:02:0a:9f:6a:20:31:6a:ee:67:
c4:9c:b4:fa:e1:81:b1:ee:05:b4:b7:47:8d:f1:19:1d:67:19:
66:02:20:f9:44:ea:bf:c2:74:7c:dd:ee:4f:f5:a6:05:4a:b5:
34:09:5d:31:b1:84:82:7e:fc:9a:04:02:de:fd:96:46:9a:8e:
08:4b:85:9a:d3:ed:dc:63:48:61:4e:af:39:7e:be:07:11:a9:
2c:3d:91:62:55:0a:14:16:66:73:0e:27:00:50:b8:b6:1a:57:
c4:db:32:66:f2:08:95:68:73:3a:16:2e:58:1e:53:09:8d:eb:
bb:d3:cf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:07:31 2025 by rpki-client