Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa
File: AS215224.roa (raw, json)
Hash identifier: 2uBYBGBrg5E3BcvAFvJKuJ8TLrr9rwSfTs5SLE11RR4=
Subject key identifier: DD:6B:04:D1:DA:2B:08:0E:72:E2:3B:BB:1B:45:96:A5:46:70:18:BA
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 517E9624C614EE2D21C73EFADE921A3EE6BA8859
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa
Signing time: Mon 20 Jan 2025 08:17:57 +0000
ROA not before: Mon 20 Jan 2025 08:12:57 +0000
ROA not after: Mon 19 Jan 2026 08:17:57 +0000
asID: 215224
IP address blocks: 104.234.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:7e:96:24:c6:14:ee:2d:21:c7:3e:fa:de:92:1a:3e:e6:ba:88:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 20 08:12:57 2025 GMT
Not After : Jan 19 08:17:57 2026 GMT
Subject: CN=DD6B04D1DA2B080E72E23BBB1B4596A5467018BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:48:de:2e:48:7f:32:fb:91:82:bb:94:7a:
d7:a7:b5:fc:ac:87:a8:22:f9:11:e3:9b:16:41:70:
92:c3:67:1b:8c:32:aa:fc:79:57:76:4c:d9:09:18:
0d:b2:43:6c:8e:f6:aa:bb:e0:fe:5a:44:85:d8:09:
0e:41:36:1a:af:a9:ae:00:64:6b:44:30:f3:d2:f3:
23:49:14:b2:42:5a:c9:35:44:ae:6d:65:80:83:bd:
c7:bc:ba:fd:07:66:d1:6f:90:12:37:67:64:6d:b3:
df:ca:53:f9:bd:97:c1:40:7b:f3:2c:2f:73:26:5d:
93:bf:36:e1:e6:12:39:62:c2:2e:13:52:23:fb:41:
6c:00:7f:d0:20:f7:df:d0:e7:88:3c:4f:26:ec:b6:
a5:d0:4d:df:77:28:04:a1:19:26:fd:46:b3:e1:85:
fa:f8:2a:82:55:81:a1:1e:d7:c8:c6:45:a8:67:d2:
11:f9:9e:51:e0:65:93:63:60:f6:61:90:46:8f:ad:
db:5b:04:1d:fe:8d:60:43:46:9c:a3:71:44:f5:37:
c9:28:1b:b0:6a:c6:46:1c:da:3f:21:96:58:e9:0a:
f5:98:6d:9b:aa:37:78:d9:e0:67:00:34:31:73:74:
0b:92:6d:4d:76:33:68:09:fd:e6:ad:19:ce:b1:ed:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6B:04:D1:DA:2B:08:0E:72:E2:3B:BB:1B:45:96:A5:46:70:18:BA
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.243.0/24
Signature Algorithm: sha256WithRSAEncryption
12:71:83:10:73:a0:84:14:1c:3c:8d:9c:e8:4a:2f:72:ba:f2:
6c:eb:e9:a0:32:cc:af:7d:bf:17:b8:33:85:b8:d9:57:0c:bf:
13:4c:ac:2c:d9:12:e5:05:30:49:1f:53:84:4c:69:60:fa:85:
f1:be:2d:00:85:d2:59:5d:07:1e:2a:da:1d:d5:0f:1f:97:0a:
8f:65:f1:cd:67:e0:bc:ea:e5:9f:7a:2e:df:4c:1c:14:27:93:
7e:fc:dc:4c:7c:6e:9e:48:9c:6f:e4:11:a3:76:88:6e:9d:5d:
9c:07:f0:e8:26:9d:98:b0:2c:9b:0e:55:f5:2c:42:94:4e:f8:
44:37:43:0e:f4:de:f7:a9:e9:f7:b5:ee:4e:c2:4c:77:41:77:
cf:ec:30:ef:35:62:1a:0e:bd:dc:9c:72:3f:d0:8e:7e:47:4f:
a4:d9:0c:77:6d:cd:70:f4:73:c6:d1:1b:81:cb:c1:76:06:1e:
39:99:2f:81:02:56:18:29:04:43:80:a5:f7:35:4b:05:70:d7:
db:93:b4:ce:da:10:1b:ae:f7:96:41:c2:8d:c0:a6:73:b5:26:
23:af:22:6a:fe:b7:92:7e:a7:6b:ae:c0:31:70:bd:c7:00:85:
f8:23:ee:46:7d:8a:3a:7a:e6:8d:17:72:e9:c9:26:b3:d8:5d:
3b:fd:57:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:41:38 2025 by rpki-client