Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215304.roa
File: AS215304.roa (raw, json)
Hash identifier: h+3CwphAuExo/V8tWzwuUJZvbimgNE/msqb76rPVS28=
Subject key identifier: 48:C2:38:1A:05:B5:AD:58:B7:50:87:D0:EF:B5:FE:62:BB:26:4E:38
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 4F2C47A5C0574EFE2C6F0AD744110F757DF62907
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215304.roa
Signing time: Thu 16 Jan 2025 00:01:58 +0000
ROA not before: Wed 15 Jan 2025 23:56:58 +0000
ROA not after: Thu 15 Jan 2026 00:01:58 +0000
asID: 215304
IP address blocks: 104.234.107.0/24 maxlen: 24
104.234.158.0/24 maxlen: 24
104.234.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:2c:47:a5:c0:57:4e:fe:2c:6f:0a:d7:44:11:0f:75:7d:f6:29:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 15 23:56:58 2025 GMT
Not After : Jan 15 00:01:58 2026 GMT
Subject: CN=48C2381A05B5AD58B75087D0EFB5FE62BB264E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d0:65:d7:32:d1:5e:31:19:e2:89:14:f3:94:
1f:e6:d0:46:44:cc:4e:bc:6b:ec:71:23:31:48:31:
05:3e:35:5b:8b:66:7d:68:8d:bf:dd:57:30:dc:a6:
75:d3:5a:13:5b:38:3d:43:f8:7e:e7:8c:00:96:66:
d8:aa:b9:30:88:5c:b0:fa:df:f6:43:18:c6:6c:3a:
8f:f4:a4:12:6f:8c:7c:14:44:c1:d9:41:81:48:fc:
aa:68:28:33:7f:70:8c:08:17:2d:4d:67:e6:d6:9e:
e7:e6:79:79:76:5b:b4:5b:10:03:27:bb:50:6b:a2:
88:21:6e:8c:10:be:75:50:ae:a3:82:28:2a:5e:c9:
29:7c:91:41:98:cc:1e:36:60:f5:f0:e5:ad:53:f5:
fe:b6:18:1e:f4:fd:30:23:c7:f8:c6:32:cb:18:43:
20:79:72:3e:90:97:99:4b:84:16:63:54:5c:00:12:
cd:01:f6:12:ec:52:5e:63:57:4a:fa:28:48:e1:2a:
6c:b4:ab:78:f6:d7:5e:bc:fe:38:15:b1:40:ce:b6:
c9:25:cd:0a:a7:51:f1:41:47:8c:bc:16:41:a2:c9:
ff:21:ef:8a:a5:d6:03:c7:bc:b6:0a:d1:b3:68:5f:
f1:5f:d9:a1:d3:98:fb:96:d6:1e:08:48:a7:a5:45:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C2:38:1A:05:B5:AD:58:B7:50:87:D0:EF:B5:FE:62:BB:26:4E:38
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.107.0/24
104.234.158.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:d3:63:a5:06:7d:88:74:1a:de:3b:49:6a:79:bc:87:10:53:
c9:a4:87:ad:a9:62:59:9b:08:b8:5e:2b:33:d9:c2:2d:fc:05:
ca:1b:39:53:f6:2b:ec:4c:30:22:8f:cd:d8:d2:f3:b6:eb:5f:
19:a6:ca:13:1d:ed:2a:c8:95:e7:68:fb:99:19:e4:8b:31:1b:
c3:ad:aa:c8:74:02:c8:9c:49:ee:65:87:26:89:89:f5:5b:7b:
f4:29:44:f8:4f:6d:f0:1b:7b:55:99:98:d0:54:f9:a8:3c:ce:
9c:92:04:73:2e:47:0b:99:36:3a:89:fe:fb:6e:4a:d1:91:73:
fa:fe:de:10:9e:59:62:4e:ce:0c:be:d4:a6:c8:ac:b8:52:0a:
0a:82:bd:e9:43:5c:fa:28:6d:79:d6:8c:60:ab:56:7e:ac:30:
c3:6f:fe:4a:a9:23:cd:55:9d:0e:2e:2c:9c:13:2a:06:a1:b1:
c8:10:cf:81:61:ec:66:1a:b7:e2:45:60:fa:63:75:82:a1:9a:
d2:c9:18:22:b9:3f:35:bb:b1:5a:6f:07:7b:48:33:81:ac:9d:
52:31:59:e6:6d:7e:37:79:ed:a7:bb:a1:8d:d8:75:50:ee:3d:
3c:e7:9c:da:de:74:d3:d1:26:67:9d:c9:a8:f3:64:f4:1f:e6:
b0:1d:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:24:34 2025 by rpki-client