Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: X4HUGmucgjCWV/RNUwOafrSja1lsrOLARtNtvlnc3RI=
Subject key identifier: 69:A5:86:31:26:6E:9D:E4:7F:5A:E8:B8:7F:09:AD:A1:98:AF:39:70
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 79965FBB01034082B9CE4A9B03D2534C9CD7570A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa
Signing time: Fri 31 Jan 2025 00:01:58 +0000
ROA not before: Thu 30 Jan 2025 23:56:58 +0000
ROA not after: Fri 30 Jan 2026 00:01:58 +0000
asID: 21859
IP address blocks: 104.234.156.0/24 maxlen: 24
104.234.209.0/24 maxlen: 24
206.53.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:96:5f:bb:01:03:40:82:b9:ce:4a:9b:03:d2:53:4c:9c:d7:57:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 30 23:56:58 2025 GMT
Not After : Jan 30 00:01:58 2026 GMT
Subject: CN=69A58631266E9DE47F5AE8B87F09ADA198AF3970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:91:43:04:06:04:fb:b7:54:58:c5:c5:11:d4:
58:a1:75:78:b2:eb:9c:f9:8c:f1:d6:9a:2a:c7:ce:
56:43:21:61:99:6d:f7:89:2a:3d:52:c6:ca:96:b6:
54:54:b3:b7:e5:ff:48:bc:10:36:8b:51:dd:26:24:
9d:b2:1f:1c:72:a9:2d:6a:86:69:ff:ef:ba:fb:12:
5b:fa:d7:ec:4e:5b:f2:e7:48:41:9d:0a:f6:24:22:
00:ac:96:3a:69:ef:d9:4b:1c:fb:4e:6a:f9:f3:a2:
01:24:69:0b:3c:1d:38:b1:73:7a:bc:0d:63:87:b4:
cf:f2:34:1d:86:fa:a2:4e:ab:1f:46:59:fb:1d:b9:
20:6d:97:f5:76:1d:98:dc:b5:89:a6:ae:57:a9:1c:
1e:1b:9e:e2:a1:27:b8:9c:dc:da:53:69:4d:96:d6:
b8:af:b2:e8:6c:51:67:54:f1:6c:57:38:2b:80:75:
4e:7f:c5:7b:2b:6f:8f:b0:ab:86:db:c3:82:47:b3:
4b:49:05:b1:fc:77:ea:ce:52:f2:9d:0a:ef:fd:fb:
e0:c0:6f:44:6f:3d:56:7c:f5:3b:6a:ca:8d:1a:6b:
f9:46:71:c4:d3:4f:a9:fe:17:78:c2:32:94:fa:59:
50:db:26:d0:79:33:dc:21:32:14:82:f8:65:1f:f3:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A5:86:31:26:6E:9D:E4:7F:5A:E8:B8:7F:09:AD:A1:98:AF:39:70
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.156.0/24
104.234.209.0/24
206.53.57.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:1e:c8:b6:f3:57:6b:b2:cc:db:e1:bc:e8:95:1b:ce:51:77:
2f:5b:1b:72:29:1b:22:5b:27:b3:19:da:f7:e1:4a:c1:57:0a:
c0:88:80:d0:a3:89:6b:a2:9a:72:30:fd:e9:99:a3:2c:ad:19:
fa:29:84:c9:1c:55:b9:5b:ca:76:33:d0:82:35:c8:f9:57:43:
d6:f8:13:65:21:ea:4b:8d:be:4b:7f:83:30:26:7e:07:8e:bc:
a3:14:0b:6e:75:03:06:49:62:eb:eb:79:88:85:70:27:da:5c:
3d:bf:00:a8:4d:df:c7:7d:6a:36:94:77:43:02:ba:5e:8c:dd:
44:00:1e:8a:a4:dc:8e:a5:23:21:87:35:d1:b3:85:94:6b:6b:
8b:55:b2:80:14:0f:11:60:89:8e:22:25:5b:2d:56:dc:a9:86:
b9:ee:d1:cc:2b:96:74:f5:cb:b8:7c:21:5b:1d:f9:a0:d7:6f:
97:5b:8e:23:22:11:89:5f:c4:0f:7b:d5:22:14:d3:a6:cb:b6:
21:b0:60:e0:d8:80:6e:8e:db:51:1f:f7:84:a7:02:bc:06:8d:
88:8b:fa:76:e0:ee:44:d4:fe:b1:17:0a:bd:fb:8e:76:c2:41:
1d:67:7c:e5:00:f6:8d:fb:f6:3e:e0:2f:5e:c5:07:e5:7e:7f:
85:91:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:52:26 2025 by rpki-client