Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa
File: AS23470.roa (raw, json)
Hash identifier: 9hED1g//5bhi5ykx4J0bDGWplVtEN8IFeIWC8XdDG9s=
Subject key identifier: CB:BA:E0:46:D2:90:7B:12:BC:96:ED:0D:88:F1:BA:93:93:BC:82:81
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 17184E2A2F7BE89894E417CD535504FFA59CFFC8
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa
Signing time: Sun 05 Jan 2025 00:02:02 +0000
ROA not before: Sat 04 Jan 2025 23:57:02 +0000
ROA not after: Sun 04 Jan 2026 00:02:02 +0000
asID: 23470
IP address blocks: 104.234.114.0/24 maxlen: 24
104.234.139.0/24 maxlen: 24
104.234.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:18:4e:2a:2f:7b:e8:98:94:e4:17:cd:53:55:04:ff:a5:9c:ff:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 4 23:57:02 2025 GMT
Not After : Jan 4 00:02:02 2026 GMT
Subject: CN=CBBAE046D2907B12BC96ED0D88F1BA9393BC8281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:03:1b:8b:cf:ef:3b:38:6c:b0:79:d5:d6:
2e:2e:85:10:b2:90:b3:bb:72:c4:b7:cf:62:45:56:
d5:b2:05:08:01:ab:57:89:f2:a8:aa:9e:03:96:c0:
69:b8:03:84:11:6e:49:bf:ee:9a:a4:32:9e:5b:ab:
23:cd:8d:c5:ac:3b:48:35:f8:91:15:ee:af:4c:07:
6b:48:da:28:27:fb:bf:00:9e:35:f8:92:a7:64:a9:
e9:95:5f:f6:17:a9:f7:67:8b:6d:71:4a:db:b2:e0:
7a:59:cc:c6:1b:c0:e8:5b:b1:9a:04:e8:92:17:25:
44:c6:bb:f2:d1:27:49:13:72:2c:4c:c5:75:40:1c:
22:19:ec:ea:99:6b:85:61:f1:19:9a:07:f8:d4:07:
16:aa:25:43:b3:d5:95:56:2c:f6:cd:67:9e:e2:65:
c8:4c:ae:da:aa:16:0f:4c:92:a3:d8:dc:7c:94:c8:
16:6f:b0:69:0f:66:9b:f4:4b:29:8f:e3:8a:c3:47:
29:81:a6:f7:68:be:5b:9e:9f:5d:a3:9c:d8:12:13:
80:e0:44:00:ab:fc:86:90:13:93:a5:66:3a:90:fe:
c8:93:64:d5:ce:f3:9c:c7:0c:05:2c:fd:70:2d:2b:
d7:73:5d:08:c1:75:90:30:ae:4b:53:e0:56:e3:0d:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BA:E0:46:D2:90:7B:12:BC:96:ED:0D:88:F1:BA:93:93:BC:82:81
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.114.0/24
104.234.139.0/24
104.234.142.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:da:c3:6a:25:10:c5:3c:76:8e:7e:47:b0:c9:65:2b:79:78:
4f:f9:67:e6:81:90:f2:02:74:6a:ef:85:dd:8b:70:51:a7:02:
59:0a:11:fc:08:a0:c7:fa:4d:4a:1c:72:23:27:dc:1b:40:e2:
a0:6e:66:d5:a1:8d:11:4d:31:89:62:3b:5e:f2:88:2c:4f:aa:
5d:5c:1d:f0:c7:b1:f9:c0:58:d3:07:b4:ef:91:2b:14:d1:c0:
1c:8f:be:6b:f6:b3:d3:a0:94:3b:a0:cd:4d:33:1d:fb:88:7c:
c3:76:2f:06:3c:1d:9c:36:56:d6:39:36:36:15:eb:34:92:98:
3d:11:e6:2d:8d:ba:cc:18:99:08:9a:3b:9f:2b:26:c0:0e:cf:
08:36:0d:ff:b6:33:f0:be:89:a2:2f:ab:80:01:26:94:21:ce:
e9:85:b9:d0:51:53:88:3b:6f:6a:0c:cf:a9:1d:87:97:fb:e6:
72:9b:56:e2:71:42:8b:00:9e:59:64:9a:b6:bd:27:53:b8:45:
07:15:aa:0a:02:c4:b5:97:9e:eb:f3:37:93:ba:cb:64:ff:8b:
58:b3:24:e6:4e:9c:22:36:51:9c:4e:3e:2c:53:e1:d2:8b:00:
2f:11:31:00:b5:b9:fd:83:a6:ee:37:61:7c:78:3e:52:bc:a6:
f7:41:c9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:19:16 2025 by rpki-client