Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: K9UcHKI2bGYH/K+VqfTouAuyvFgw03oYQ6Mbv2RjcOg=
Subject key identifier: F6:AE:99:FA:33:C6:A6:77:7E:F5:9A:FA:EE:A9:5F:90:34:83:E7:16
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 1A21E9FD3EA1A069B178332B0CA568F3541BCB93
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa
Signing time: Sun 12 Jan 2025 06:25:02 +0000
ROA not before: Sun 12 Jan 2025 06:20:02 +0000
ROA not after: Sun 11 Jan 2026 06:25:02 +0000
asID: 29802
IP address blocks: 104.234.131.0/24 maxlen: 24
104.234.154.0/24 maxlen: 24
104.234.181.0/24 maxlen: 24
104.234.186.0/24 maxlen: 24
104.234.228.0/24 maxlen: 24
206.53.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:21:e9:fd:3e:a1:a0:69:b1:78:33:2b:0c:a5:68:f3:54:1b:cb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 12 06:20:02 2025 GMT
Not After : Jan 11 06:25:02 2026 GMT
Subject: CN=F6AE99FA33C6A6777EF59AFAEEA95F903483E716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:61:fe:9b:20:31:78:33:63:1a:2c:60:21:
85:f3:2a:2d:ae:fc:de:da:a5:78:54:47:09:ff:60:
61:e5:26:d7:5e:6a:98:51:09:50:bd:f0:f2:14:14:
bc:a7:7b:8a:15:1a:22:f5:e0:91:94:7b:e3:a1:45:
e6:d9:ac:79:48:f6:06:73:3e:85:70:06:e5:dd:e8:
11:94:17:ec:41:b3:4f:2c:c6:94:3c:3d:be:53:18:
3f:95:0e:e7:1b:53:0b:bb:63:25:56:85:de:21:73:
0f:da:8a:65:2d:b7:78:84:c3:2d:05:5c:1a:30:12:
96:e7:cc:41:a4:b5:60:ea:bd:9a:d0:84:c4:5e:31:
ee:16:cd:41:7b:4f:4c:c3:4e:a4:ba:cf:22:4e:0b:
57:b4:9c:ce:6f:f3:54:b7:03:97:67:49:06:bc:a0:
f1:e7:66:e1:c8:3c:c7:a6:02:96:9d:3e:c0:18:7d:
eb:ef:35:a7:54:9e:c2:f2:bf:ee:38:64:c1:7d:61:
e2:94:39:8d:a9:f3:b1:cd:b6:a0:c0:07:a4:3f:ba:
1f:4f:33:1d:a7:a0:64:a9:1b:18:f0:8b:49:19:5b:
45:c2:3c:99:cc:7e:59:3a:ff:d1:21:1b:87:e6:5b:
51:20:8b:0f:dd:f7:47:69:f1:4c:65:d3:00:9a:fe:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AE:99:FA:33:C6:A6:77:7E:F5:9A:FA:EE:A9:5F:90:34:83:E7:16
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.131.0/24
104.234.154.0/24
104.234.181.0/24
104.234.186.0/24
104.234.228.0/24
206.53.52.0/24
Signature Algorithm: sha256WithRSAEncryption
58:dc:ac:84:46:d6:85:fa:cf:b3:03:c9:cd:58:65:4f:02:05:
af:ef:49:f0:18:85:ef:a3:a9:e1:da:8f:13:2a:2c:8c:31:8c:
ea:34:8f:15:74:bf:ad:91:9a:73:e2:c8:2f:fa:5a:f8:1d:13:
83:ee:28:55:50:2e:c5:df:03:ca:15:32:20:ec:55:f9:63:46:
25:ee:21:40:56:8f:42:96:0e:57:71:55:4e:4e:2f:54:f8:a6:
af:fb:3b:5e:24:e5:29:27:ef:1a:e5:33:7a:e5:88:48:fe:35:
a3:dc:d5:bc:b7:77:69:a4:67:58:ad:63:aa:ee:cc:dc:77:5a:
8f:ab:f4:ad:b6:5c:42:3c:13:82:ef:99:28:a0:7c:3b:68:32:
c5:05:60:31:96:3d:05:05:fc:06:39:45:47:d1:30:1f:42:02:
a5:f1:2b:b6:33:6d:4e:15:56:f8:99:2b:a3:0a:8b:c1:91:6e:
50:6d:23:a5:63:38:55:7d:bf:07:96:23:32:cc:07:9d:f5:43:
27:2b:44:6b:36:64:53:20:cd:ee:5e:c3:b6:d9:64:ee:c3:6e:
1f:77:dc:5e:7c:7a:35:4f:da:2f:2f:b4:11:c2:9f:c3:b8:8e:
21:57:7a:8d:e3:8b:76:3c:c7:84:ec:57:0b:fb:05:27:fc:1a:
c6:db:e5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:13:56 2025 by rpki-client