Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: E2+gRb3W1sKmOyQBzFWVXoP7JFAb7KoTklzNxS+APnE=
Subject key identifier: 5B:7D:B3:4D:49:53:7A:96:19:6F:5B:A3:48:D5:8F:67:45:7A:F8:3F
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 387351F95E261297365323E4E0786C9D748DBC91
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36530.roa
Signing time: Thu 16 Jan 2025 09:22:08 +0000
ROA not before: Thu 16 Jan 2025 09:17:08 +0000
ROA not after: Thu 15 Jan 2026 09:22:08 +0000
asID: 36530
IP address blocks: 104.234.107.0/24 maxlen: 24
104.234.158.0/24 maxlen: 24
104.234.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:73:51:f9:5e:26:12:97:36:53:23:e4:e0:78:6c:9d:74:8d:bc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 16 09:17:08 2025 GMT
Not After : Jan 15 09:22:08 2026 GMT
Subject: CN=5B7DB34D49537A96196F5BA348D58F67457AF83F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:eb:94:f1:0c:2b:6b:a6:db:37:a5:ac:c5:83:
70:9a:46:20:41:0d:5c:93:18:47:c5:f7:4b:07:de:
f3:89:80:5b:a1:55:53:61:38:43:14:cb:e1:ad:7e:
e4:38:03:9e:1e:9d:45:02:fc:51:3f:79:34:e0:5a:
ea:d2:8d:0e:a0:b2:2c:ef:86:2b:e5:bc:61:f3:82:
c3:40:6d:d5:36:a8:0a:8b:0b:15:17:bf:7f:60:dc:
f2:54:b6:ef:4d:0f:f3:ce:fc:ee:b8:95:61:83:20:
b1:da:f7:10:c8:fd:d2:b0:de:bf:e3:a0:a0:d9:da:
92:f0:f5:59:17:3b:30:8d:a1:b2:12:54:af:62:09:
e5:2f:af:4e:d2:40:46:82:29:f8:88:d2:45:03:34:
e8:fa:9f:e2:52:67:86:06:87:b1:10:7e:01:67:88:
c9:4b:16:ba:5e:63:56:4d:25:6a:93:93:7f:45:3f:
5d:b1:14:89:e5:84:d3:4c:27:95:a4:89:ef:1a:95:
fd:fa:74:06:2e:37:cb:03:b1:1d:e5:5d:52:95:48:
8a:67:2a:3f:fb:4a:98:4e:fe:29:ba:79:24:3f:5e:
67:e5:fe:15:6e:73:35:61:93:7b:09:c5:77:35:74:
75:8c:bd:95:37:da:21:55:92:5b:f1:6c:0b:4b:46:
7a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7D:B3:4D:49:53:7A:96:19:6F:5B:A3:48:D5:8F:67:45:7A:F8:3F
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.107.0/24
104.234.158.0/23
Signature Algorithm: sha256WithRSAEncryption
69:fa:fa:e7:2f:a7:7e:c6:f0:b6:bf:17:8e:f2:78:8f:f1:40:
e3:cb:06:3d:79:2b:5f:82:c5:89:6f:ad:e5:75:d3:6d:cd:e9:
77:f6:f6:f2:e8:61:b3:4a:01:9d:38:f3:1b:91:75:ae:82:e9:
cc:15:09:b0:14:ee:b4:4b:87:34:1b:ca:cc:d1:22:24:e1:bd:
cf:43:f4:70:4a:dc:a9:6e:d5:2b:87:13:77:26:e2:19:fc:d5:
27:ac:95:91:50:61:23:c4:bf:2c:f2:77:d9:6a:74:51:d4:fc:
58:49:71:51:d5:37:9b:85:2b:8c:34:d6:d4:45:45:34:cf:0e:
30:51:cd:2c:b1:33:75:5b:2d:d1:fe:1a:d3:13:60:15:93:4e:
f6:a6:4c:0c:63:e0:99:f6:b4:06:1d:46:68:9d:9f:d7:89:71:
83:6e:bd:d3:19:c7:41:0d:53:4c:63:11:65:a6:94:84:70:77:
b4:ed:ab:9b:9d:2d:e5:ca:66:b3:b6:89:ff:38:2e:38:f0:bd:
2e:c8:a7:ae:b2:7a:ec:5e:8c:04:8a:23:e6:8e:2c:23:e1:ba:
9b:29:bb:32:2e:cd:fb:d7:45:86:80:8c:9f:3b:3e:ef:19:fe:
fa:ff:92:c9:93:a0:ad:d3:4f:af:0d:a8:b2:1a:81:7d:c8:55:
99:03:9a:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUOHNR+V4mEpc2UyPk4HhsnXSNvJEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTE2MDkxNzA4WhcNMjYwMTE1MDkyMjA4
WjAzMTEwLwYDVQQDEyg1QjdEQjM0RDQ5NTM3QTk2MTk2RjVCQTM0OEQ1OEY2NzQ1
N0FGODNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uuU8Qwra6bb
N6WsxYNwmkYgQQ1ckxhHxfdLB97ziYBboVVTYThDFMvhrX7kOAOeHp1FAvxRP3k0
4Frq0o0OoLIs74Yr5bxh84LDQG3VNqgKiwsVF79/YNzyVLbvTQ/zzvzuuJVhgyCx
2vcQyP3SsN6/46Cg2dqS8PVZFzswjaGyElSvYgnlL69O0kBGgin4iNJFAzTo+p/i
UmeGBoexEH4BZ4jJSxa6XmNWTSVqk5N/RT9dsRSJ5YTTTCeVpInvGpX9+nQGLjfL
A7Ed5V1SlUiKZyo/+0qYTv4punkkP15n5f4VbnM1YZN7CcV3NXR1jL2VN9ohVZJb
8WwLS0Z6UQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFFt9s01JU3qWGW9bo0jVj2dF
evg/MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzM2NTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaOprAwQBaOqeMA0GCSqGSIb3DQEB
CwUAA4IBAQBp+vrnL6d+xvC2vxeO8niP8UDjywY9eStfgsWJb63lddNtzel39vby
6GGzSgGdOPMbkXWugunMFQmwFO60S4c0G8rM0SIk4b3PQ/RwStypbtUrhxN3JuIZ
/NUnrJWRUGEjxL8s8nfZanRR1PxYSXFR1TebhSuMNNbURUU0zw4wUc0ssTN1Wy3R
/hrTE2AVk072pkwMY+CZ9rQGHUZonZ/XiXGDbr3TGcdBDVNMYxFlppSEcHe07aub
nS3lymazton/OC448L0uyKeusnrsXowEiiPmjiwj4bqbKbsyLs3710WGgIyfOz7v
Gf76/5LJk6Ct00+vDaiyGoF9yFWZA5ra
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:39:28 2025 by rpki-client