Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400228.roa
File: AS400228.roa (raw, json)
Hash identifier: kkWh0YZ2jbfPZw5B9O+DdCwAryxOxbWRRnc+Q1Mzzr0=
Subject key identifier: B8:E3:34:C4:DD:1E:07:EC:9C:80:DC:7C:0B:29:DC:DC:C6:59:69:4F
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 198BBF11A1D5456EA5D764DDE4910E1897ABA7A4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400228.roa
Signing time: Mon 16 Sep 2024 16:34:56 +0000
ROA not before: Mon 16 Sep 2024 16:29:56 +0000
ROA not after: Mon 15 Sep 2025 16:34:56 +0000
asID: 400228
IP address blocks: 104.234.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:8b:bf:11:a1:d5:45:6e:a5:d7:64:dd:e4:91:0e:18:97:ab:a7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Sep 16 16:29:56 2024 GMT
Not After : Sep 15 16:34:56 2025 GMT
Subject: CN=B8E334C4DD1E07EC9C80DC7C0B29DCDCC659694F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:5c:17:46:5c:d7:f6:d8:11:78:e7:da:84:
36:ca:69:38:cd:50:df:22:c3:56:ac:27:57:d2:01:
01:9d:fd:35:ae:d0:7b:99:03:4b:14:39:43:4a:86:
bb:8a:67:f7:af:08:dc:5c:ef:4c:f8:39:86:4c:8f:
64:ea:0b:61:4e:5a:42:c9:e2:4e:bf:99:c9:d3:75:
f4:48:32:f3:bb:9a:96:e2:9d:de:e5:e9:fb:3d:ca:
83:05:56:b0:95:0a:44:b6:8d:8a:35:2d:8c:0e:26:
4f:3c:3b:b5:ae:6a:73:f4:b0:dc:e6:c4:f0:5f:a7:
2b:87:bf:be:8b:e1:4c:c5:8d:c6:70:4c:89:11:e7:
c6:b2:bc:0d:eb:4c:da:37:1d:fd:5b:a1:c0:45:45:
b4:f9:c0:40:b8:78:03:58:53:3d:a6:00:fe:db:dc:
b7:40:94:36:9f:38:15:d2:96:08:55:1a:e0:89:49:
2f:03:c7:22:dc:12:76:72:54:5c:ee:ed:29:b9:76:
f2:17:d7:0f:f3:ce:cc:a7:3f:06:a0:8c:cb:5d:ed:
c7:8b:d8:06:1c:da:74:84:42:73:72:c4:9c:db:8d:
a1:c2:dc:ff:df:3b:d4:d0:0d:3f:5b:db:79:41:23:
c8:bb:ab:07:d1:f6:48:2e:3c:02:36:fe:fb:7f:9e:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E3:34:C4:DD:1E:07:EC:9C:80:DC:7C:0B:29:DC:DC:C6:59:69:4F
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400228.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.87.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b9:11:b8:c1:18:75:ff:70:97:3e:f9:5c:3f:02:dd:5e:bd:
5d:2e:bb:07:f3:be:6f:70:b2:88:46:dc:42:be:10:2f:a2:ce:
28:f5:d0:40:74:32:44:c1:48:b5:60:5e:46:bc:64:d6:59:33:
99:07:78:b3:cd:94:af:4a:39:5a:c1:fd:4a:45:ab:e5:e8:c5:
c9:2d:27:6d:19:9e:85:e9:52:00:a0:55:2b:a0:08:52:35:2c:
77:90:df:8c:47:0f:cc:6e:96:df:03:c1:83:96:e7:7b:b3:e0:
69:2e:14:15:ca:48:a8:e3:94:d2:bc:ca:a1:8f:8d:4a:6b:71:
a8:0c:f9:3f:81:c1:21:b0:54:34:68:fd:cb:66:3f:40:af:28:
51:63:08:ff:a7:d7:4f:eb:ef:bc:7e:8c:c4:32:26:39:55:17:
fc:2e:8e:83:31:63:97:2b:f9:32:17:20:8c:74:e6:e9:f0:a1:
96:4c:f9:ac:2e:e1:89:db:87:37:d5:e3:3e:cf:dc:f1:69:df:
68:e1:6a:00:56:25:10:92:96:e8:c5:33:07:64:e1:3f:83:fe:
ed:83:70:33:f3:57:e0:66:1a:0d:6a:06:de:7c:6a:7a:e0:c4:
3e:a1:66:0a:82:ce:50:93:8e:37:01:29:51:a3:a8:5e:b7:08:
18:1c:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:28:12 2025 by rpki-client