Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa
File: AS400529.roa (raw, json)
Hash identifier: rWxQm0Qr36ZPOAzYTXkyVw9i9xMsWTuTp8Rb0gVPFFc=
Subject key identifier: 5B:0D:6B:B6:75:60:CC:18:CB:D3:8C:29:E3:FA:7A:4D:DD:D8:28:9D
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 5C1E96014ADE9F9F7078F3FB9E993FA91E1D635B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa
Signing time: Wed 20 Nov 2024 18:49:21 +0000
ROA not before: Wed 20 Nov 2024 18:44:21 +0000
ROA not after: Wed 19 Nov 2025 18:49:21 +0000
asID: 400529
IP address blocks: 104.234.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:1e:96:01:4a:de:9f:9f:70:78:f3:fb:9e:99:3f:a9:1e:1d:63:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Nov 20 18:44:21 2024 GMT
Not After : Nov 19 18:49:21 2025 GMT
Subject: CN=5B0D6BB67560CC18CBD38C29E3FA7A4DDDD8289D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:68:19:a5:ff:c0:db:20:89:55:d5:3c:fb:
b1:02:62:17:1f:e6:f1:0a:93:63:33:07:40:21:c1:
82:ea:f3:7d:6e:27:ee:1d:eb:08:6b:a9:ac:18:15:
f8:62:8c:43:4d:85:13:3a:1f:e0:5b:ee:ec:cf:a4:
b0:f3:c1:99:e0:12:fe:e1:42:2b:4e:6f:ad:87:9b:
69:ab:69:6e:88:ca:a5:55:02:84:27:3a:d5:e5:f6:
0d:44:8f:72:2f:0e:2f:7a:61:3b:87:dc:53:4e:cf:
68:60:80:fe:7d:57:e1:34:46:2e:44:59:f1:7d:0a:
77:44:06:8c:ba:45:d2:2b:f5:2b:a3:10:ad:cb:a2:
91:f5:84:7d:6d:ba:fb:2d:33:76:e5:40:7d:3f:88:
17:a6:4b:ae:93:92:73:b2:db:2a:10:d9:be:02:6a:
18:a7:99:fe:42:62:33:6f:bc:1e:2c:36:3b:a6:41:
ab:d0:73:4a:e5:9a:c2:ce:25:dc:1b:6f:af:5a:29:
34:88:a7:43:01:5b:b8:7a:62:c0:41:09:46:e9:63:
de:59:15:84:cc:0d:10:20:5c:fa:1c:94:35:fc:8f:
f7:7c:b2:4e:8e:9e:97:64:b9:09:07:ce:b9:05:e6:
dd:e0:4a:4b:e2:4c:5c:f9:1b:b6:b5:16:fb:ee:71:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0D:6B:B6:75:60:CC:18:CB:D3:8C:29:E3:FA:7A:4D:DD:D8:28:9D
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.220.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:54:97:c0:80:2e:e6:3c:02:58:3d:ad:df:a4:d2:4a:28:31:
3d:20:29:d2:66:f9:e6:79:18:cb:c5:b1:8b:e2:59:32:f7:60:
09:d7:44:bd:3b:a2:06:b4:c9:cd:cb:d7:f5:b8:7b:ec:ae:0e:
1c:03:7e:93:c6:35:db:7d:84:26:62:9b:bd:e8:53:b7:98:31:
5e:fd:e4:d1:42:43:52:10:7d:88:04:f4:4c:bb:72:32:a9:6d:
7d:68:4e:63:7b:57:f9:18:09:e8:74:7d:a5:42:3a:9c:8e:af:
4c:f6:0c:b8:29:4c:ec:5f:ef:66:27:c1:01:a7:21:eb:bc:6f:
4c:f8:dd:70:a5:69:0d:92:0f:4f:3d:33:b5:e1:ff:04:96:7e:
b3:b7:14:cd:2e:3a:0f:e4:93:38:9d:03:ec:a0:2d:58:73:3b:
26:1a:f1:b8:89:dd:46:8a:b7:97:16:89:5c:29:dd:4f:2f:94:
a1:0c:5e:b3:6b:d3:b1:c8:6f:82:cf:de:da:a2:83:8e:36:f2:
45:f2:b5:41:66:da:e2:93:a6:56:a8:d1:7d:99:e4:24:08:8c:
15:b3:ad:f3:6e:78:b2:58:73:6f:db:cd:6b:8f:e0:5a:f7:6e:
bf:f6:75:46:97:e3:96:5d:65:64:6a:0e:bc:32:12:fa:70:ee:
79:eb:a9:35
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUXB6WAUren59wePP7npk/qR4dY1swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMTIwMTg0NDIxWhcNMjUxMTE5MTg0OTIx
WjAzMTEwLwYDVQQDEyg1QjBENkJCNjc1NjBDQzE4Q0JEMzhDMjlFM0ZBN0E0RERE
RDgyODlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUNoGaX/wNsg
iVXVPPuxAmIXH+bxCpNjMwdAIcGC6vN9bifuHesIa6msGBX4YoxDTYUTOh/gW+7s
z6Sw88GZ4BL+4UIrTm+th5tpq2luiMqlVQKEJzrV5fYNRI9yLw4vemE7h9xTTs9o
YID+fVfhNEYuRFnxfQp3RAaMukXSK/UroxCty6KR9YR9bbr7LTN25UB9P4gXpkuu
k5JzstsqENm+AmoYp5n+QmIzb7weLDY7pkGr0HNK5ZrCziXcG2+vWik0iKdDAVu4
emLAQQlG6WPeWRWEzA0QIFz6HJQ1/I/3fLJOjp6XZLkJB865Bebd4EpL4kxc+Ru2
tRb77nExvwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFsNa7Z1YMwYy9OMKeP6ek3d
2CidMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzQwMDUyOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq3DANBgkqhkiG9w0BAQsFAAOC
AQEAsFSXwIAu5jwCWD2t36TSSigxPSAp0mb55nkYy8Wxi+JZMvdgCddEvTuiBrTJ
zcvX9bh77K4OHAN+k8Y1232EJmKbvehTt5gxXv3k0UJDUhB9iAT0TLtyMqltfWhO
Y3tX+RgJ6HR9pUI6nI6vTPYMuClM7F/vZifBAach67xvTPjdcKVpDZIPTz0zteH/
BJZ+s7cUzS46D+STOJ0D7KAtWHM7JhrxuIndRoq3lxaJXCndTy+UoQxes2vTschv
gs/e2qKDjjbyRfK1QWba4pOmVqjRfZnkJAiMFbOt8254slhzb9vNa4/gWvduv/Z1
Rpfjll1lZGoOvDIS+nDueeupNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:57 2025 by rpki-client