Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8100.roa
File: AS8100.roa (raw, json)
Hash identifier: qHvBhKREirg0sO6fmz9eXYeKB6opZQPDiPLHoK6QsbI=
Subject key identifier: C7:D0:36:97:4D:1D:5A:D8:3E:E6:B6:0B:39:21:F2:84:92:39:27:ED
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 16A29D45DEAB0C5596732A3091E35FFB550D5AF4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8100.roa
Signing time: Mon 02 Dec 2024 14:45:13 +0000
ROA not before: Mon 02 Dec 2024 14:40:13 +0000
ROA not after: Mon 01 Dec 2025 14:45:13 +0000
asID: 8100
IP address blocks: 104.234.24.0/23 maxlen: 24
104.234.36.0/23 maxlen: 24
104.234.60.0/23 maxlen: 24
104.234.100.0/24 maxlen: 24
104.234.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a2:9d:45:de:ab:0c:55:96:73:2a:30:91:e3:5f:fb:55:0d:5a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 2 14:40:13 2024 GMT
Not After : Dec 1 14:45:13 2025 GMT
Subject: CN=C7D036974D1D5AD83EE6B60B3921F284923927ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:ec:5d:62:a9:20:a3:ec:83:e7:bb:df:5c:
a2:20:5b:03:f3:4e:26:7f:b8:23:08:f1:10:ee:80:
e5:97:f8:e0:0b:7d:ad:db:e6:f4:79:11:96:9c:69:
3d:02:ab:18:99:b7:67:37:92:c9:bb:5d:d8:13:e4:
30:af:87:81:e1:fd:22:33:00:a5:04:b9:04:0f:65:
4f:87:07:86:53:12:2b:cb:84:a7:f4:fb:89:ed:5d:
b3:24:90:bd:3d:0c:13:b0:43:8f:ad:0c:9c:f1:f9:
50:70:2c:4d:ba:dd:e0:44:49:bc:4f:ac:70:17:75:
cf:ca:d2:c0:34:d9:fc:03:45:5d:65:02:d6:bb:35:
29:3c:e6:99:a2:a1:f4:6d:0b:06:48:41:43:1c:d0:
bf:be:ce:15:18:d6:be:ab:d4:01:df:ff:9e:ce:df:
58:cc:61:3b:40:ac:ff:ae:7a:81:31:b8:c0:bd:de:
26:71:00:42:48:06:65:94:da:f0:e2:85:7f:e7:3f:
57:77:d1:2d:81:cc:c4:88:cb:64:25:2a:29:63:e3:
74:68:3e:67:1d:2e:50:fc:f8:94:2e:03:31:83:ae:
83:52:bc:1a:a3:e3:d2:17:57:26:23:87:2b:89:8f:
5c:5e:49:cf:3a:11:f5:d5:dc:d2:b6:c6:e3:1d:0d:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D0:36:97:4D:1D:5A:D8:3E:E6:B6:0B:39:21:F2:84:92:39:27:ED
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.24.0/23
104.234.36.0/23
104.234.60.0/23
104.234.100.0/24
104.234.109.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1b:5b:13:44:1d:db:b6:a4:b8:21:8d:46:5b:96:ed:ac:b1:
4b:5c:8a:d1:94:5a:e8:60:8d:6c:43:df:30:5a:1b:56:b5:9b:
9f:0e:e7:24:77:32:b8:e1:e8:7c:e5:0c:e6:bc:4c:be:4a:f8:
ad:99:a7:3f:c4:fe:9f:8a:03:44:7d:f0:5d:26:7d:a9:35:b3:
da:99:37:21:da:77:ef:9e:33:60:77:96:7b:c8:ad:cf:26:7a:
75:f4:26:7c:5f:d3:b1:e5:c5:88:94:30:9d:06:03:cd:22:51:
c6:9d:f0:80:50:4d:fa:0e:ba:2a:d3:ad:0c:32:29:d8:06:9d:
57:11:57:7c:87:76:a8:3c:89:cd:b7:ea:68:3f:2f:02:d9:76:
4d:1f:b5:82:39:25:ac:39:71:f3:3f:1f:d6:cf:8e:f4:aa:61:
b3:a3:aa:15:b5:f2:21:06:88:a7:0f:a4:6e:f3:78:6e:e0:59:
99:34:0b:92:ee:4e:1b:28:19:9d:17:4b:27:88:9c:24:d9:24:
18:1b:16:00:5e:2e:7d:42:ca:43:54:34:0a:e7:f4:bf:37:c4:
7e:d6:98:fe:f0:c6:36:ae:5e:83:be:f7:49:fa:ac:3d:ff:cb:
64:89:6a:02:ca:6e:b8:72:fd:17:31:6e:6c:7b:be:fa:ae:31:
3b:5a:02:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:29 2025 by rpki-client