Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: MAS/u6zGCzAfQkiZw1ArhUvCpmwgu6kbLom3DW6qLg4=
Subject key identifier: 64:6A:EC:81:C5:68:49:22:56:27:D1:81:7A:BE:3A:36:54:7C:3C:F7
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 0DB9B742AA137E5646E2A8747006A17E8A37700B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
Signing time: Fri 31 Jan 2025 07:35:26 +0000
ROA not before: Fri 31 Jan 2025 07:30:26 +0000
ROA not after: Fri 30 Jan 2026 07:35:26 +0000
asID: 834
IP address blocks: 104.234.136.0/24 maxlen: 24
104.234.168.0/24 maxlen: 24
104.234.206.0/23 maxlen: 24
206.53.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b9:b7:42:aa:13:7e:56:46:e2:a8:74:70:06:a1:7e:8a:37:70:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 31 07:30:26 2025 GMT
Not After : Jan 30 07:35:26 2026 GMT
Subject: CN=646AEC81C56849225627D1817ABE3A36547C3CF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:0e:45:59:99:c4:a8:6e:e9:fb:9e:65:c0:
e6:85:f8:31:70:c7:35:3e:f3:89:f1:04:1f:e1:81:
87:84:18:e7:9e:4e:09:50:ba:0f:7e:f8:24:05:2a:
d8:b6:94:50:e6:63:31:fd:c1:aa:20:89:d9:d0:20:
77:c1:fa:9a:de:e5:69:9f:67:c2:c8:91:94:c4:06:
61:ef:7e:35:c7:4c:12:d5:e1:7a:d6:5b:66:78:78:
e2:9d:12:62:e8:78:69:53:26:79:07:60:71:ad:cb:
56:29:1d:4d:3f:de:2a:44:4e:fd:6a:1a:17:f5:33:
c5:6a:77:58:a9:92:2e:84:e4:cf:ba:b0:15:34:73:
89:cf:91:bc:17:3b:ff:49:dd:e9:cd:7f:ac:ea:40:
4b:50:45:8b:e9:11:94:0c:eb:e9:ff:0f:82:ff:12:
fb:36:54:c2:c7:e1:e5:a6:3a:e0:94:6a:1c:8b:ad:
c3:df:c9:33:a6:4f:18:7a:77:c9:74:ec:f3:3a:a6:
90:0f:29:15:11:17:74:5b:06:4b:95:0d:c2:08:fe:
4d:26:f0:2f:2a:6c:b4:9a:a9:8a:4f:27:1b:51:d9:
f5:5f:1f:a1:9c:21:44:84:bd:fd:40:f5:01:ed:5c:
9d:e7:dc:16:55:11:d0:c3:4e:f4:95:51:86:ba:0b:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6A:EC:81:C5:68:49:22:56:27:D1:81:7A:BE:3A:36:54:7C:3C:F7
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.136.0/24
104.234.168.0/24
104.234.206.0/23
206.53.63.0/24
Signature Algorithm: sha256WithRSAEncryption
34:43:d9:b5:f0:4a:49:ff:5d:9c:d1:62:25:40:46:98:bd:1d:
e4:84:05:8f:cb:f8:19:6d:20:e4:3a:37:79:7c:af:2d:39:6c:
c8:97:1f:cc:30:4d:c2:0f:7b:dc:f6:24:0b:8c:c0:21:eb:6d:
ec:cb:b0:c5:c2:76:a4:fe:65:b6:8a:d1:f2:cc:d1:78:27:aa:
b7:b4:d5:d7:b9:d3:69:e8:4d:b0:c1:c9:4c:22:a4:8a:ba:49:
a2:e6:db:72:c0:d5:23:c1:74:dc:3f:4d:48:97:5c:ef:a8:60:
b8:ac:60:c7:49:c7:70:69:33:76:60:74:ac:5f:0d:61:46:c1:
00:d5:47:65:39:44:7b:71:79:ec:ba:49:4a:f8:d6:2a:20:d2:
31:09:bd:19:33:bc:39:93:1d:df:a1:7e:ba:f1:d6:b7:e9:51:
33:df:5f:b0:61:bb:ca:e0:2e:9a:19:55:a8:d1:e3:17:58:66:
df:aa:39:0b:ae:4b:29:24:05:c4:88:8b:c9:7c:5c:8e:b9:25:
bc:c0:c0:13:1c:3c:ed:32:5e:ac:a3:fd:45:f8:15:b2:ff:52:
0c:43:7f:ce:80:e0:8d:f4:8a:2a:cb:0a:68:b9:fd:96:2b:95:
3f:4e:ed:27:b3:f0:1b:ce:f4:a0:07:a1:8c:bf:50:2f:e5:a1:
5b:c4:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:43:54 2025 by rpki-client