Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS43350.roa
File: AS43350.roa (raw, json)
Hash identifier: KqcSYNRoSNnWTQ6y2DTdsKsqMl+zj1/+Hi2mL5FYYtI=
Subject key identifier: 1C:35:0A:43:59:FA:F7:5A:F8:A6:75:55:1F:0C:7D:79:D7:7C:88:86
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 18DB3A4440DA82CF5AF1DD8507E54BC5F6567666
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS43350.roa
Signing time: Wed 29 Jan 2025 11:28:26 +0000
ROA not before: Wed 29 Jan 2025 11:23:26 +0000
ROA not after: Wed 28 Jan 2026 11:28:26 +0000
asID: 43350
IP address blocks: 104.234.1.0/24 maxlen: 24
104.234.46.0/24 maxlen: 24
104.234.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:db:3a:44:40:da:82:cf:5a:f1:dd:85:07:e5:4b:c5:f6:56:76:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 29 11:23:26 2025 GMT
Not After : Jan 28 11:28:26 2026 GMT
Subject: CN=1C350A4359FAF75AF8A675551F0C7D79D77C8886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:13:68:ed:ba:89:76:de:9a:0f:42:65:64:
dc:41:56:9c:ec:ab:b0:e8:18:cc:e4:11:5e:0a:4f:
fb:84:5e:77:bf:6d:9a:1a:00:02:4a:ce:b3:57:0c:
3e:02:7d:b8:bd:1f:84:46:2f:5d:e7:ed:86:6e:c1:
a0:ed:31:92:f7:f5:17:f9:0f:58:52:09:53:e2:aa:
c1:07:cc:06:23:be:05:19:37:fb:af:f7:35:61:51:
66:1b:78:f3:12:96:b0:06:96:ef:58:01:9c:a6:b3:
3b:15:7e:7f:65:a0:8c:e3:a6:f7:ea:3e:58:8e:c3:
08:80:88:30:96:49:07:14:6b:29:d5:aa:54:34:d3:
60:0d:e4:b6:4d:7f:7a:f0:a9:4f:43:32:44:63:42:
36:15:d4:b4:05:8c:65:7d:74:10:8c:66:2f:7d:8a:
1a:46:a2:41:40:2d:20:8c:e1:0a:c9:33:0f:b0:4b:
73:58:10:18:d2:a4:6a:c6:de:9c:0c:d7:76:5c:74:
0d:8d:f5:c5:9f:b3:dd:55:dd:ae:85:15:e2:80:da:
c3:31:fb:b5:de:07:30:f5:3b:99:0b:f1:2e:26:90:
cb:0f:4b:a6:1a:06:8e:ca:b5:26:21:97:c0:3b:72:
ed:00:b1:db:2d:7f:b4:9c:8d:98:71:ff:47:2e:74:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:35:0A:43:59:FA:F7:5A:F8:A6:75:55:1F:0C:7D:79:D7:7C:88:86
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS43350.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.1.0/24
104.234.46.0/24
104.234.196.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8d:7b:d3:89:32:84:ba:2c:50:40:ac:c2:89:e8:25:45:9d:
49:01:fe:e5:01:91:0c:d9:5b:0f:50:5f:4b:9e:ae:40:ed:49:
bc:ee:45:a7:26:0c:67:b4:bf:63:2e:de:a3:e1:23:34:b8:bc:
8a:c7:a4:e6:bd:36:d2:70:04:e6:a3:90:04:42:9d:50:65:15:
fe:2c:56:aa:9d:5c:66:86:89:c7:cb:79:5d:82:03:10:1d:39:
9d:83:cc:55:4e:d5:7a:e1:22:c5:fa:67:89:f5:c1:ab:69:2d:
dc:b8:40:2b:b3:76:9d:b2:91:0e:f3:dd:4f:f6:14:e2:3b:c3:
86:3c:c0:54:ef:55:3f:1d:7e:4c:94:e9:db:2e:dc:cc:33:f4:
1f:3c:f9:a5:d0:c5:64:74:e1:f9:e9:ea:c8:ed:88:c9:76:00:
01:d3:42:34:09:e0:4a:fc:09:04:9c:1b:8b:79:22:b4:3f:f2:
e7:82:12:2e:2d:d8:86:ac:b9:4b:c2:9f:27:30:a4:4b:d1:bc:
76:81:cf:f7:47:c5:ee:d4:23:2b:91:fd:09:92:31:54:2d:16:
d0:42:2d:61:2a:9c:58:92:25:a5:42:ba:20:e2:eb:7b:e9:79:
bd:bd:9e:00:2d:1c:81:c3:e2:0b:5e:eb:fe:24:7c:1c:d1:b6:
a6:7b:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:05:36 2025 by rpki-client