Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134176.roa
File: AS134176.roa (raw, json)
Hash identifier: G+21oZ3zfXh8+t7f7x2o80wHPszd3zABAZ3HU2+zNlA=
Subject key identifier: 5B:C9:16:EB:23:58:97:C3:DC:55:75:96:59:24:71:04:25:4B:15:0B
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 42B19E19B6EDF55C1B02D321237F6E5585EEB9AD
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134176.roa
Signing time: Thu 16 Jan 2025 06:52:53 +0000
ROA not before: Thu 16 Jan 2025 06:47:53 +0000
ROA not after: Thu 15 Jan 2026 06:52:53 +0000
asID: 134176
IP address blocks: 104.234.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b1:9e:19:b6:ed:f5:5c:1b:02:d3:21:23:7f:6e:55:85:ee:b9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 16 06:47:53 2025 GMT
Not After : Jan 15 06:52:53 2026 GMT
Subject: CN=5BC916EB235897C3DC55759659247104254B150B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:99:6d:93:c4:32:e6:7d:ca:42:66:d0:cb:65:
13:54:3f:b5:d1:0b:44:c8:86:ce:86:90:21:e4:13:
e0:36:44:5e:80:a6:55:4c:ed:3c:fa:ba:a0:7c:2a:
c9:56:f5:09:51:92:7d:11:a0:79:09:3d:66:e8:56:
46:3f:07:be:35:c6:91:bb:4f:9e:82:9a:a6:7b:fd:
ab:c9:1b:8e:7b:9c:6f:83:d6:b9:95:f4:99:c2:8a:
55:f6:02:74:48:b4:05:22:ba:37:15:3d:37:fd:72:
26:ee:89:f2:a9:64:34:ec:bb:6e:c0:29:67:59:c2:
b0:4d:33:bb:24:b0:7b:d4:23:f3:cf:15:0d:42:28:
47:83:42:4b:d2:df:70:6e:a1:bb:5f:69:76:1a:3d:
f4:43:9b:09:4d:82:bb:68:72:5f:c3:45:c6:00:0d:
43:90:22:b3:5a:8c:42:45:97:19:aa:c1:8f:e9:50:
a2:03:c4:cb:b5:e0:1c:49:2a:44:b1:ae:7c:a8:1c:
73:5c:c5:ad:8c:15:df:ab:86:85:67:55:4e:5b:f7:
93:58:d9:44:b3:29:29:32:3f:d4:48:24:35:24:ad:
36:56:95:9d:22:1f:68:e9:21:6a:d3:82:44:3a:35:
94:07:55:1a:03:85:a0:35:c0:2c:21:d9:ec:0a:e6:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C9:16:EB:23:58:97:C3:DC:55:75:96:59:24:71:04:25:4B:15:0B
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134176.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.48.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b4:29:bd:9e:14:53:00:ff:a8:9f:19:10:db:b6:e4:62:8f:
63:3c:0f:02:e0:bd:de:45:5c:d6:25:fa:72:d6:c1:ab:1e:a5:
e2:80:4f:86:6a:40:43:db:76:97:a4:16:08:f1:d6:23:80:ae:
ab:87:e5:d3:30:df:3f:40:45:30:a6:93:13:59:34:4e:74:f2:
5b:c2:54:ef:3a:8d:8e:e9:42:98:88:77:75:2c:11:39:5c:bf:
a4:18:14:36:d7:10:e8:f5:48:bb:7c:da:4d:ab:b0:f6:7b:96:
71:48:4b:f5:50:7c:1a:61:d9:b1:69:5c:ad:ef:cb:22:d9:99:
ae:89:10:fc:79:e3:72:d6:de:7b:b7:12:80:9f:7c:42:b7:0e:
45:e3:29:db:81:1b:b6:fa:d8:de:94:f3:f9:f0:7b:93:83:af:
f5:e4:11:a0:f9:16:b2:21:85:68:00:29:91:f1:88:a5:46:ad:
0e:6a:29:40:40:ab:e0:47:75:bf:6c:20:b9:92:16:a4:35:80:
8b:0b:b8:38:04:94:6a:3d:fc:57:49:34:55:83:13:fc:81:23:
3b:1a:66:e4:9b:ca:ff:c0:3c:aa:16:90:5a:5c:03:c2:d3:3a:
d2:eb:f4:96:5d:24:68:65:95:d6:2d:e4:37:dd:ab:20:32:7e:
45:fc:1b:8e
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUQrGeGbbt9VwbAtMhI39uVYXuua0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTE2MDY0NzUzWhcNMjYwMTE1MDY1MjUz
WjAzMTEwLwYDVQQDEyg1QkM5MTZFQjIzNTg5N0MzREM1NTc1OTY1OTI0NzEwNDI1
NEIxNTBCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pltk8Qy5n3K
QmbQy2UTVD+10QtEyIbOhpAh5BPgNkRegKZVTO08+rqgfCrJVvUJUZJ9EaB5CT1m
6FZGPwe+NcaRu0+egpqme/2ryRuOe5xvg9a5lfSZwopV9gJ0SLQFIro3FT03/XIm
7onyqWQ07LtuwClnWcKwTTO7JLB71CPzzxUNQihHg0JL0t9wbqG7X2l2Gj30Q5sJ
TYK7aHJfw0XGAA1DkCKzWoxCRZcZqsGP6VCiA8TLteAcSSpEsa58qBxzXMWtjBXf
q4aFZ1VOW/eTWNlEsykpMj/USCQ1JK02VpWdIh9o6SFq04JEOjWUB1UaA4WgNcAs
IdnsCuY5UQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFvJFusjWJfD3FV1llkkcQQl
SxULMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzEzNDE3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqMDANBgkqhkiG9w0BAQsFAAOC
AQEAFbQpvZ4UUwD/qJ8ZENu25GKPYzwPAuC93kVc1iX6ctbBqx6l4oBPhmpAQ9t2
l6QWCPHWI4Cuq4fl0zDfP0BFMKaTE1k0TnTyW8JU7zqNjulCmIh3dSwROVy/pBgU
NtcQ6PVIu3zaTauw9nuWcUhL9VB8GmHZsWlcre/LItmZrokQ/Hnjctbee7cSgJ98
QrcOReMp24EbtvrY3pTz+fB7k4Ov9eQRoPkWsiGFaAApkfGIpUatDmopQECr4Ed1
v2wguZIWpDWAiwu4OASUaj38V0k0VYMT/IEjOxpm5JvK/8A8qhaQWlwDwtM60uv0
ll0kaGWV1i3kN92rIDJ+Rfwbjg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:47 2025 by rpki-client