Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137409.roa
File: AS137409.roa (raw, json)
Hash identifier: WkrPsn2ZDqFBhWYlk4D8PucNTE0CCqUYUw5fUmdCjNk=
Subject key identifier: 17:C7:99:C7:E9:E3:97:11:06:1F:4E:A9:1E:44:CD:02:36:0F:5E:40
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 33DB26D731BB9261ED574074462FB3EBE6D0014E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137409.roa
Signing time: Mon 02 Jun 2025 08:28:37 +0000
ROA not before: Mon 02 Jun 2025 08:23:37 +0000
ROA not after: Mon 01 Jun 2026 08:28:37 +0000
asID: 137409
IP address blocks: 104.234.159.0/24 maxlen: 24
104.234.227.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:db:26:d7:31:bb:92:61:ed:57:40:74:46:2f:b3:eb:e6:d0:01:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jun 2 08:23:37 2025 GMT
Not After : Jun 1 08:28:37 2026 GMT
Subject: CN=17C799C7E9E39711061F4EA91E44CD02360F5E40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:61:d2:88:e4:cd:2a:91:a1:fe:77:5c:f9:
63:2f:34:1c:64:8b:14:7e:9e:a5:62:86:12:8f:58:
4b:cf:ab:48:c7:93:af:9e:4e:ce:2e:de:ff:69:7d:
db:7b:7e:ba:88:6c:b5:96:ec:9f:f4:77:30:d0:01:
24:6b:af:cd:89:70:81:de:30:3e:3b:75:b5:70:8b:
14:f7:4d:36:8a:23:af:3c:84:94:98:2b:04:58:79:
89:89:26:a6:2b:a2:71:ca:22:9d:32:15:36:ec:a1:
4d:43:f0:08:1b:5d:91:40:73:c8:46:63:c4:9c:c7:
88:39:a2:5e:9b:36:9e:48:8d:13:e6:8d:c6:81:7b:
8e:34:d2:44:f6:10:4d:3d:03:e8:9b:d0:e4:dc:a3:
f6:43:2f:d1:44:25:0a:dc:b2:01:57:2f:27:10:e3:
88:0d:51:3e:08:0c:78:d6:fb:26:76:ed:e1:88:22:
17:65:01:80:0c:6c:65:f5:d6:df:fa:72:04:e5:24:
09:9d:e5:89:92:c3:7a:2f:6f:eb:26:8d:1b:39:73:
94:cc:02:7e:69:d9:98:10:61:cc:c2:ef:6f:45:0d:
ba:fc:3c:1b:08:cf:a0:47:04:33:53:fb:cf:86:36:
95:78:7b:93:2f:36:40:11:47:63:47:e3:e3:40:5d:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C7:99:C7:E9:E3:97:11:06:1F:4E:A9:1E:44:CD:02:36:0F:5E:40
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.159.0/24
104.234.227.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:48:ae:82:7a:9e:0b:a8:b6:86:c7:cd:bb:71:6e:f3:51:cd:
73:9f:81:29:35:48:df:f8:28:96:1f:f4:92:7a:a0:d4:c9:b5:
d1:f6:22:99:78:7a:75:19:be:16:4c:a2:95:2a:43:5e:e4:44:
03:1d:66:66:82:67:a6:3a:e5:83:d6:25:b7:7c:f8:cf:cf:26:
b9:33:36:8a:3b:3f:8d:c4:d8:cc:91:5b:4a:1f:a0:bb:73:35:
d9:6b:3e:14:79:9f:1b:cf:1e:55:e5:65:45:97:8d:49:d3:af:
fd:23:cd:74:25:59:6f:ef:d5:fc:76:29:06:4b:d3:32:41:60:
31:fa:84:7e:55:d7:e8:28:77:c1:c5:9d:83:78:8f:3d:35:86:
40:e2:4a:1f:02:3f:58:5d:2c:de:f1:56:4c:b8:ea:65:bd:11:
a5:58:42:8f:f2:58:15:d0:31:29:62:68:fb:7c:1e:ba:d8:6b:
78:c9:94:89:82:48:1e:fb:1d:c4:8c:14:24:ed:7c:e1:b2:2d:
bf:f9:36:b9:5d:92:72:70:29:1b:b2:fd:19:c7:39:34:cc:53:
31:b7:89:d6:05:f6:b8:91:0a:89:97:e1:8e:1e:5e:2b:6d:77:
f7:5b:16:0b:30:d8:3d:8e:8a:ca:38:b3:93:ee:7c:11:cb:43:
69:d7:40:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:30:02 2025 by rpki-client