Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137517.roa
File: AS137517.roa (raw, json)
Hash identifier: nBKnZ33M8keV9iLf5apFAK+kJKrwgcDSfTKYMpqJKW4=
Subject key identifier: 4C:26:51:0F:D4:AE:76:35:56:F1:33:31:F7:E3:4A:DD:08:F4:76:E6
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 093C9B94E7DA75242A9AEBAB8C295B6425EB5A2C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137517.roa
Signing time: Thu 08 Aug 2024 11:39:36 +0000
ROA not before: Thu 08 Aug 2024 11:34:36 +0000
ROA not after: Thu 07 Aug 2025 11:39:36 +0000
asID: 137517
IP address blocks: 104.234.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:3c:9b:94:e7:da:75:24:2a:9a:eb:ab:8c:29:5b:64:25:eb:5a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Aug 8 11:34:36 2024 GMT
Not After : Aug 7 11:39:36 2025 GMT
Subject: CN=4C26510FD4AE763556F13331F7E34ADD08F476E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:dd:81:72:ef:e9:70:a7:93:9f:8a:6b:29:
e4:ba:fa:73:aa:97:96:81:8a:5c:a1:72:c9:58:82:
60:14:2a:09:04:56:09:51:14:4b:67:52:aa:11:e6:
d4:76:5e:d3:22:e0:10:26:10:f9:92:ac:36:df:bf:
0e:cf:3e:c4:6e:1a:50:fe:d8:01:1e:91:85:ee:6f:
84:d0:34:3c:6b:be:af:b1:ed:28:06:a3:e2:cb:99:
ee:ec:73:04:04:c9:57:76:eb:ed:47:ff:14:ea:35:
36:d3:db:b5:d1:e7:67:99:d4:8e:f1:8e:3d:d7:5a:
e6:f1:4e:fa:c2:94:6b:68:f5:25:1f:5f:1b:ea:55:
7b:be:f2:aa:4f:2f:e0:04:b0:68:37:74:33:58:46:
8f:57:b7:2d:3c:89:59:77:0c:0c:41:b9:ac:f2:7d:
3b:92:40:22:25:9d:e9:51:7b:6d:4e:cf:9a:1a:30:
1a:b8:87:8a:56:27:ae:92:47:ae:e6:2e:a3:e2:8a:
55:d8:b2:db:84:21:22:2b:ee:2a:98:4f:b2:68:65:
34:9f:dc:f8:f6:a4:9b:01:8e:2b:97:1e:10:f4:e6:
8a:f1:4d:b1:de:3e:c2:d9:cb:92:4b:26:66:bc:d8:
63:41:24:10:68:f8:cc:ad:20:0a:d6:3a:25:b9:9d:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:26:51:0F:D4:AE:76:35:56:F1:33:31:F7:E3:4A:DD:08:F4:76:E6
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.165.0/24
Signature Algorithm: sha256WithRSAEncryption
98:12:00:8e:a2:c7:28:52:cf:df:4a:83:fb:a3:15:32:47:b1:
15:6e:70:93:f3:14:11:6f:72:25:0e:32:0a:5d:b4:e7:ff:30:
49:fa:5b:04:62:a9:53:bf:40:fe:7f:ec:d5:f4:cc:e2:8e:f6:
3a:bd:e8:9e:8b:ea:0b:4a:4f:8e:1f:94:8e:92:86:bd:91:ab:
f0:e6:75:8e:c8:44:5f:09:b4:86:d1:bc:fe:25:7b:81:3e:82:
5e:6c:b2:4c:77:59:d8:73:40:b0:ac:c8:23:01:c2:bc:ea:7d:
5d:22:be:b7:f0:1e:60:0f:fb:e6:0c:78:e5:62:b7:e3:21:0e:
21:b9:2f:cf:09:c1:b3:ad:ad:99:66:1f:02:c6:75:f3:21:e7:
fa:da:1f:f0:8d:95:88:5e:76:05:9c:2b:61:5d:9d:ce:a2:2a:
58:dd:03:b0:e1:b2:af:07:22:09:4d:8e:40:cb:24:92:82:fe:
c3:d1:3b:1d:8b:1a:45:08:a7:87:24:a1:78:fb:6e:44:15:84:
75:c2:d8:26:21:3a:4b:c6:6f:0c:3c:41:e7:89:3d:84:cf:26:
5a:af:32:00:10:4f:24:6f:14:25:29:ec:36:13:4c:45:fe:03:
0b:33:64:0f:d9:4d:fc:b8:28:20:e1:bd:5d:40:48:24:b6:c6:
41:a2:89:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:29 2025 by rpki-client