Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS153607.roa
File: AS153607.roa (raw, json)
Hash identifier: dhdRAjVS1Fbyc9+CMc40U5+jIEiY5wNqpmOBujNq8vs=
Subject key identifier: 8D:A8:35:D1:80:B7:C1:9C:AB:4F:F4:CC:FF:15:B4:CE:64:EE:92:7A
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 1F7AD9CA55A18965782DEB753A276FE3913BC339
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS153607.roa
Signing time: Thu 20 Feb 2025 02:17:21 +0000
ROA not before: Thu 20 Feb 2025 02:12:21 +0000
ROA not after: Thu 19 Feb 2026 02:17:21 +0000
asID: 153607
IP address blocks: 104.234.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:7a:d9:ca:55:a1:89:65:78:2d:eb:75:3a:27:6f:e3:91:3b:c3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 20 02:12:21 2025 GMT
Not After : Feb 19 02:17:21 2026 GMT
Subject: CN=8DA835D180B7C19CAB4FF4CCFF15B4CE64EE927A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:5c:35:48:f9:39:99:ba:92:d7:85:45:1c:
7b:c1:5e:e8:56:a4:a4:ae:7a:ae:5d:68:b0:aa:13:
db:6e:f1:ed:18:07:7b:d4:d5:80:18:39:a0:8a:41:
05:b0:c4:57:ff:86:ab:0a:9a:86:9c:37:d6:56:fe:
cd:75:8b:b3:7a:3c:b1:6f:9d:98:6c:82:54:1d:84:
41:34:ff:6e:14:2e:bb:79:b1:dc:1f:c2:38:34:0c:
23:99:e4:86:12:46:9e:fb:fe:84:6d:02:ce:88:95:
44:ff:11:82:bf:d9:8e:50:3f:bb:db:33:5e:63:f6:
ec:91:62:4e:6a:47:05:04:00:57:81:14:49:c4:30:
4b:ba:66:26:b2:d9:69:86:7b:18:56:34:d1:f9:78:
e0:b5:8d:9f:ea:19:31:e3:28:60:fa:dd:82:43:6b:
07:5a:f3:50:74:ee:d6:c8:b4:bc:48:39:13:4f:d5:
97:8f:f0:28:00:1f:df:89:a4:c5:62:0f:73:8d:b3:
9d:48:c5:9e:56:e6:af:78:83:93:b6:7a:b3:59:05:
6a:99:9e:3e:af:22:ef:75:b4:8e:5c:ea:f2:c8:46:
75:e6:5d:9c:63:23:b8:2a:55:8b:dc:12:50:f8:43:
21:6b:d7:d0:e5:65:71:b0:eb:6b:19:89:06:bf:ae:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A8:35:D1:80:B7:C1:9C:AB:4F:F4:CC:FF:15:B4:CE:64:EE:92:7A
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS153607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.133.0/24
Signature Algorithm: sha256WithRSAEncryption
77:dc:93:7d:ea:fa:1b:dc:c1:27:f8:06:8f:06:47:e2:b6:88:
81:d7:38:0f:6e:72:b8:8e:e4:bb:65:b3:a6:c9:fe:89:56:22:
5a:fe:33:89:d7:77:c3:b6:cd:a3:b1:2f:55:54:a6:e3:a8:09:
82:fb:c2:78:0f:29:84:70:8c:d6:8a:ad:33:54:ad:ce:40:d8:
72:dc:9e:97:e4:78:5f:a2:d5:70:57:8c:2b:bb:72:15:14:31:
d9:9f:73:1a:29:96:3e:bb:90:96:19:46:88:ee:89:21:fc:ad:
86:75:15:73:62:a9:8a:ff:e8:d6:2b:4f:99:00:dd:e6:2b:24:
0e:39:3c:2b:66:a6:b4:19:b5:22:27:a6:53:1b:1b:0d:2c:8e:
d6:45:7e:41:54:75:b9:ab:0f:bb:fc:9c:27:dd:f6:92:94:2d:
a5:48:ff:b6:60:e7:0b:4e:45:ae:77:8d:b4:a1:1e:58:9b:2b:
f0:90:13:ff:21:bd:4c:5e:27:57:4b:c0:d7:78:ee:b0:6e:db:
f4:b9:af:d8:a9:3e:d5:b2:82:53:23:30:8e:f4:67:57:05:93:
23:e0:54:24:d8:3f:71:03:56:21:4d:f2:d0:17:62:ec:aa:91:
40:37:60:fb:46:e4:53:07:d7:f7:8e:5b:c7:7b:53:81:90:c3:
0f:3e:5c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:51 2025 by rpki-client