Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: BeU5py2IWGagIbKxEb5pDFkXucIBnEqkxMirEXSxhlU=
Subject key identifier: 33:1E:09:97:CC:82:DB:30:F6:8C:18:44:19:5B:75:72:E1:FD:54:DF
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 4872307A7C91FEC13DDEACFA61866576072DFED0
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa
Signing time: Fri 31 Jan 2025 19:41:17 +0000
ROA not before: Fri 31 Jan 2025 19:36:17 +0000
ROA not after: Fri 30 Jan 2026 19:41:17 +0000
asID: 16276
IP address blocks: 104.234.50.0/24 maxlen: 24
104.234.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:72:30:7a:7c:91:fe:c1:3d:de:ac:fa:61:86:65:76:07:2d:fe:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 31 19:36:17 2025 GMT
Not After : Jan 30 19:41:17 2026 GMT
Subject: CN=331E0997CC82DB30F68C1844195B7572E1FD54DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:9d:a2:4c:68:c4:cd:7d:c4:5f:c8:d0:07:
e7:f1:f7:c9:81:4c:f4:64:90:aa:d3:50:43:7a:76:
a6:e1:81:ed:cc:69:fb:1a:2b:cb:d4:90:c1:f9:1d:
2d:e5:3e:cf:94:e1:31:ff:91:5d:58:ed:db:c6:68:
c1:27:90:a2:a3:17:14:e6:2b:ff:92:31:c0:9c:f9:
35:e5:4a:ba:c7:8e:e8:89:1c:37:71:53:1f:68:3d:
86:ec:59:29:29:cc:d2:e1:92:2f:29:2e:6c:96:92:
78:d3:b1:b2:98:0e:5e:21:f7:41:43:97:e2:36:ab:
45:57:c1:5e:e2:da:cd:45:47:50:4e:11:4b:ab:8b:
72:f2:a4:84:02:a6:2f:c0:cc:f5:16:ee:86:8a:6e:
cc:89:24:5c:07:fb:65:2a:6c:fc:4d:28:e8:87:59:
c5:7d:c1:49:b9:68:23:ce:7d:aa:78:58:2d:64:2c:
18:87:9c:ce:d7:4d:89:63:61:2e:64:b7:d2:40:b1:
a3:29:db:6c:fa:99:83:67:12:64:67:29:44:7b:b0:
9b:69:96:93:9b:43:d4:50:17:39:84:69:ef:20:52:
d4:de:96:0f:99:2e:f0:55:dd:11:94:72:11:88:9e:
5c:cc:65:2a:8f:9b:5a:84:d6:76:d6:61:9e:a9:bf:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1E:09:97:CC:82:DB:30:F6:8C:18:44:19:5B:75:72:E1:FD:54:DF
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.50.0/24
104.234.168.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b2:57:49:14:20:72:80:a9:44:6a:60:6f:bf:5d:52:a1:88:
5f:9e:e1:28:61:d6:84:96:98:82:f2:65:c5:8d:b9:ee:bc:45:
53:c7:bf:6a:f0:ea:ef:e7:29:37:a1:ae:d1:5b:a5:3b:7c:2f:
66:95:84:b0:4f:48:92:1c:a0:ce:e1:93:3c:0e:a7:58:39:21:
8f:53:b4:cc:4f:69:c5:e3:bb:09:c1:f6:04:98:d5:08:10:76:
52:f5:0e:1d:41:d7:e6:98:29:fa:e3:d4:b7:08:aa:61:db:af:
ac:f4:f4:9c:d1:1b:48:48:3d:68:dc:4c:e5:be:e4:65:fc:2e:
b9:12:78:64:9c:22:af:94:15:8a:ce:3c:a6:f6:90:cd:0c:87:
2b:62:c6:5b:1c:0a:d4:bc:ff:8a:62:ef:70:0e:04:58:ce:f5:
c0:a0:ee:24:35:3b:80:3d:81:ba:1a:1a:47:3c:00:fb:9e:41:
c7:ac:c1:ed:ac:39:3a:1f:8c:44:8e:78:86:90:37:c5:95:38:
43:62:0a:18:c2:b0:e1:a9:c9:60:35:c3:b8:71:c8:ff:8e:1a:
b9:c0:45:00:27:a9:ef:33:6e:c0:62:bd:39:d3:d6:55:6a:80:
bc:6b:3b:c2:d1:2d:14:47:65:53:6c:46:d1:9f:a5:60:b8:b1:
56:4d:e5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:40:19 2025 by rpki-client