Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16512.roa
File: AS16512.roa (raw, json)
Hash identifier: YWJEKNFsp8xZZh0vJ+8+Pi0XRL5C9NE1yB13b+F/hrc=
Subject key identifier: E6:D8:2F:AE:A7:02:E6:AC:81:5E:FA:ED:1D:55:35:92:6E:1C:02:0D
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 115327242E060A1CE2B038F48B3B4B8831299F3A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16512.roa
Signing time: Tue 14 Jan 2025 22:28:23 +0000
ROA not before: Tue 14 Jan 2025 22:23:23 +0000
ROA not after: Tue 13 Jan 2026 22:28:23 +0000
asID: 16512
IP address blocks: 104.234.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:53:27:24:2e:06:0a:1c:e2:b0:38:f4:8b:3b:4b:88:31:29:9f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 14 22:23:23 2025 GMT
Not After : Jan 13 22:28:23 2026 GMT
Subject: CN=E6D82FAEA702E6AC815EFAED1D5535926E1C020D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:f7:19:5e:fd:4e:81:09:7a:81:95:b1:56:
39:b9:57:e6:1a:e9:6f:ad:65:0e:ec:eb:77:b3:f6:
f8:bc:8b:88:08:96:4c:35:aa:f9:3b:03:36:56:4b:
d2:d3:73:4b:1b:0d:71:c2:02:ec:53:bd:50:bd:65:
c0:69:dd:4a:1c:31:b3:1d:cf:93:06:e3:a3:4d:60:
e4:22:d6:e9:5c:48:72:7a:aa:7d:73:08:31:79:97:
25:09:95:a8:3b:7c:b8:f0:f5:10:ab:c9:72:ba:c2:
0b:76:bf:f8:93:73:72:79:2d:12:11:34:7d:00:ff:
3c:f7:e8:fc:30:bc:c8:86:f8:b5:e5:be:c3:0b:1c:
79:2b:f2:3c:9d:5b:62:1c:83:32:82:1b:1c:43:50:
27:28:bc:45:82:41:88:91:82:94:47:37:e0:19:d4:
7b:dd:02:ac:0c:75:c9:0c:60:45:c7:ae:b2:8a:62:
0b:36:05:74:ee:64:92:36:28:ec:cf:9c:c3:a8:13:
53:2b:b7:52:86:fe:13:5a:14:d8:ba:ad:9c:f9:93:
3a:2f:ff:9e:5f:37:dd:24:67:e8:66:6f:71:c3:87:
d6:d0:3d:b2:21:51:44:5e:14:2b:5f:5b:b1:76:1c:
6e:ea:8e:f4:f7:88:4d:2e:98:8f:84:71:46:dd:b1:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D8:2F:AE:A7:02:E6:AC:81:5E:FA:ED:1D:55:35:92:6E:1C:02:0D
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16512.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.66.0/24
Signature Algorithm: sha256WithRSAEncryption
00:cd:d0:64:b7:28:de:ca:f9:b5:8f:d1:56:1a:dd:1c:10:c8:
9b:81:7a:63:32:03:78:80:94:24:9a:73:73:71:dc:65:28:27:
2a:01:e8:8c:83:33:fa:6a:85:2c:2f:fe:2a:67:8a:ba:61:a8:
07:36:51:3c:5c:74:a9:32:1e:1c:47:19:b7:e3:2e:13:a3:bf:
59:36:0e:7a:86:82:c7:45:64:22:72:24:e9:13:24:38:d0:25:
5d:d2:45:ec:29:24:0a:ca:a5:07:66:9f:05:98:81:2a:48:c4:
ad:79:90:e0:56:6b:13:97:69:19:e4:02:6f:cb:41:3b:c3:22:
c4:c5:af:17:fc:ad:0a:52:ad:7c:c6:2f:f1:29:c8:41:c5:ae:
d6:0b:fc:1b:1b:06:31:d3:1f:84:d7:32:1e:b2:d3:15:98:cc:
e3:a0:4e:af:e1:f9:b2:79:66:5c:83:c1:ff:68:8e:ab:e1:de:
41:5c:f3:12:93:b7:41:f5:72:80:2c:80:ac:ab:2e:a7:bf:70:
c3:a0:e9:24:ed:f5:c7:4e:1c:0b:0f:14:25:4f:f4:aa:ed:d3:
ff:3b:ff:77:c5:f7:9f:a2:f7:9a:bc:0e:ee:be:60:de:1e:af:
1f:5d:26:ba:73:70:3b:10:ee:c6:c5:29:10:79:16:68:8b:61:
18:d9:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:52 2025 by rpki-client