Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: 12qgMIw7pQZH/uv34yjxGXYKJXwZUJe7FBCjjDZoY4U=
Subject key identifier: A5:60:70:E6:64:72:BE:3A:09:1B:3C:2D:AD:8C:27:C6:4F:28:DF:09
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 325732A0BA4C0F6F4ED8FC918191A091EEC13D85
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
Signing time: Mon 10 Feb 2025 20:03:18 +0000
ROA not before: Mon 10 Feb 2025 19:58:18 +0000
ROA not after: Mon 09 Feb 2026 20:03:18 +0000
asID: 174
IP address blocks: 104.234.12.0/24 maxlen: 24
206.53.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:57:32:a0:ba:4c:0f:6f:4e:d8:fc:91:81:91:a0:91:ee:c1:3d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 10 19:58:18 2025 GMT
Not After : Feb 9 20:03:18 2026 GMT
Subject: CN=A56070E66472BE3A091B3C2DAD8C27C64F28DF09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:b4:4c:65:69:36:aa:b3:17:ec:b7:8b:e3:
af:12:70:6e:58:a4:70:73:62:59:18:c0:d8:ec:a4:
e6:a7:27:c0:ee:f1:9e:c6:77:42:b1:2c:39:ce:60:
c6:8b:5d:73:7b:b6:c5:82:4f:df:ee:55:2e:c0:43:
9d:e5:fd:ea:6d:36:c0:86:54:1d:1c:59:87:6b:71:
cd:e8:fd:c9:f5:dd:7d:eb:8e:30:3b:81:24:b9:88:
bf:dd:2b:bf:0a:19:43:90:85:90:b0:ab:46:0b:7e:
4b:46:31:42:a8:77:fa:6a:56:cc:68:cd:46:ea:92:
c7:8b:97:cf:7d:21:f2:c3:a3:f9:41:f0:5d:27:69:
c8:74:e7:23:f4:ac:13:b0:fa:53:fd:e2:b4:5c:31:
29:47:df:0a:c6:2a:a4:28:75:0d:0e:f5:a8:84:ce:
4f:56:57:9d:e5:54:4a:2d:82:b7:2d:b0:67:88:87:
c5:8d:cd:b3:84:31:69:bf:29:92:2b:d9:73:2f:c4:
76:05:16:2b:09:a8:6d:04:32:7f:84:01:d9:be:54:
ff:52:9e:f1:84:46:86:c0:97:57:e3:8e:5a:62:c9:
42:43:6b:14:f4:60:f2:b7:eb:37:fd:86:63:3c:95:
76:92:ee:43:6a:76:af:c9:2f:53:32:88:e6:0c:0e:
22:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:60:70:E6:64:72:BE:3A:09:1B:3C:2D:AD:8C:27:C6:4F:28:DF:09
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.12.0/24
206.53.58.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:95:91:cb:83:54:15:b6:a9:af:4d:d1:be:2e:3d:e0:8a:61:
46:de:7b:c6:20:85:e2:b8:19:3d:13:e0:ce:e8:44:e7:7e:d8:
e3:65:86:f2:e5:34:d9:1f:35:bf:3c:b5:c0:b1:6b:98:9b:c6:
4f:89:46:c4:dd:2c:e0:30:a4:57:7a:78:2f:0d:00:c7:3d:0a:
f6:8e:4c:87:a0:3e:fa:c4:89:9d:19:08:46:67:ab:cc:a5:35:
e5:07:e1:4e:a3:7a:b1:16:ba:5e:bc:93:f8:04:07:af:05:3d:
c1:b0:e1:8e:d0:27:1e:13:51:2d:74:ba:74:84:f3:2f:22:bb:
f4:4e:b7:2a:6f:2e:f6:42:c8:5e:a3:82:c8:b7:49:85:0a:da:
d8:35:e8:f6:db:a4:65:51:4e:5b:a2:a2:85:78:0d:e6:a2:39:
b7:12:4d:c6:5b:62:c8:53:c0:7b:92:fa:56:36:17:7e:9e:65:
c0:f8:1d:4c:a8:73:05:1b:4d:db:72:52:67:f7:66:ba:73:3c:
51:32:28:f4:83:af:af:8f:7f:03:cc:ae:63:9e:e6:50:cd:53:
47:5e:b2:42:82:fc:c2:f5:46:4e:6e:cf:b4:c2:a2:fc:4f:6f:
d0:64:55:bf:43:0f:6d:d6:1d:96:fc:a1:be:7b:d9:4a:01:af:
7b:dc:e1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:22 2025 by rpki-client