Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209043.roa
File: AS209043.roa (raw, json)
Hash identifier: YhCSf/padU1nchR04/nObCFZa8IUgyKYBWP9umMJJbM=
Subject key identifier: 9A:8D:D9:5E:06:2C:08:25:71:73:54:C7:B3:27:7A:7B:79:26:F9:8C
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 5BDFBFD6A1ABEBA6668403518720A97B0FC35B77
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209043.roa
Signing time: Thu 20 Feb 2025 08:28:26 +0000
ROA not before: Thu 20 Feb 2025 08:23:26 +0000
ROA not after: Thu 19 Feb 2026 08:28:26 +0000
asID: 209043
IP address blocks: 98.142.249.0/24 maxlen: 24
104.234.68.0/24 maxlen: 24
104.234.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:df:bf:d6:a1:ab:eb:a6:66:84:03:51:87:20:a9:7b:0f:c3:5b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 20 08:23:26 2025 GMT
Not After : Feb 19 08:28:26 2026 GMT
Subject: CN=9A8DD95E062C0825717354C7B3277A7B7926F98C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:bf:6b:c7:61:f5:43:22:09:85:62:c9:df:
69:90:2e:07:01:eb:2f:98:78:40:cd:60:2e:f6:23:
44:14:59:ef:38:8a:3d:6d:b4:03:b1:5c:05:6b:92:
83:e0:73:1c:4b:be:10:79:ab:4e:b4:d7:78:14:d6:
0b:3d:6b:8e:84:e4:08:b6:b3:77:98:4f:04:ce:3f:
5b:14:a5:3b:9e:54:c0:60:5f:f8:dd:36:d3:03:cc:
e6:93:d4:ed:f2:98:55:b5:de:0b:4e:e5:32:56:42:
9c:67:a0:9e:26:5d:b9:84:2b:57:87:fb:5b:68:d7:
54:0b:91:cc:8e:77:54:19:eb:69:8a:55:de:0a:e1:
04:65:fe:83:70:0d:9b:7f:8a:89:46:2f:e7:eb:fa:
5f:26:eb:02:ac:da:10:99:05:dc:f3:a0:96:44:6d:
d9:bd:fe:2c:2f:72:6e:bf:56:f8:3a:f1:4a:d1:f6:
05:5c:35:13:14:c3:b4:f2:54:ed:de:bf:6d:10:5b:
bf:e3:92:52:79:d9:1b:10:64:56:7b:a2:07:65:17:
6f:aa:25:d4:a3:75:e8:2f:4b:1d:22:19:7e:0e:78:
57:58:4f:86:38:37:9d:f0:b0:9b:c5:1e:05:d4:79:
c6:7d:74:e7:86:36:6b:70:1a:a8:09:d6:bb:d0:b5:
39:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8D:D9:5E:06:2C:08:25:71:73:54:C7:B3:27:7A:7B:79:26:F9:8C
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.249.0/24
104.234.68.0/24
104.234.145.0/24
Signature Algorithm: sha256WithRSAEncryption
34:31:a3:43:87:8b:db:67:fa:3b:39:f0:bd:8e:f7:5b:01:5e:
20:51:45:c0:ee:d6:13:1f:47:b8:1a:05:f9:ee:de:69:e7:68:
c2:bc:01:a2:01:d4:33:e8:49:8b:8a:d5:41:e2:10:78:66:aa:
ea:3b:d9:c3:1c:40:08:bb:88:49:38:79:7c:d8:b9:18:97:d2:
0b:95:7e:a7:db:4a:ca:5a:39:35:05:d3:5e:3c:63:51:69:2f:
ca:05:dd:46:46:43:7f:b4:61:54:23:57:7c:eb:2e:53:22:9d:
14:76:4a:05:44:ab:22:21:d2:f8:20:2d:14:d6:8a:bc:c4:c7:
bc:a7:8a:50:d0:f8:fe:48:e9:70:d0:e6:db:32:5c:6f:92:d4:
bc:9d:c3:f4:33:1c:ba:0d:9a:c3:e8:40:a0:0d:e9:e1:38:bd:
30:e0:4e:d2:31:8f:0a:e6:a7:f1:b0:aa:29:06:01:d4:4e:c6:
5f:41:33:65:45:4b:17:8d:2a:ac:e6:ff:e6:74:27:b3:e8:64:
1a:4e:73:30:b1:7a:06:76:02:bd:83:3e:a8:07:4c:a6:cd:67:
b7:0e:36:32:97:bd:13:c5:7a:19:36:9d:b4:ee:07:78:52:39:
47:f6:fe:3c:47:d7:e7:2e:59:4a:db:90:20:0f:fd:e2:f0:b0:
03:8a:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:17 2025 by rpki-client