Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211936.roa
File: AS211936.roa (raw, json)
Hash identifier: yyGjge5+/pwbdRs+1uS3+x0RtuiPqWzmXc4LsTJFL+U=
Subject key identifier: DA:7C:82:F6:D3:FE:CB:3F:B1:5E:2A:23:3A:6F:B6:04:3E:FF:53:02
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 39E8C3ECA5C325D31E0A910BA18151474294AEDC
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211936.roa
Signing time: Mon 23 Sep 2024 09:48:59 +0000
ROA not before: Mon 23 Sep 2024 09:43:59 +0000
ROA not after: Mon 22 Sep 2025 09:48:59 +0000
asID: 211936
IP address blocks: 104.234.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e8:c3:ec:a5:c3:25:d3:1e:0a:91:0b:a1:81:51:47:42:94:ae:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Sep 23 09:43:59 2024 GMT
Not After : Sep 22 09:48:59 2025 GMT
Subject: CN=DA7C82F6D3FECB3FB15E2A233A6FB6043EFF5302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:e3:69:8a:4b:54:d1:20:21:9e:67:e8:9c:
b0:87:52:81:0c:5a:e6:33:0b:da:52:37:d4:d5:65:
f1:30:55:ff:4d:85:96:37:2b:dc:d8:e8:92:0b:de:
e6:60:19:57:3b:9d:b7:81:20:dd:9b:23:19:d6:6a:
82:c6:2f:cd:f5:ee:f3:45:78:12:8d:a0:08:00:63:
cc:99:51:42:7a:49:7e:39:3a:a9:d5:d2:47:d3:b6:
22:b7:4c:37:ba:22:31:88:17:6e:94:85:3b:9d:d4:
07:68:bb:25:92:9a:c2:06:78:47:51:cc:3f:5e:f1:
5a:85:ae:a8:04:b5:99:b2:27:4f:b9:55:b3:10:b9:
3d:58:d8:be:fb:b4:9f:9c:e9:54:03:b9:b1:a5:9f:
cc:9c:87:aa:00:bf:db:83:97:73:d2:ba:59:69:46:
60:ff:1c:ba:e5:54:59:92:a8:34:d6:6e:bc:75:f6:
0d:c4:76:f4:63:c9:f9:38:b7:f1:25:d9:4d:17:49:
53:82:fe:d8:19:b3:da:66:af:6d:f0:96:57:ce:cc:
b2:ff:dc:2f:50:9f:0a:5a:b8:f4:8a:62:75:4a:91:
a3:8a:d0:01:bd:9e:69:fb:9e:8b:ee:3c:fe:a3:eb:
b8:12:09:d6:1e:80:cf:d7:8c:bc:7f:a2:bb:5b:93:
8d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7C:82:F6:D3:FE:CB:3F:B1:5E:2A:23:3A:6F:B6:04:3E:FF:53:02
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c5:c8:04:3b:b3:19:47:f1:fd:39:e7:c8:fb:4b:a4:9e:f9:
ce:3c:b5:96:86:d7:b3:29:ff:9c:cf:ff:16:d1:8e:07:f8:d0:
71:11:4b:37:92:90:aa:85:42:03:09:34:ee:10:21:d1:d0:f7:
c9:78:38:93:b4:41:03:c0:f1:1c:de:4b:18:cf:44:9d:a4:16:
d4:73:f3:aa:77:46:78:cb:93:74:a2:cd:62:be:bf:4c:19:7c:
4e:b9:ba:10:78:6a:58:c5:9d:d5:a8:09:9f:e8:29:cd:12:78:
05:13:5c:ba:fe:1d:71:bb:a2:4b:0b:d8:96:83:23:7c:4c:ac:
82:5e:45:0d:17:24:95:e1:b7:79:65:5c:9e:2b:f9:3d:5c:86:
f8:a5:91:44:37:70:8f:39:b3:1d:b1:d8:48:75:5d:62:4a:eb:
22:d0:09:c9:66:5c:ab:b6:69:d6:7e:fa:91:b6:04:69:76:b8:
3f:e0:7d:04:56:c2:e3:75:94:c2:fe:c2:ed:09:7f:e4:25:93:
85:b6:fc:28:11:8b:f7:ff:67:bd:de:ba:cf:4d:27:df:2d:01:
30:82:7d:23:72:99:ca:8a:88:1a:ae:4b:e2:d1:b8:f2:7d:cb:
39:65:a3:b2:e4:4b:4a:af:00:55:b1:11:62:02:66:05:bc:cb:
1f:c2:98:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:32 2025 by rpki-client