Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212027.roa
File: AS212027.roa (raw, json)
Hash identifier: rw0kX88gtLNHZtWyGh1A156a20b5YF4Vk4XNlC+VzCQ=
Subject key identifier: 04:1E:3F:02:42:08:60:DF:72:00:4D:36:14:79:A7:7C:7B:A1:09:0D
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 08D363CCB3225687C305F78BC9C1DC1B232F0624
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212027.roa
Signing time: Fri 14 Mar 2025 17:51:07 +0000
ROA not before: Fri 14 Mar 2025 17:46:07 +0000
ROA not after: Fri 13 Mar 2026 17:51:07 +0000
asID: 212027
IP address blocks: 104.234.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d3:63:cc:b3:22:56:87:c3:05:f7:8b:c9:c1:dc:1b:23:2f:06:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 14 17:46:07 2025 GMT
Not After : Mar 13 17:51:07 2026 GMT
Subject: CN=041E3F02420860DF72004D361479A77C7BA1090D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:62:18:1b:a8:bf:11:27:69:c2:4c:29:4e:
c9:ce:52:79:78:15:ad:b8:c5:94:a5:ea:7a:a6:3f:
fb:e8:25:d3:99:e0:f3:d8:8c:c8:9b:5e:71:af:e5:
ee:64:43:99:4c:ba:8e:34:b6:69:9d:8f:d7:8c:24:
bd:24:72:61:3b:28:8a:fe:0c:be:5a:04:64:09:02:
3c:a7:b7:ed:87:5a:c6:49:0e:35:36:3d:d9:e1:35:
76:da:19:71:20:5c:1e:42:d9:46:06:d6:0f:47:dc:
fa:73:de:b1:87:02:0b:3d:2f:f8:e9:80:d8:a1:64:
3f:88:29:c6:06:39:73:eb:f3:88:26:15:34:3e:dd:
41:78:33:7d:22:df:7e:f4:91:e0:4d:2a:d3:da:5a:
43:25:3a:0d:c4:3b:d1:75:e8:23:c6:c2:69:89:64:
01:3e:0f:09:22:56:8d:d0:67:ed:a5:a6:01:ac:1f:
ae:4d:2e:2e:86:aa:10:a4:50:e4:ff:94:bb:3d:9f:
77:78:55:8c:5f:a9:48:f3:6e:0e:77:be:26:74:a1:
51:07:75:54:dc:a2:2e:ec:21:06:4b:72:36:5d:54:
f3:2a:c5:db:78:a2:a8:1e:ab:7a:a5:81:b5:68:95:
66:bc:ad:88:72:ff:12:b1:26:43:14:3c:f1:ae:90:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1E:3F:02:42:08:60:DF:72:00:4D:36:14:79:A7:7C:7B:A1:09:0D
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212027.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.88.0/24
Signature Algorithm: sha256WithRSAEncryption
61:24:f0:60:2c:2b:55:58:49:da:01:b7:b2:48:35:d9:16:42:
a3:24:31:a4:c8:fb:9b:bc:01:6b:bf:60:71:dc:35:8b:c7:d8:
f8:61:8b:b1:1b:4d:52:e3:03:c1:26:8a:50:3c:6a:eb:80:5b:
2c:a7:b0:8d:4e:f0:6d:c5:fa:0e:d2:96:dc:07:59:86:5b:1a:
3c:23:5e:8c:1b:85:f6:e1:d1:d4:51:ef:eb:f7:a1:f7:01:d8:
e6:d7:f1:1d:f5:57:98:df:c6:bc:78:40:b0:fb:78:90:b3:3c:
bc:46:2e:c6:62:d2:81:ce:8b:a4:92:db:5d:94:a4:94:4b:78:
8b:d9:ac:16:8c:75:78:f0:88:b1:7f:85:80:36:5d:52:f6:5a:
f8:44:99:0c:9a:86:c2:8e:d8:f7:30:50:48:a9:46:e5:77:d7:
0e:e9:f4:80:b5:5f:48:f0:64:b7:a4:fd:14:3e:1c:e3:00:6e:
71:00:44:79:63:a2:43:62:d2:4a:49:f9:a6:6b:9c:ef:fe:8c:
1f:b5:a0:13:e6:7a:3c:f3:c7:15:e1:c4:bc:52:79:b0:1b:9e:
a0:52:39:72:4b:1c:15:fa:f9:5d:cc:c6:d4:45:9d:32:bd:39:
51:6c:9b:ea:ec:c0:fb:e8:8c:36:c5:de:a8:03:5d:17:54:90:
a4:0c:12:82
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUCNNjzLMiVofDBfeLycHcGyMvBiQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMzE0MTc0NjA3WhcNMjYwMzEzMTc1MTA3
WjAzMTEwLwYDVQQDEygwNDFFM0YwMjQyMDg2MERGNzIwMDREMzYxNDc5QTc3QzdC
QTEwOTBEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvghiGBuovxEn
acJMKU7JzlJ5eBWtuMWUpep6pj/76CXTmeDz2IzIm15xr+XuZEOZTLqONLZpnY/X
jCS9JHJhOyiK/gy+WgRkCQI8p7fth1rGSQ41Nj3Z4TV22hlxIFweQtlGBtYPR9z6
c96xhwILPS/46YDYoWQ/iCnGBjlz6/OIJhU0Pt1BeDN9It9+9JHgTSrT2lpDJToN
xDvRdegjxsJpiWQBPg8JIlaN0GftpaYBrB+uTS4uhqoQpFDk/5S7PZ93eFWMX6lI
824Od74mdKFRB3VU3KIu7CEGS3I2XVTzKsXbeKKoHqt6pYG1aJVmvK2Icv8SsSZD
FDzxrpCIzwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFAQePwJCCGDfcgBNNhR5p3x7
oQkNMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzIxMjAyNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqWDANBgkqhkiG9w0BAQsFAAOC
AQEAYSTwYCwrVVhJ2gG3skg12RZCoyQxpMj7m7wBa79gcdw1i8fY+GGLsRtNUuMD
wSaKUDxq64BbLKewjU7wbcX6DtKW3AdZhlsaPCNejBuF9uHR1FHv6/eh9wHY5tfx
HfVXmN/GvHhAsPt4kLM8vEYuxmLSgc6LpJLbXZSklEt4i9msFox1ePCIsX+FgDZd
UvZa+ESZDJqGwo7Y9zBQSKlG5XfXDun0gLVfSPBkt6T9FD4c4wBucQBEeWOiQ2LS
Skn5pmuc7/6MH7WgE+Z6PPPHFeHEvFJ5sBueoFI5ckscFfr5XczG1EWdMr05UWyb
6uzA++iMNsXeqANdF1SQpAwSgg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:39 2025 by rpki-client