Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa
File: AS214024.roa (raw, json)
Hash identifier: GG3rSb+j2jwnDuMGDlX1k7aymiY5qaKpODhDknpToy0=
Subject key identifier: 32:E4:0A:AD:29:D2:2C:53:A0:8B:C8:5D:73:6D:73:D2:F8:82:02:A6
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 2367F5C76021BC03B84607D5AB85339E009D0B2B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa
Signing time: Tue 11 Feb 2025 00:01:57 +0000
ROA not before: Mon 10 Feb 2025 23:56:57 +0000
ROA not after: Tue 10 Feb 2026 00:01:57 +0000
asID: 214024
IP address blocks: 104.234.158.0/24 maxlen: 24
104.234.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:67:f5:c7:60:21:bc:03:b8:46:07:d5:ab:85:33:9e:00:9d:0b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 10 23:56:57 2025 GMT
Not After : Feb 10 00:01:57 2026 GMT
Subject: CN=32E40AAD29D22C53A08BC85D736D73D2F88202A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:d3:cd:29:70:0e:9d:07:b1:6f:21:8e:0b:
21:20:36:f5:99:64:ea:10:c5:01:d6:e3:e8:a6:42:
6e:50:53:2e:06:09:c9:ef:fb:30:ff:b6:4d:1c:78:
d7:df:7e:0c:f3:00:cd:a2:39:d1:14:4f:a1:29:c2:
3c:3d:fc:2a:32:54:89:b8:93:8c:11:2f:85:9e:e0:
d4:c7:92:c6:08:9e:b2:81:db:bf:f2:b4:be:da:0d:
1f:15:07:56:d3:42:24:93:ac:32:b7:0c:85:a6:5c:
45:56:49:ff:ad:95:45:22:5b:58:2b:89:45:7b:e7:
8b:43:2c:a4:f6:10:69:f8:d8:aa:5b:71:28:9f:ff:
d0:8e:17:33:12:39:9c:0b:81:9e:d9:d1:f3:89:35:
2c:1b:08:95:c4:d2:bc:c1:3e:bf:3c:46:74:00:74:
92:5b:7d:04:ac:bf:56:25:a0:9e:2d:1d:95:18:72:
68:5c:97:4e:ed:73:de:34:a5:ab:d7:72:44:fe:e4:
64:50:6e:5f:28:d0:f2:de:99:c9:99:77:18:d9:57:
e9:7e:3b:93:13:2d:8a:3a:29:ae:31:52:f1:56:db:
17:42:b7:47:0b:7e:15:e2:1c:85:e8:ef:2c:73:b8:
b5:74:b0:f0:6e:ad:60:eb:9a:8c:f0:f0:b0:bd:a3:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E4:0A:AD:29:D2:2C:53:A0:8B:C8:5D:73:6D:73:D2:F8:82:02:A6
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.158.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:f8:06:58:75:39:07:ad:af:3c:3a:af:43:4e:76:61:14:e0:
2e:a7:6b:d8:5c:ba:f1:76:b5:44:5b:cc:d2:f0:86:81:e3:c1:
15:51:e3:20:01:75:fb:cf:cf:84:64:1e:ce:73:28:9b:b1:dc:
d7:10:c3:ca:d6:f9:56:98:4a:af:65:ad:37:7b:0f:01:2d:7f:
49:f3:ee:05:34:9f:f7:83:12:15:90:7d:1a:e5:ef:3d:97:7b:
2c:ef:ab:da:50:49:66:69:c7:76:d3:8d:53:2b:7b:06:70:6d:
13:31:9a:98:e7:96:24:2e:75:8a:2d:c0:37:f5:e5:cc:8a:8f:
60:7c:5a:90:b5:99:ba:39:ed:e2:ee:42:fd:09:b1:7f:0c:fd:
5a:16:f6:76:04:45:37:f1:50:50:20:12:90:38:11:b2:2a:b3:
1c:a6:c7:26:fa:f8:7a:80:a3:90:d6:11:15:cc:11:3c:21:d0:
6a:20:65:8b:c4:3c:e8:b5:06:50:33:7b:3b:f7:e7:be:53:1f:
82:74:6a:57:be:aa:4a:94:56:64:fe:c7:21:c8:4e:d2:eb:0b:
0b:34:57:63:6d:ab:d6:92:af:14:75:ab:30:95:d3:d9:42:a2:
3c:cf:3b:ce:11:44:0e:4a:3f:06:35:78:a7:93:26:0a:b4:e9:
5f:b0:fc:6e
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUI2f1x2AhvAO4RgfVq4UzngCdCyswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMjEwMjM1NjU3WhcNMjYwMjEwMDAwMTU3
WjAzMTEwLwYDVQQDEygzMkU0MEFBRDI5RDIyQzUzQTA4QkM4NUQ3MzZENzNEMkY4
ODIwMkE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuULTzSlwDp0H
sW8hjgshIDb1mWTqEMUB1uPopkJuUFMuBgnJ7/sw/7ZNHHjX334M8wDNojnRFE+h
KcI8PfwqMlSJuJOMES+FnuDUx5LGCJ6ygdu/8rS+2g0fFQdW00Ikk6wytwyFplxF
Vkn/rZVFIltYK4lFe+eLQyyk9hBp+NiqW3Eon//QjhczEjmcC4Ge2dHziTUsGwiV
xNK8wT6/PEZ0AHSSW30ErL9WJaCeLR2VGHJoXJdO7XPeNKWr13JE/uRkUG5fKNDy
3pnJmXcY2VfpfjuTEy2KOimuMVLxVtsXQrdHC34V4hyF6O8sc7i1dLDwbq1g65qM
8PCwvaM9UwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFDLkCq0p0ixToIvIXXNtc9L4
ggKmMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzIxNDAyNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWjqnjANBgkqhkiG9w0BAQsFAAOC
AQEAt/gGWHU5B62vPDqvQ052YRTgLqdr2Fy68Xa1RFvM0vCGgePBFVHjIAF1+8/P
hGQeznMom7Hc1xDDytb5VphKr2WtN3sPAS1/SfPuBTSf94MSFZB9GuXvPZd7LO+r
2lBJZmnHdtONUyt7BnBtEzGamOeWJC51ii3AN/XlzIqPYHxakLWZujnt4u5C/Qmx
fwz9Whb2dgRFN/FQUCASkDgRsiqzHKbHJvr4eoCjkNYRFcwRPCHQaiBli8Q86LUG
UDN7O/fnvlMfgnRqV76qSpRWZP7HIchO0usLCzRXY22r1pKvFHWrMJXT2UKiPM87
zhFEDko/BjV4p5MmCrTpX7D8bg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:20 2025 by rpki-client