Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: mtPaxIULajMEi3PTXAI0zSDfMKNANybjNBbw9qzrXvo=
Subject key identifier: 51:E3:E8:35:43:1E:C0:C3:ED:8E:84:5C:D8:97:85:AA:45:91:94:A4
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 51482E58B00DAF7E71DB462D4208F94DD2CE1B68
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa
Signing time: Thu 16 Jan 2025 00:01:58 +0000
ROA not before: Wed 15 Jan 2025 23:56:58 +0000
ROA not after: Thu 15 Jan 2026 00:01:58 +0000
asID: 214025
IP address blocks: 104.234.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:48:2e:58:b0:0d:af:7e:71:db:46:2d:42:08:f9:4d:d2:ce:1b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 15 23:56:58 2025 GMT
Not After : Jan 15 00:01:58 2026 GMT
Subject: CN=51E3E835431EC0C3ED8E845CD89785AA459194A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0a:ac:db:65:bb:89:ea:ad:ab:51:f8:26:3e:
b3:65:f8:ee:20:5c:9b:bd:21:25:21:14:5c:6f:f9:
03:b6:e3:14:97:b0:33:44:7d:7d:4d:09:75:b0:c8:
1b:16:5e:ee:29:c8:0b:33:e2:20:3a:33:28:ad:f9:
b7:02:ad:64:04:3e:9b:0f:b0:4d:b0:34:39:77:b6:
2d:1a:83:7a:c9:a2:3a:91:91:9c:da:fd:7f:3e:8a:
55:0a:2d:0d:bc:b8:31:d8:60:82:b3:ec:75:b9:37:
dd:97:f5:2b:fc:22:8a:e4:b6:06:e3:28:ca:4b:b7:
80:6b:8c:8b:fb:60:22:33:2e:69:e9:e1:cf:56:e8:
d6:e1:19:8d:b3:5f:bd:d0:aa:3a:2d:f6:ab:3c:05:
f1:94:79:56:71:73:af:96:96:c3:e0:2f:f0:18:de:
bd:88:7d:e5:ab:40:ed:07:e2:f3:ec:08:d3:66:f0:
46:54:69:45:bf:2e:f7:60:fe:24:1a:66:46:99:e6:
12:a9:31:31:3d:6e:7c:a5:ab:5f:47:65:35:79:aa:
60:22:39:8b:66:66:f5:60:ae:1f:d6:1c:94:10:97:
e7:92:40:a2:5b:39:48:3b:63:21:15:32:10:9d:41:
8f:67:7f:7a:94:ac:a3:7d:f5:2b:ca:7d:82:14:76:
3a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E3:E8:35:43:1E:C0:C3:ED:8E:84:5C:D8:97:85:AA:45:91:94:A4
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:9e:c2:7b:29:cf:12:3a:af:a7:12:3d:7d:5c:1a:6b:dd:13:
49:e1:ac:82:f5:c0:52:88:b7:59:cc:84:96:4f:91:e1:a1:d6:
8b:4a:2c:37:d6:45:24:87:f1:f2:fa:fd:c3:67:40:73:93:18:
19:e9:f8:c1:c2:dd:8e:51:6c:fe:da:45:78:cc:79:a3:87:f4:
35:f6:82:a3:b4:d0:fe:a8:b1:9e:ab:55:ed:a5:89:63:30:af:
11:b1:5f:12:f6:23:92:10:97:10:5c:ce:24:03:68:7c:93:3e:
44:b0:14:12:a4:aa:90:bd:8c:14:48:ed:ea:f8:48:48:79:97:
c9:4b:9c:5f:e7:9c:95:b5:2a:43:b1:af:22:65:36:29:82:99:
6d:5b:79:0a:80:4d:34:34:f8:e6:5d:d4:d1:e1:06:ca:95:3f:
b0:e7:39:91:09:a3:aa:c2:a5:0f:a5:10:aa:e5:95:ad:95:63:
ab:41:36:ca:00:7b:6f:8c:ca:94:24:6c:f0:b3:b6:34:04:af:
79:50:19:c9:93:db:1b:57:3e:a0:00:e9:f6:af:dc:f5:39:25:
55:92:91:c7:7a:f7:ab:be:e3:e1:28:a1:bd:21:af:a7:7b:16:
6a:c2:33:0e:14:75:51:81:9c:b4:31:51:e6:94:2f:6c:a4:d2:
77:20:f7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:20 2025 by rpki-client