Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215304.roa
File: AS215304.roa (raw, json)
Hash identifier: zu7VS0a1NXMxgV+CbRTV6J35sBHiYBfvJd+yF2t9vFI=
Subject key identifier: EA:BB:A2:DB:DB:58:3A:7E:A3:F2:D3:83:70:E7:62:0C:38:0D:CE:7E
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: A4B5E1C342135189FBB34FF4F4A9A167639894
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215304.roa
Signing time: Fri 21 Feb 2025 16:41:14 +0000
ROA not before: Fri 21 Feb 2025 16:36:14 +0000
ROA not after: Fri 20 Feb 2026 16:41:14 +0000
asID: 215304
IP address blocks: 104.234.158.0/24 maxlen: 24
104.234.159.0/24 maxlen: 24
104.234.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a4:b5:e1:c3:42:13:51:89:fb:b3:4f:f4:f4:a9:a1:67:63:98:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 21 16:36:14 2025 GMT
Not After : Feb 20 16:41:14 2026 GMT
Subject: CN=EABBA2DBDB583A7EA3F2D38370E7620C380DCE7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:44:07:83:c5:e7:3e:63:ff:89:41:0f:cd:
79:cf:30:64:3d:c6:5a:05:93:bf:ff:1d:5f:3e:c3:
4a:c7:da:7c:8d:0b:93:c0:e5:53:8c:0e:ad:d7:1d:
c1:7b:8a:5c:39:13:04:84:df:f7:31:e3:ec:a0:81:
2d:a3:7a:91:76:ae:28:ca:c7:5e:3b:f3:66:8c:b3:
05:bd:63:da:c9:b0:11:f7:82:c1:7c:ad:b0:6b:61:
52:e1:23:76:64:11:50:8a:67:40:3e:6d:4f:6e:50:
88:64:db:3e:95:31:1e:2b:41:d3:2d:97:41:81:fb:
d6:42:99:3c:73:75:71:1b:e6:a2:11:a7:33:ff:90:
e5:b8:77:46:e9:97:9c:df:88:50:f7:cb:5d:cc:c3:
7f:b3:c0:a2:90:6f:e5:bc:8a:e8:ac:ba:67:55:cd:
99:3b:0e:e8:cc:46:3b:22:35:f8:06:92:6d:f7:99:
6e:b5:73:5f:f2:a4:09:c0:93:75:d5:6c:8a:a0:b2:
94:d4:4f:f5:b2:da:8c:18:35:a8:be:a2:fb:76:3b:
83:1d:bf:64:f3:44:fb:6b:7b:7c:6c:08:f7:e5:8c:
7d:24:02:74:41:19:08:b0:87:c9:48:6d:eb:4f:59:
2d:62:c5:c0:57:13:7d:a5:8e:ff:71:d8:3e:63:0e:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BB:A2:DB:DB:58:3A:7E:A3:F2:D3:83:70:E7:62:0C:38:0D:CE:7E
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.158.0/23
104.234.237.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a8:38:71:c2:e1:bc:ca:3a:c6:0d:05:93:ce:cc:f9:76:bd:
c7:fc:22:02:ad:ae:85:8d:b9:0e:dd:de:cd:ff:02:33:3e:80:
0e:93:44:41:6d:0a:6a:9b:f3:7b:51:ad:07:d8:97:be:3c:a8:
f4:0f:b7:7f:30:2f:bc:af:48:ba:61:0c:e2:43:4c:22:16:03:
c7:67:db:85:c8:0e:f0:b7:f2:97:ac:f4:44:d3:aa:5a:53:7f:
7f:9a:d1:dd:6c:ae:08:c4:4c:fb:7e:aa:4f:14:91:d5:4c:7f:
68:b7:3a:68:8a:55:e3:6c:9a:25:47:9d:ae:80:b5:d2:6a:e6:
bf:21:f2:cd:71:b1:52:d8:20:95:22:9d:3f:d3:6e:6e:78:db:
e6:16:29:f7:22:33:69:8e:e7:db:89:88:34:e4:e5:75:6c:96:
7f:bf:c4:7c:3a:18:75:b3:9e:4c:55:0c:cb:83:fc:bd:ce:69:
2c:f8:d8:75:57:73:9f:f5:b2:37:5b:06:c1:73:31:14:74:86:
68:24:df:e6:06:b5:ef:12:c0:c5:8f:af:68:fd:60:a2:2a:8a:
d0:59:1d:5d:b1:c1:4c:af:ce:4f:70:79:0c:e7:db:5a:8c:f1:
b6:c8:06:44:70:8f:d4:8b:36:10:a2:b9:0f:a5:af:10:ee:21:
1c:da:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:16 2025 by rpki-client