Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216414.roa
File: AS216414.roa (raw, json)
Hash identifier: ytJgwlPm++j0p/VW2bnv3vSVOAm6GDa5ouRoifykWps=
Subject key identifier: 00:7D:AC:DA:88:D0:9C:61:86:A8:78:28:3E:D0:70:1F:79:22:C2:CF
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 6DBB44D928A4C43B8B8FE0BA21F80A84C0C16A4F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216414.roa
Signing time: Mon 30 Dec 2024 04:28:23 +0000
ROA not before: Mon 30 Dec 2024 04:23:23 +0000
ROA not after: Mon 29 Dec 2025 04:28:23 +0000
asID: 216414
IP address blocks: 104.234.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:bb:44:d9:28:a4:c4:3b:8b:8f:e0:ba:21:f8:0a:84:c0:c1:6a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 30 04:23:23 2024 GMT
Not After : Dec 29 04:28:23 2025 GMT
Subject: CN=007DACDA88D09C6186A878283ED0701F7922C2CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:31:ed:8a:d0:49:5c:1e:ba:14:20:b7:1e:
17:be:7c:c0:e5:fc:2d:bc:df:db:41:c4:f3:2e:2f:
7e:83:30:c7:4f:5d:05:ff:5f:ea:2d:fa:68:b5:71:
74:92:3e:9d:99:53:e2:29:28:37:33:3d:e1:44:fc:
20:ef:ee:26:4c:ca:26:eb:eb:c9:ee:9b:11:2f:c8:
0e:fd:ca:b5:0d:ec:41:39:c5:6e:45:5b:22:63:fa:
a1:59:9a:d2:ec:71:4d:4b:9d:c5:fc:b9:b9:14:b8:
6d:7d:76:59:e3:2e:ae:52:61:d2:79:02:4b:07:ae:
5a:73:56:d0:6c:22:42:d3:3c:2b:c8:5a:84:41:8a:
b8:db:87:af:d9:de:dd:4c:0c:98:f2:8b:d4:7d:77:
37:fc:3a:18:71:7c:15:0d:02:ca:44:83:11:d8:c5:
0f:22:8e:dc:5d:44:f3:7a:68:c4:68:b2:06:79:38:
cb:76:41:c9:d5:6a:a3:59:ce:5d:9e:53:03:aa:89:
78:59:46:be:5f:02:1e:48:22:3c:0e:2a:e3:3a:d9:
28:2f:8e:8e:18:95:ea:5d:47:be:a4:75:ea:dc:d9:
ab:c0:ed:d2:41:47:0e:eb:4a:46:36:6b:7e:e7:d4:
d6:37:82:0d:1b:ff:29:60:55:50:0c:da:e9:6d:5f:
0f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7D:AC:DA:88:D0:9C:61:86:A8:78:28:3E:D0:70:1F:79:22:C2:CF
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216414.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.99.0/24
Signature Algorithm: sha256WithRSAEncryption
39:6b:80:d5:4c:31:7b:e1:e9:ac:f8:9c:96:c4:d5:f2:cf:59:
1f:9f:96:1b:11:e8:56:87:c2:06:df:a5:61:b0:d2:14:41:29:
7d:fa:4f:8b:a3:3c:cf:81:d0:39:53:e9:db:56:c3:71:4e:66:
49:f5:af:ca:be:86:8d:49:ba:29:3e:b3:bf:c0:fe:d6:e7:37:
45:c9:9b:c8:ce:94:f4:48:a9:ce:20:ba:0c:94:6e:04:db:8d:
56:12:bc:87:03:23:98:ab:f1:e6:f7:9d:11:43:39:e6:05:f1:
ca:5d:88:44:9c:63:7a:21:a1:d4:68:fb:ba:0c:78:00:25:57:
60:90:3e:f7:08:6a:88:e3:45:21:cd:b6:17:82:73:39:92:74:
e0:f3:83:14:05:7f:ec:0c:92:fe:6e:37:1d:90:20:d3:a2:5b:
86:16:54:3a:61:4f:f4:ce:9e:21:ac:88:6d:1a:11:4b:d3:ce:
75:a2:3d:aa:b9:40:3e:4d:df:a0:55:93:3d:11:c7:3b:5e:e6:
8b:06:d1:40:3c:f2:03:fd:16:05:44:39:1d:47:c1:cb:09:9f:
7b:0a:8d:65:a5:36:a9:bf:1d:a4:d1:c5:6d:68:d5:39:62:5e:
7e:b3:37:22:c9:be:35:61:c1:b6:5c:2a:bf:c5:d9:7f:71:4d:
0e:76:da:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:23 2025 by rpki-client