Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22653.roa
File: AS22653.roa (raw, json)
Hash identifier: 16bJKclceijvBvMRl4jTdkD6P+QeVoFftkkmp1TMI8Y=
Subject key identifier: B0:6A:87:CF:62:A8:D0:61:88:F9:88:58:CC:5A:F9:BF:B4:71:4D:DC
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 66CE5AE79032193CCBCDE6B9846D672516C2D205
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22653.roa
Signing time: Wed 01 Jan 2025 11:28:23 +0000
ROA not before: Wed 01 Jan 2025 11:23:23 +0000
ROA not after: Wed 31 Dec 2025 11:28:23 +0000
asID: 22653
IP address blocks: 104.234.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ce:5a:e7:90:32:19:3c:cb:cd:e6:b9:84:6d:67:25:16:c2:d2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 1 11:23:23 2025 GMT
Not After : Dec 31 11:28:23 2025 GMT
Subject: CN=B06A87CF62A8D06188F98858CC5AF9BFB4714DDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:e3:9f:07:0e:ae:e5:0e:9f:2e:1c:fe:39:
31:dc:30:f8:f4:53:9c:96:4e:40:52:3a:71:ab:67:
b4:7d:2f:eb:95:2a:34:93:2b:0c:c9:1d:17:08:15:
20:65:cb:fb:ab:bb:92:f3:3f:36:4c:2a:48:22:2f:
5c:76:72:22:f9:a4:80:43:53:49:34:b5:ea:f3:28:
a7:88:ec:9d:4c:19:0b:19:3e:52:b4:1f:ba:74:21:
b9:28:55:32:fb:1b:65:90:a7:8b:9a:db:9d:eb:1e:
f4:4e:63:69:fb:52:ef:7c:30:ae:3f:b0:23:a2:00:
6a:5a:f6:50:ee:b2:d2:f0:26:3f:48:76:40:b4:87:
ac:a9:d1:05:cf:9c:a3:09:60:c1:48:d0:d0:4a:02:
62:1e:49:22:af:34:eb:71:2a:2b:4c:cf:0b:61:ce:
d8:82:eb:a4:fb:a3:60:17:d3:96:4c:52:dc:81:c8:
74:2c:59:35:91:f3:0c:45:2e:23:b5:ce:8e:42:40:
7a:31:11:8d:c2:1b:77:d8:fe:7c:24:54:ba:74:e9:
03:9a:b6:36:f6:d3:3d:ef:71:35:0f:ef:aa:83:a3:
58:00:80:59:c5:46:b2:68:ef:17:de:a2:03:30:2f:
5c:ed:7e:b2:78:e7:f8:77:81:bd:87:c0:25:3f:4f:
16:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6A:87:CF:62:A8:D0:61:88:F9:88:58:CC:5A:F9:BF:B4:71:4D:DC
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22653.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.75.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c7:bc:d3:21:6b:fc:5c:d5:a9:dd:13:7f:93:ee:c3:1c:45:
58:35:e3:30:f9:6c:d1:59:23:6e:9e:a8:01:5d:41:10:4c:52:
c4:2a:9e:69:6a:c6:e1:0d:aa:0e:b6:85:70:6e:1b:dd:58:21:
1c:af:e6:ff:51:15:e5:fb:94:38:49:3b:6b:1d:25:a4:e7:49:
5e:dc:a8:d9:28:81:1c:71:fc:d7:d7:99:63:b6:ad:f0:a4:0d:
46:88:d0:9a:3e:2b:fc:16:31:e3:be:bb:a3:5d:21:20:e4:ac:
f2:1f:6c:f5:05:95:3f:ee:3c:7b:91:45:87:c6:ff:aa:9b:90:
2d:f9:44:a1:9b:c2:40:4f:04:ff:b0:d2:52:38:57:6a:c0:c0:
49:d5:0f:1c:28:2a:73:00:7d:c5:16:d5:ed:21:4d:a5:8d:8b:
34:88:68:c4:dd:78:ed:c2:e3:d9:62:e6:1a:ce:c6:37:6a:72:
ae:8b:cb:d0:77:b7:a1:d8:9f:1b:ab:8a:54:00:dc:32:92:de:
63:dc:28:76:aa:e6:89:73:62:22:e9:28:f1:e4:ee:71:a9:40:
0a:7e:db:d0:b3:1e:6b:48:cb:49:8b:6f:44:7d:a3:a4:c2:b4:
cd:4c:84:cf:1e:10:75:28:1b:c6:cb:e0:c9:a7:14:72:d5:5e:
5f:e9:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:34 2025 by rpki-client