Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: 2f/ybuZ6zCqLcpSNPidI9WsgtQXNaOEyOYO5ua735Bo=
Subject key identifier: 06:62:39:11:64:8F:78:CD:7A:69:48:56:43:5A:D0:82:3A:EF:C5:8F
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 352B5090B40D9F593D62C879345C5719CC292914
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26042.roa
Signing time: Thu 09 Jan 2025 17:00:05 +0000
ROA not before: Thu 09 Jan 2025 16:55:05 +0000
ROA not after: Thu 08 Jan 2026 17:00:05 +0000
asID: 26042
IP address blocks: 104.234.118.0/24 maxlen: 24
104.234.142.0/24 maxlen: 24
206.53.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:2b:50:90:b4:0d:9f:59:3d:62:c8:79:34:5c:57:19:cc:29:29:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 9 16:55:05 2025 GMT
Not After : Jan 8 17:00:05 2026 GMT
Subject: CN=06623911648F78CD7A694856435AD0823AEFC58F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:69:ea:ec:cf:a7:60:84:57:1d:3c:95:16:
2a:2c:81:d0:62:ce:41:4b:f1:82:0c:fc:d2:c5:bc:
75:29:dc:a8:cd:33:53:a9:48:5e:03:24:31:a2:21:
02:cd:f6:5e:ef:42:dd:93:b9:fc:5f:8d:25:ab:73:
97:b2:94:87:0a:25:4d:3c:ea:10:56:ac:9b:c1:4b:
85:b9:71:7e:47:61:e1:da:e2:34:6e:fc:64:1e:48:
04:1a:58:5e:e6:21:0f:a9:61:c0:02:fa:a7:ab:e6:
63:ec:47:4b:c3:ac:6f:6d:11:f5:21:ed:4b:f5:24:
9f:6f:37:4e:af:0b:4a:88:95:67:70:e9:b6:61:07:
13:66:1f:fc:a1:f5:df:09:f4:df:dc:e9:60:61:90:
9c:8c:3f:84:60:88:4a:cb:4d:53:06:7c:32:ac:0f:
cd:5e:e0:7a:d2:76:1a:74:c0:83:36:ff:54:92:05:
8c:35:33:87:75:02:f6:85:9b:5a:82:97:75:a3:5b:
b1:41:1c:b2:f6:04:8c:30:7d:55:e7:95:51:d0:8e:
09:cc:b8:a9:dc:d7:cd:1f:aa:4f:82:f9:3d:8e:26:
1d:2a:d9:8d:30:6b:25:86:db:2b:9d:1e:18:28:fd:
3c:60:a5:39:d6:6e:8f:f2:7e:2b:66:8f:64:3d:b2:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:62:39:11:64:8F:78:CD:7A:69:48:56:43:5A:D0:82:3A:EF:C5:8F
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.118.0/24
104.234.142.0/24
206.53.53.0/24
Signature Algorithm: sha256WithRSAEncryption
61:02:71:0f:74:83:b7:1d:ab:ca:df:e2:9a:18:13:ab:02:f2:
b6:4e:21:2a:f3:bb:86:b7:e1:30:99:61:24:90:d1:d8:8f:f8:
25:c1:6e:c3:8b:f8:79:28:e0:2c:32:38:10:05:be:7f:10:7c:
1c:da:a9:2d:81:22:3e:9c:fb:1d:70:78:dd:f3:39:a0:16:5f:
69:e8:f5:50:ab:d3:f7:ad:16:29:14:e7:b1:b6:ee:86:84:bc:
0f:5a:b6:4a:a4:ba:07:8d:d3:da:d6:cd:90:8e:28:5f:1f:54:
1f:d3:42:89:fa:96:fe:e7:c8:01:7a:52:8d:d6:50:e0:b4:be:
79:cf:5d:9d:eb:e8:69:59:f7:f3:5b:48:88:0e:74:a9:ab:9c:
57:75:3c:b8:3e:07:19:ba:ff:56:7f:40:ed:a3:09:4b:73:e3:
ed:82:08:c7:8e:88:c5:49:f1:76:95:40:99:b3:49:82:f6:b6:
c5:50:a0:36:6e:f8:a8:c5:97:e5:62:75:4b:be:98:63:59:1b:
8b:b2:b2:65:2c:dd:5e:6f:fa:1f:a0:9b:7a:80:e7:ab:b0:1e:
45:01:c0:6b:ee:a9:7f:53:01:c9:d2:8b:e8:9e:d5:19:aa:d8:
da:34:2d:e9:d0:77:f6:e1:d2:4b:04:b1:bb:93:93:e6:53:5d:
01:c3:c1:11
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUNStQkLQNn1k9Ysh5NFxXGcwpKRQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTA5MTY1NTA1WhcNMjYwMTA4MTcwMDA1
WjAzMTEwLwYDVQQDEygwNjYyMzkxMTY0OEY3OENEN0E2OTQ4NTY0MzVBRDA4MjNB
RUZDNThGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqdp6uzPp2CE
Vx08lRYqLIHQYs5BS/GCDPzSxbx1KdyozTNTqUheAyQxoiECzfZe70Ldk7n8X40l
q3OXspSHCiVNPOoQVqybwUuFuXF+R2Hh2uI0bvxkHkgEGlhe5iEPqWHAAvqnq+Zj
7EdLw6xvbRH1Ie1L9SSfbzdOrwtKiJVncOm2YQcTZh/8ofXfCfTf3OlgYZCcjD+E
YIhKy01TBnwyrA/NXuB60nYadMCDNv9UkgWMNTOHdQL2hZtagpd1o1uxQRyy9gSM
MH1V55VR0I4JzLip3NfNH6pPgvk9jiYdKtmNMGslhtsrnR4YKP08YKU51m6P8n4r
Zo9kPbK/nQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFAZiORFkj3jNemlIVkNa0II6
78WPMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzI2MDQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOp2AwQAaOqOAwQAzjU1MA0GCSqG
SIb3DQEBCwUAA4IBAQBhAnEPdIO3HavK3+KaGBOrAvK2TiEq87uGt+EwmWEkkNHY
j/glwW7Di/h5KOAsMjgQBb5/EHwc2qktgSI+nPsdcHjd8zmgFl9p6PVQq9P3rRYp
FOextu6GhLwPWrZKpLoHjdPa1s2QjihfH1Qf00KJ+pb+58gBelKN1lDgtL55z12d
6+hpWffzW0iIDnSpq5xXdTy4PgcZuv9Wf0DtowlLc+PtggjHjojFSfF2lUCZs0mC
9rbFUKA2bvioxZflYnVLvphjWRuLsrJlLN1eb/ofoJt6gOersB5FAcBr7ql/UwHJ
0ovontUZqtjaNC3p0Hf24dJLBLG7k5PmU10Bw8ER
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:33 2025 by rpki-client