Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS268707.roa
File: AS268707.roa (raw, json)
Hash identifier: cMMfd9tkNPBGB67dFR1acHQxZyBjlDXb7+zjlqj5Xsc=
Subject key identifier: 5D:1A:67:B5:3B:DE:83:A0:E5:3D:7A:7C:4A:41:7B:3B:91:60:93:54
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 332C5B78E06FA578C91706B916F13CDA2545C3B2
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS268707.roa
Signing time: Sun 12 Jan 2025 02:28:23 +0000
ROA not before: Sun 12 Jan 2025 02:23:23 +0000
ROA not after: Sun 11 Jan 2026 02:28:23 +0000
asID: 268707
IP address blocks: 104.234.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:2c:5b:78:e0:6f:a5:78:c9:17:06:b9:16:f1:3c:da:25:45:c3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 12 02:23:23 2025 GMT
Not After : Jan 11 02:28:23 2026 GMT
Subject: CN=5D1A67B53BDE83A0E53D7A7C4A417B3B91609354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:14:b6:c6:00:98:32:c9:a4:42:cb:f6:e9:
d7:1c:c1:c2:64:b6:a0:7f:01:7f:81:a0:ff:a8:e5:
cc:a4:cc:f3:14:9c:06:e4:d8:ec:05:84:a0:40:10:
bd:bc:ff:ed:39:6e:94:32:5b:19:f3:05:ae:78:75:
57:c5:26:95:da:5d:3c:2f:a7:af:4f:71:73:6b:f8:
1f:fc:51:1b:3a:f6:a7:4b:ea:50:ae:9f:86:df:f2:
ac:dd:5f:db:a7:53:a8:93:69:32:22:12:44:5c:71:
00:35:9a:8d:5d:4e:50:cd:9d:fd:f8:56:84:0d:f2:
cf:bb:c6:ff:a6:39:ad:ad:87:7e:81:01:4e:da:9c:
7c:38:bd:9a:10:f5:cd:0e:33:9d:7d:f1:97:0e:eb:
95:fe:0b:3f:1a:97:2a:77:2e:0a:be:32:2d:d7:fa:
53:e7:d1:99:4b:05:ea:1c:b3:c8:66:be:c0:9b:43:
46:cc:38:0a:2a:52:8c:dc:55:68:48:be:43:40:d3:
93:7d:8a:af:2e:f9:70:75:cc:c9:de:dd:fc:66:29:
38:08:56:a5:90:ba:10:e0:e7:36:f1:3b:30:70:33:
b0:0a:c7:e2:4d:2b:75:1d:21:8d:0c:1e:04:08:43:
63:ea:ce:70:73:05:98:0d:e8:67:8a:f1:ec:9f:30:
d7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1A:67:B5:3B:DE:83:A0:E5:3D:7A:7C:4A:41:7B:3B:91:60:93:54
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS268707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.244.0/24
Signature Algorithm: sha256WithRSAEncryption
09:1e:9e:e0:3d:27:84:51:b3:de:b2:d9:ed:ab:55:be:c4:06:
03:e8:7d:0f:a7:b4:e4:67:67:8b:35:3b:2d:86:39:a8:ce:03:
88:bb:e3:2a:f9:33:f4:27:ae:80:eb:92:ce:17:ee:e0:3c:43:
84:fa:73:ad:61:eb:54:99:1d:b2:52:b2:37:9a:f5:75:14:2e:
5e:0f:1f:5f:cb:a7:e1:d1:5c:7d:85:7e:3d:36:a1:c1:c8:58:
66:32:00:bb:2c:9a:d5:ec:0e:43:8e:49:03:29:5e:e7:07:77:
c7:a5:df:0d:03:cf:d6:9e:13:75:4c:06:59:e9:b1:52:d4:46:
33:58:57:a4:0b:47:34:fb:e5:47:d3:9f:04:c2:c5:60:57:69:
d9:7c:a4:98:9b:3f:cd:42:2c:49:cb:7f:fb:e1:33:0b:3d:6d:
bd:24:dc:e4:5b:a2:22:2c:c4:0b:c9:74:78:3a:f4:25:a2:d3:
9f:5b:ba:28:ab:4c:42:3f:ae:6b:d0:c0:be:5e:a4:0c:03:37:
ac:31:fa:e0:9e:92:01:d8:da:8d:17:95:c7:7e:16:ed:8c:1e:
1e:8f:3d:f0:00:46:69:f6:56:27:b6:37:34:6f:68:ce:2b:3a:
f3:eb:92:31:c3:93:84:93:72:be:ae:16:8d:0a:f6:7f:09:b7:
38:f2:ae:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:55 2025 by rpki-client