Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270764.roa
File: AS270764.roa (raw, json)
Hash identifier: d/qqWcKdyKA0yxh1h8g0raL8v4Y53JgR6gizwaNV8VU=
Subject key identifier: D6:A4:56:8A:50:43:80:90:96:6E:DA:89:4F:B9:C7:02:0E:E6:A1:B9
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 44C54BADB4D082DE204DA90515ED1B835C7D461C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270764.roa
Signing time: Mon 09 Dec 2024 23:08:31 +0000
ROA not before: Mon 09 Dec 2024 23:03:31 +0000
ROA not after: Mon 08 Dec 2025 23:08:31 +0000
asID: 270764
IP address blocks: 104.234.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c5:4b:ad:b4:d0:82:de:20:4d:a9:05:15:ed:1b:83:5c:7d:46:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 9 23:03:31 2024 GMT
Not After : Dec 8 23:08:31 2025 GMT
Subject: CN=D6A4568A50438090966EDA894FB9C7020EE6A1B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:16:38:97:48:0e:57:89:d3:06:8e:5f:83:
70:ba:da:fc:ec:e5:13:0d:99:7a:07:ca:85:dc:cf:
50:8e:4c:40:5e:03:16:02:34:bd:9d:e2:e3:e9:f2:
39:4e:c2:58:cd:c9:a8:59:51:b0:48:96:36:9c:40:
c2:08:0e:3c:ac:a4:56:3f:15:6a:24:31:bf:fa:3f:
cb:6f:2d:62:f2:9e:ec:25:24:fb:c4:e3:5a:af:c1:
f7:2c:34:43:fb:3a:c3:90:f9:44:fb:89:c2:2e:d7:
9c:c2:40:3a:72:9e:af:c6:44:31:96:ce:e9:b7:cf:
b5:e4:b2:93:8d:b4:4b:af:a8:8d:51:ef:5a:91:c1:
a2:c9:b4:c2:ad:31:16:2b:48:0a:50:0e:f4:f9:99:
54:b1:28:bf:c4:9c:23:d7:20:59:d5:ab:4e:67:b2:
89:bd:ce:d2:4a:87:6e:c7:60:ec:87:aa:ba:c8:f4:
c1:28:6e:60:6b:4d:e2:5c:1b:ff:c9:88:fe:12:f9:
fc:4d:18:38:36:6d:b7:b5:93:f5:db:26:eb:57:67:
a5:17:6f:87:5f:fc:d4:34:1a:c8:cc:e9:fd:6e:88:
0b:3e:94:51:7d:69:bb:8f:2a:4e:a4:27:84:5b:c8:
61:97:15:84:74:b1:2e:71:ae:28:e5:ef:c5:7f:85:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A4:56:8A:50:43:80:90:96:6E:DA:89:4F:B9:C7:02:0E:E6:A1:B9
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270764.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.156.0/24
Signature Algorithm: sha256WithRSAEncryption
46:2c:73:f3:a8:56:05:bd:0f:e4:49:43:ea:6b:3b:07:db:60:
e1:3c:9e:49:e6:bf:48:2e:79:f8:52:e6:b2:bd:50:f7:36:d9:
3b:ae:a2:2e:3b:da:75:89:75:f8:f9:08:80:b7:54:1a:fd:c3:
60:92:b2:2e:86:b0:48:b7:57:c1:30:b9:4f:28:84:8f:bd:02:
40:06:fa:e8:f1:77:1e:7d:d3:d8:6d:47:07:3f:de:21:41:b3:
c5:aa:9e:70:c7:bf:c3:0a:47:9b:6c:4b:60:b1:5e:16:da:59:
23:51:e9:2c:d7:1c:eb:cc:10:1e:17:56:d7:08:d4:4c:62:ee:
23:89:2b:76:4a:75:23:a5:3b:52:10:c6:46:b2:3f:f3:4a:8f:
a8:71:79:8c:e7:e4:57:42:37:7d:d0:80:38:1a:91:a9:68:bb:
b2:c1:8a:94:92:9b:48:c9:91:f0:f4:a2:79:38:07:83:10:64:
46:5c:47:b9:d9:32:10:19:8a:f3:de:ef:a4:6c:1a:18:d0:23:
ed:68:f2:f0:ce:90:83:37:5a:15:86:64:74:a9:a7:a8:37:56:
ea:8c:88:ee:fb:a9:ea:c8:d4:3e:39:67:7e:52:c6:72:96:2a:
4e:d7:ae:81:b8:1e:93:83:ed:71:ff:fe:47:a8:75:37:22:9f:
2f:25:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:18 2025 by rpki-client