Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS28459.roa
File: AS28459.roa (raw, json)
Hash identifier: t+V7JY7khBNQqC5x5xSU6dqxURjdWkWVTAYI6ykiFI8=
Subject key identifier: E5:56:D1:5D:34:AD:E2:81:95:07:21:3F:8F:FF:B9:83:72:D0:9C:57
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 2A1F4FE2967288D74DDDA6C6D90B89B60446259F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS28459.roa
Signing time: Mon 27 Jan 2025 02:56:43 +0000
ROA not before: Mon 27 Jan 2025 02:51:43 +0000
ROA not after: Mon 26 Jan 2026 02:56:43 +0000
asID: 28459
IP address blocks: 104.234.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:1f:4f:e2:96:72:88:d7:4d:dd:a6:c6:d9:0b:89:b6:04:46:25:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 27 02:51:43 2025 GMT
Not After : Jan 26 02:56:43 2026 GMT
Subject: CN=E556D15D34ADE2819507213F8FFFB98372D09C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a8:14:bc:61:8a:05:1c:3a:43:ce:09:d9:31:
86:32:40:ab:38:b5:a7:2b:ab:fb:37:93:b6:93:61:
ba:99:5d:81:51:47:7f:c4:b4:98:09:6e:85:6c:64:
42:17:e4:2d:72:6f:ed:76:10:5f:49:d7:2b:8c:ff:
79:74:90:de:cd:54:25:77:45:76:4f:47:99:0c:be:
00:ae:60:0c:74:4a:21:44:48:b4:e5:0c:b0:97:bf:
5d:88:45:54:08:01:a7:34:30:50:e3:ee:d6:33:11:
4e:1a:ac:39:32:c9:50:2e:be:87:5c:af:06:ba:d3:
62:1d:99:48:35:db:32:bd:0f:4d:91:0b:31:43:18:
a0:59:2d:90:5a:23:8d:17:fd:9e:5f:50:0f:e3:74:
76:3d:f9:e8:ae:b9:3b:ae:52:e7:35:35:77:c7:54:
49:ed:ed:af:d8:cc:28:bc:26:6c:a9:e3:df:db:de:
e1:81:50:eb:e7:d9:bb:b1:74:eb:f8:6e:90:41:bd:
5e:75:e7:b7:d7:f6:3e:34:db:37:a8:17:b7:66:fd:
06:21:68:45:dc:ef:7e:1d:94:60:79:c7:13:69:55:
ff:a5:8c:1b:a4:6b:c6:fe:30:63:be:65:42:7d:fb:
38:04:06:52:a8:90:64:cc:1d:9b:30:5e:3e:28:4c:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:56:D1:5D:34:AD:E2:81:95:07:21:3F:8F:FF:B9:83:72:D0:9C:57
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS28459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.112.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1b:d2:21:a1:d8:62:d3:e5:ee:c7:a9:9d:87:a1:44:50:5c:
bc:b8:c0:71:e6:fc:3b:d0:c0:5d:82:28:bd:5d:65:2f:45:f5:
51:6f:3b:74:ac:18:16:37:2a:1a:35:72:ea:73:b6:1e:31:66:
46:1d:c5:33:9c:5a:3e:5e:01:96:b2:67:55:b7:75:a5:43:22:
d0:d4:44:eb:4d:bf:34:03:94:c5:b9:91:2a:ce:64:aa:cd:d5:
c7:95:62:d9:cf:79:7b:e0:4c:7f:b8:31:24:cf:c4:e4:92:0c:
df:8b:68:33:42:fd:47:96:a5:5d:0d:02:71:55:d1:39:29:7b:
c6:cd:0d:ac:7f:12:5e:2d:91:bb:32:f9:1b:c1:6e:2c:4e:93:
29:1d:e9:8b:dc:43:e4:a5:73:76:39:ca:63:a0:78:08:3f:72:
60:d6:0f:3c:a0:a9:56:e0:b0:fc:69:b6:ed:b2:f3:c7:d0:09:
6c:76:49:ff:e7:7f:e2:bf:1b:09:02:7f:97:b1:56:3e:60:a9:
da:cb:09:54:a0:3b:29:6b:75:35:ba:f9:e4:f8:73:d8:12:a1:
0c:89:78:99:8c:f4:df:64:d3:a3:e2:57:45:84:2b:eb:0e:85:
2a:e6:a3:15:a6:49:ed:33:e3:41:02:49:a8:30:25:ff:a7:ab:
0e:09:76:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:36 2025 by rpki-client