Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS35913.roa
File: AS35913.roa (raw, json)
Hash identifier: +DyrYVZELtt3Qh+S9hFSo/bFmWrTq4JpkLyRMUuhuuU=
Subject key identifier: 2B:90:07:3E:3F:33:A3:7D:70:28:A1:E9:56:FE:78:7D:C7:F3:14:F7
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 14E8CF76E645171F93BCF33FB9396016293599D5
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS35913.roa
Signing time: Tue 06 Aug 2024 19:48:59 +0000
ROA not before: Tue 06 Aug 2024 19:43:59 +0000
ROA not after: Tue 05 Aug 2025 19:48:59 +0000
asID: 35913
IP address blocks: 104.234.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e8:cf:76:e6:45:17:1f:93:bc:f3:3f:b9:39:60:16:29:35:99:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Aug 6 19:43:59 2024 GMT
Not After : Aug 5 19:48:59 2025 GMT
Subject: CN=2B90073E3F33A37D7028A1E956FE787DC7F314F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:86:ee:b0:0d:cb:d9:b7:c0:53:3e:43:3b:
e9:00:66:67:35:54:d6:5e:45:d8:bc:cc:6d:10:3a:
93:88:34:b4:d5:83:d4:39:73:6d:4f:06:96:d8:d4:
e2:2b:1c:6a:2b:18:f3:0d:02:61:53:2d:c0:14:d3:
7f:f0:f5:76:9f:51:93:9e:7b:ab:86:87:a2:4e:8b:
0a:be:7a:35:80:15:0d:9e:39:59:f6:5c:37:3b:33:
be:1c:45:a1:7e:87:ef:fd:0f:e4:73:71:6b:72:e9:
13:82:25:74:4f:56:9e:2d:cc:24:5c:3d:76:4e:c3:
df:79:f7:3f:7c:c8:d2:d4:eb:32:16:00:63:e5:36:
68:04:be:bf:ee:c3:da:45:6d:cc:90:6f:5d:03:67:
d9:1b:a0:f3:c0:f8:f0:52:74:11:4f:56:1e:c8:53:
b2:60:38:24:e8:5d:f3:a2:4a:c2:2e:94:b0:4f:83:
4c:29:f5:e0:ce:ff:aa:e0:9b:3a:e3:f0:3d:10:e7:
f9:65:50:37:3e:97:12:9c:a2:0d:a2:ff:f6:2c:b5:
44:7a:66:53:f5:7c:06:41:48:a5:18:72:e6:4f:a3:
07:b4:89:9e:ad:a4:41:4b:8f:1f:41:33:63:cc:78:
fd:71:97:00:d4:79:c9:b7:ea:cd:c2:f6:f6:da:79:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:90:07:3E:3F:33:A3:7D:70:28:A1:E9:56:FE:78:7D:C7:F3:14:F7
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS35913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.88.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b9:12:ae:04:3f:d1:bd:1f:4b:26:e5:18:ab:60:8c:91:ae:
4e:f4:47:29:a4:3d:15:3e:47:34:44:7f:c2:14:8e:c5:d0:2e:
93:1e:79:de:a9:43:80:56:09:3f:cd:2b:ee:44:7f:2d:9a:5c:
6b:6d:81:03:08:32:e6:29:25:c7:8c:b9:3d:d1:db:33:31:fa:
01:d7:26:5f:62:ff:94:13:0c:de:db:a9:7c:8d:dd:c4:b8:66:
24:97:d9:48:8b:06:ad:a8:b2:4d:7e:40:c5:46:e8:a9:3c:4f:
d8:e7:b6:69:55:2d:af:ea:d5:6a:cb:46:1f:37:80:cd:4b:79:
99:bf:d5:05:86:52:e7:26:5d:df:df:e2:5c:bc:c2:55:6e:cf:
aa:3c:5c:75:59:07:0f:73:0f:70:52:7a:85:03:28:ef:df:70:
ea:c0:8a:ad:87:37:57:00:01:66:2c:1d:2a:2d:40:98:52:7e:
9b:cd:92:bf:80:75:c7:42:62:c0:41:76:8e:44:42:b1:a1:06:
98:f4:03:e3:5f:07:42:d5:ae:fd:92:84:4e:a0:02:6f:78:d0:
c0:d9:89:6a:ff:3e:8c:3b:ed:ac:5b:b0:b0:27:b8:86:92:b4:
62:dd:04:53:54:86:9e:d3:bc:73:27:fb:46:67:f7:d6:d9:5c:
38:38:f7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:19 2025 by rpki-client