Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36113.roa
File: AS36113.roa (raw, json)
Hash identifier: HazCPXjXI7ifssAlkcsxiarsZRK52SP8IWDvh+sC8a8=
Subject key identifier: D7:3F:55:E2:8C:97:13:56:A0:18:59:3C:EC:A4:FA:47:9F:72:BD:99
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 5FE9917682830C5D2275657F03A9648D2FEE1D52
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36113.roa
Signing time: Sat 31 Aug 2024 00:48:59 +0000
ROA not before: Sat 31 Aug 2024 00:43:59 +0000
ROA not after: Sat 30 Aug 2025 00:48:59 +0000
asID: 36113
IP address blocks: 104.234.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e9:91:76:82:83:0c:5d:22:75:65:7f:03:a9:64:8d:2f:ee:1d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Aug 31 00:43:59 2024 GMT
Not After : Aug 30 00:48:59 2025 GMT
Subject: CN=D73F55E28C971356A018593CECA4FA479F72BD99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:2a:64:7c:1e:4e:b2:82:ad:2e:da:0b:e1:
6e:ab:b4:33:b8:b6:8f:ec:ee:a1:da:44:c8:1c:b6:
c0:3c:4c:2f:6b:f4:a9:6a:d0:f3:b3:a6:a8:7c:4e:
9a:c4:64:ee:bf:87:da:f2:d9:de:96:f4:73:48:10:
7d:42:29:07:0f:c0:24:98:58:ba:e7:47:1a:e3:4d:
aa:73:f2:6b:30:a0:e6:43:17:61:81:e0:fb:10:40:
a8:d5:40:40:9a:58:99:50:4e:94:25:33:32:31:cb:
8a:2b:f6:61:37:34:25:44:78:ae:3e:94:f1:85:81:
e8:31:4a:0e:23:22:fa:f5:f1:fd:3e:9f:b6:c2:f0:
8e:10:eb:56:c8:6f:aa:87:19:fa:2c:b3:30:b0:25:
6b:0e:1a:d3:e0:19:7b:93:e0:e7:b5:1e:4f:3e:9d:
e0:7f:68:d7:c2:fe:e4:79:87:7b:30:3a:29:f2:e8:
a7:1d:6f:1f:44:58:d8:92:b7:6b:9b:1f:e3:a3:07:
39:80:24:27:c4:36:08:64:07:1d:20:a1:87:f7:99:
6f:c1:df:ee:65:9d:7a:87:68:59:a6:a5:fd:c0:fc:
6b:61:20:93:2a:54:51:4c:00:6b:bc:da:83:20:fe:
96:8a:28:9e:6e:12:99:a9:14:94:04:f5:4d:3e:94:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3F:55:E2:8C:97:13:56:A0:18:59:3C:EC:A4:FA:47:9F:72:BD:99
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.88.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:65:f0:c7:47:70:99:d2:7f:85:fe:41:76:d1:a1:be:34:f3:
c1:6c:f7:10:e9:91:81:6b:71:68:76:7a:40:74:a3:31:ab:95:
3a:8c:66:d3:37:84:37:25:42:2b:0c:ce:83:b1:6a:d7:5e:da:
c4:db:5c:34:1d:df:cb:7f:bc:d3:16:fc:07:93:79:d8:d6:e9:
87:11:5a:a2:5f:41:c4:85:bc:2c:34:44:e1:88:ac:7a:15:7b:
fb:b1:36:e2:9a:cf:af:a8:d5:45:a5:f2:1c:50:09:2e:ee:c9:
be:b6:af:68:fc:ed:71:85:fd:8a:12:0a:b5:54:dc:34:0b:3a:
84:0d:78:53:27:59:02:cb:fa:87:07:7b:c3:33:81:dd:4a:05:
e3:e6:1f:a5:93:f6:eb:83:4a:73:34:00:2f:85:ca:7a:7d:53:
6e:6d:f2:72:9b:da:f7:aa:9f:bd:b4:2f:66:f0:7d:ed:c6:4f:
da:4c:45:ed:ea:f2:9b:a1:48:a0:55:31:2f:91:4d:b7:b9:ad:
ae:6f:0f:a7:aa:28:96:a2:b8:8e:d3:e1:94:89:2e:ba:1f:ca:
b3:a7:b1:63:3f:4b:c9:11:51:ba:93:bc:7c:20:61:97:d4:ac:
56:41:ef:74:01:d3:34:b7:f0:02:09:eb:d2:9e:44:a2:fb:8c:
0b:10:6a:62
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUX+mRdoKDDF0idWV/A6lkjS/uHVIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwODMxMDA0MzU5WhcNMjUwODMwMDA0ODU5
WjAzMTEwLwYDVQQDEyhENzNGNTVFMjhDOTcxMzU2QTAxODU5M0NFQ0E0RkE0NzlG
NzJCRDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmoqZHweTrKC
rS7aC+Fuq7QzuLaP7O6h2kTIHLbAPEwva/SpatDzs6aofE6axGTuv4fa8tnelvRz
SBB9QikHD8AkmFi650ca402qc/JrMKDmQxdhgeD7EECo1UBAmliZUE6UJTMyMcuK
K/ZhNzQlRHiuPpTxhYHoMUoOIyL69fH9Pp+2wvCOEOtWyG+qhxn6LLMwsCVrDhrT
4Bl7k+DntR5PPp3gf2jXwv7keYd7MDop8uinHW8fRFjYkrdrmx/jowc5gCQnxDYI
ZAcdIKGH95lvwd/uZZ16h2hZpqX9wPxrYSCTKlRRTABrvNqDIP6WiiiebhKZqRSU
BPVNPpRdrwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFNc/VeKMlxNWoBhZPOyk+kef
cr2ZMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzM2MTEzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOpYMA0GCSqGSIb3DQEBCwUAA4IB
AQC0ZfDHR3CZ0n+F/kF20aG+NPPBbPcQ6ZGBa3FodnpAdKMxq5U6jGbTN4Q3JUIr
DM6DsWrXXtrE21w0Hd/Lf7zTFvwHk3nY1umHEVqiX0HEhbwsNEThiKx6FXv7sTbi
ms+vqNVFpfIcUAku7sm+tq9o/O1xhf2KEgq1VNw0CzqEDXhTJ1kCy/qHB3vDM4Hd
SgXj5h+lk/brg0pzNAAvhcp6fVNubfJym9r3qp+9tC9m8H3txk/aTEXt6vKboUig
VTEvkU23ua2ubw+nqiiWoriO0+GUiS66H8qzp7FjP0vJEVG6k7x8IGGX1KxWQe90
AdM0t/ACCevSnkSi+4wLEGpi
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:38 2025 by rpki-client