
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393278.roa
File: AS393278.roa (raw, json)
Hash identifier: YiOMNu5e1ucSIPMeIY0wL++vuw1jgz4zO/LUjouQlSE=
Subject key identifier: 03:63:88:5B:B8:90:C5:0D:CC:E9:D3:47:73:2A:D2:10:06:CB:E4:CF
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 58296A816A114B054474C39155E5AA8586A286DF
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393278.roa
Signing time: Wed 15 Jan 2025 21:28:23 +0000
ROA not before: Wed 15 Jan 2025 21:23:23 +0000
ROA not after: Wed 14 Jan 2026 21:28:23 +0000
asID: 393278
IP address blocks: 104.234.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:29:6a:81:6a:11:4b:05:44:74:c3:91:55:e5:aa:85:86:a2:86:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 15 21:23:23 2025 GMT
Not After : Jan 14 21:28:23 2026 GMT
Subject: CN=0363885BB890C50DCCE9D347732AD21006CBE4CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b0:50:5a:ad:df:6a:19:3c:f0:15:9a:79:de:
94:a6:a7:80:68:98:98:e5:b8:cb:8d:e7:4a:87:71:
7c:3e:fc:ed:48:c1:4b:a8:38:70:62:76:49:db:af:
6f:45:7a:01:6b:23:cd:60:72:63:7d:d0:2b:a2:d7:
d5:34:bd:ba:e5:f5:2d:98:91:e4:c9:d4:4b:cc:a2:
49:f0:25:df:ad:26:ee:5d:f9:b5:29:a0:09:74:e7:
73:3a:0a:41:19:84:ea:80:57:0d:da:fd:13:d2:a2:
d1:83:9f:34:2c:6a:32:51:b7:b2:f4:c1:39:0d:e6:
1d:00:a8:ea:59:93:3b:d8:38:40:6e:24:7f:b6:8f:
bf:c5:a2:48:67:cc:5b:ea:13:49:f9:4b:97:2f:96:
de:d2:84:d6:59:c6:71:3e:bd:d5:7f:a3:00:ba:53:
70:d3:5b:7b:72:d8:ef:40:13:04:d8:eb:f5:56:34:
db:5f:25:d9:30:38:a0:ba:17:62:53:bd:8f:89:f9:
0b:57:42:52:49:1c:fc:71:4d:c6:db:50:eb:27:52:
bc:05:4f:26:32:51:98:98:4a:3a:1b:5f:67:5c:b4:
1f:54:ce:b5:8a:83:91:aa:bc:61:26:26:09:71:4a:
df:a2:78:25:cd:86:db:89:36:a7:6e:ef:19:c3:bb:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:63:88:5B:B8:90:C5:0D:CC:E9:D3:47:73:2A:D2:10:06:CB:E4:CF
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393278.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.5.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c6:b0:14:10:cd:5b:2d:a2:1e:5e:b2:da:32:da:6a:60:4a:
2e:38:5f:73:49:c7:f6:b5:d6:c4:26:02:c2:30:9e:0b:02:cd:
b8:2c:a2:9a:9a:99:e1:32:21:b5:d0:6f:a3:fb:97:e3:37:04:
49:04:7b:d7:66:79:17:da:95:40:00:86:f2:d2:12:08:ef:fb:
1a:75:d2:64:f5:27:07:ec:36:1b:e9:bd:07:ca:8f:cd:1e:cc:
ba:b7:b9:ca:07:36:3d:04:d1:20:7b:49:1c:ab:a9:f9:a3:46:
e6:fe:73:59:90:a2:b5:e4:a0:13:ed:5c:51:b5:9c:5b:06:96:
9c:26:d6:04:69:99:be:e8:b3:42:c4:2d:48:0d:19:21:73:8a:
92:77:ba:7c:96:07:39:8c:8e:2e:ba:b6:f5:f6:e6:5d:df:d7:
1c:34:95:0e:58:f0:0c:27:39:ac:a8:f7:6d:b8:29:df:9d:39:
67:3b:a0:51:5a:c6:10:c3:c5:b3:77:0d:b0:0d:96:3f:55:7c:
48:98:68:dd:12:59:34:d8:c8:f7:41:94:05:3b:1d:78:da:93:
0e:dd:4d:59:71:14:ed:7c:85:6c:d7:9a:6f:05:cb:25:c8:b7:
b9:39:56:a9:f4:d9:2e:e2:f9:6e:7b:07:69:4d:15:eb:83:25:
ef:5e:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:57 2025 by rpki-client