Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393905.roa
File: AS393905.roa (raw, json)
Hash identifier: +Qw9RFfXp6ccmPKiHxi987nnz209ZQ4L256Kl0pbRso=
Subject key identifier: C8:56:46:69:9C:FA:A9:5C:BB:1E:59:B9:D0:BB:48:DF:5C:AC:1F:BB
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 7FB25177B86EEF39AE7F0A003F9CA7202EE81D50
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393905.roa
Signing time: Fri 24 Jan 2025 16:28:26 +0000
ROA not before: Fri 24 Jan 2025 16:23:26 +0000
ROA not after: Fri 23 Jan 2026 16:28:26 +0000
asID: 393905
IP address blocks: 104.234.251.0/24 maxlen: 24
104.234.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b2:51:77:b8:6e:ef:39:ae:7f:0a:00:3f:9c:a7:20:2e:e8:1d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 24 16:23:26 2025 GMT
Not After : Jan 23 16:28:26 2026 GMT
Subject: CN=C85646699CFAA95CBB1E59B9D0BB48DF5CAC1FBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:dc:bd:a2:14:27:a4:0a:f4:3b:38:e8:e6:
19:22:de:ad:62:a2:39:80:0d:31:86:30:89:05:ba:
01:ec:05:aa:fa:d1:56:2c:b5:fd:f3:b1:1b:71:d6:
f1:11:ad:40:4e:49:cc:e5:36:e7:24:e7:94:f0:18:
a9:64:48:1f:a9:4d:61:cc:78:93:9d:3e:9d:db:6a:
c9:82:7e:ae:5f:39:ae:4d:8f:de:5a:76:c5:8c:90:
53:8a:41:ba:ac:7b:21:f5:cf:de:a6:c9:a1:6f:8f:
a6:04:5c:7a:6f:41:30:0a:5a:54:c0:82:c0:5e:99:
6c:62:90:9c:b4:3c:24:58:59:99:79:2e:f6:82:79:
ad:e9:4e:de:0d:28:d6:39:48:38:56:48:d9:49:9b:
56:3a:31:40:9e:90:c1:12:89:1d:48:9c:8a:ec:3d:
c7:b3:2c:94:b9:0f:33:c5:4a:92:ff:10:4d:14:b7:
03:5d:d8:76:28:cf:da:4e:d4:a3:7f:f2:ff:d5:2f:
e9:e1:ae:2b:bf:0e:7e:78:d8:5b:85:69:bb:87:62:
74:ae:de:02:8d:33:68:f5:8a:06:eb:eb:fb:48:b6:
d2:9a:8a:d1:7c:d0:7d:1e:13:4d:fc:ba:a2:e8:25:
2e:6f:9b:90:17:7f:62:17:43:a2:33:f3:78:f1:63:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:56:46:69:9C:FA:A9:5C:BB:1E:59:B9:D0:BB:48:DF:5C:AC:1F:BB
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393905.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.251.0-104.234.252.255
Signature Algorithm: sha256WithRSAEncryption
96:96:34:f6:71:c9:64:bf:fc:1d:f0:de:6d:e7:f7:04:ae:79:
a1:16:25:dc:f4:99:2e:c6:64:d9:aa:9e:42:38:11:45:45:fa:
c0:ad:df:42:83:b1:18:8b:90:59:2d:c9:7f:e9:31:00:a9:16:
92:62:1e:ad:13:6d:f4:ae:11:9b:8b:2a:3c:67:5f:c0:c2:e4:
be:ab:db:6a:3e:52:b8:14:ce:61:be:98:54:ee:cc:33:14:0c:
13:1a:b5:f6:0e:5f:21:44:f1:62:d4:c5:6a:60:b8:d8:2f:03:
08:c4:b4:17:bc:b1:23:ab:16:05:67:9c:3c:d2:0b:97:f6:17:
4f:0b:13:8c:2f:22:6a:55:bc:89:10:d0:91:68:50:c4:3a:cb:
47:22:49:22:34:ff:25:57:de:fd:1f:e7:73:9b:98:29:4b:b4:
24:83:a4:93:7a:eb:ff:10:4c:f9:e9:6d:cc:d5:e4:73:45:17:
08:08:fe:fa:52:88:9f:f8:3e:a9:ae:53:22:47:b9:9a:2c:0d:
77:30:dd:4f:ef:a1:fa:ba:ad:1c:ea:2c:75:dd:57:31:6e:53:
55:cc:ea:49:e1:35:3f:ff:c0:52:56:88:53:3c:62:b5:b3:78:
3f:62:9c:c8:1d:5c:a8:ff:3f:6b:bf:79:5d:0e:a1:85:6a:f5:
d6:11:64:2b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIUf7JRd7hu7zmufwoAP5ynIC7oHVAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTI0MTYyMzI2WhcNMjYwMTIzMTYyODI2
WjAzMTEwLwYDVQQDEyhDODU2NDY2OTlDRkFBOTVDQkIxRTU5QjlEMEJCNDhERjVD
QUMxRkJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqincvaIUJ6QK
9Ds46OYZIt6tYqI5gA0xhjCJBboB7AWq+tFWLLX987EbcdbxEa1ATknM5TbnJOeU
8BipZEgfqU1hzHiTnT6d22rJgn6uXzmuTY/eWnbFjJBTikG6rHsh9c/epsmhb4+m
BFx6b0EwClpUwILAXplsYpCctDwkWFmZeS72gnmt6U7eDSjWOUg4VkjZSZtWOjFA
npDBEokdSJyK7D3HsyyUuQ8zxUqS/xBNFLcDXdh2KM/aTtSjf/L/1S/p4a4rvw5+
eNhbhWm7h2J0rt4CjTNo9YoG6+v7SLbSmorRfNB9HhNN/Lqi6CUub5uQF39iF0Oi
M/N48WPdcQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFMhWRmmc+qlcux5ZudC7SN9c
rB+7MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzM5MzkwNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAaOr7AwQAaOr8MA0GCSqGSIb3
DQEBCwUAA4IBAQCWljT2cclkv/wd8N5t5/cErnmhFiXc9JkuxmTZqp5COBFFRfrA
rd9Cg7EYi5BZLcl/6TEAqRaSYh6tE230rhGbiyo8Z1/AwuS+q9tqPlK4FM5hvphU
7swzFAwTGrX2Dl8hRPFi1MVqYLjYLwMIxLQXvLEjqxYFZ5w80guX9hdPCxOMLyJq
VbyJENCRaFDEOstHIkkiNP8lV979H+dzm5gpS7Qkg6STeuv/EEz56W3M1eRzRRcI
CP76Uoif+D6prlMiR7maLA13MN1P76H6uq0c6ix13VcxblNVzOpJ4TU//8BSVohT
PGK1s3g/YpzIHVyo/z9rv3ldDqGFavXWEWQr
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:54 2025 by rpki-client