Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395111.roa
File: AS395111.roa (raw, json)
Hash identifier: 6YSI8oR8PGPj4vAp8miMJtXNEqK4UHZZyLpWBBHnmqY=
Subject key identifier: B7:18:F6:48:09:7B:0B:86:FF:A2:93:BE:51:A7:01:77:96:BD:9E:29
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 2562BA3835331F626A447F26F83A94E62741F092
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395111.roa
Signing time: Wed 20 Nov 2024 18:49:21 +0000
ROA not before: Wed 20 Nov 2024 18:44:21 +0000
ROA not after: Wed 19 Nov 2025 18:49:21 +0000
asID: 395111
IP address blocks: 104.234.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:62:ba:38:35:33:1f:62:6a:44:7f:26:f8:3a:94:e6:27:41:f0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Nov 20 18:44:21 2024 GMT
Not After : Nov 19 18:49:21 2025 GMT
Subject: CN=B718F648097B0B86FFA293BE51A7017796BD9E29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:2b:48:70:88:ba:4c:be:c7:d6:2b:56:fe:
1f:14:7f:41:d4:9c:00:2d:7a:29:b3:c9:0f:69:8a:
e6:53:48:42:8c:af:8b:f3:8d:49:37:d5:1b:c9:71:
67:e3:0a:39:5e:04:5c:a1:8d:c3:82:e7:df:24:82:
9b:31:ef:62:26:4e:dd:61:60:b1:4c:99:98:fe:be:
47:72:39:93:00:98:17:8b:2c:14:3e:07:86:ae:6b:
ef:e9:2c:f8:24:2b:a1:a8:76:55:a0:5f:87:ea:0b:
e7:12:f9:bb:92:fa:2f:94:f0:e6:6d:93:d5:39:ec:
df:e8:63:5b:8a:e9:81:5a:4c:5e:a0:5a:b3:2a:ec:
12:c5:8c:b0:25:c0:02:08:ee:9b:50:bf:65:59:c2:
fa:ff:8d:43:71:71:1e:a4:a1:d3:68:91:d3:c9:cd:
7e:16:6c:b5:2c:a9:e9:b2:1d:8f:22:68:b0:2f:d9:
f6:59:12:97:eb:f8:f8:19:fc:0e:7c:de:d7:43:76:
8c:29:2b:aa:33:c0:05:79:99:be:5c:76:d5:6b:a3:
bd:d9:f1:41:0b:81:49:1d:75:c8:41:dd:b9:42:92:
6c:b5:1f:a0:7f:63:b2:1e:d3:c1:a2:1c:12:d0:9c:
c0:b9:d2:5d:bf:3f:ad:3e:98:b7:12:c3:da:12:2d:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:18:F6:48:09:7B:0B:86:FF:A2:93:BE:51:A7:01:77:96:BD:9E:29
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.171.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:8a:c3:36:f2:4c:70:b6:7e:8d:61:25:c3:4c:c8:9a:2f:ff:
df:da:c5:d6:82:93:6b:0d:cf:94:8a:12:97:65:77:05:64:8b:
ed:8e:be:d0:1b:21:79:f0:cc:43:37:11:af:57:f1:9c:33:e7:
18:2b:8c:08:a2:66:53:06:4e:71:22:af:c4:3c:d4:90:6d:19:
39:8f:3a:a7:12:7c:f2:ac:d5:ae:98:ec:3c:01:a5:57:78:ad:
20:71:88:f1:74:c9:3d:3f:2c:38:55:6c:ce:7e:eb:bd:20:61:
d8:07:76:f2:dc:87:79:77:3a:10:0e:cc:e2:2f:63:a1:c0:b7:
25:63:07:85:2c:04:6f:45:42:c3:17:cd:df:d1:41:ec:ce:53:
9e:0c:12:5e:0d:2e:ba:23:5e:48:80:42:13:6e:a6:c5:00:73:
78:87:f6:36:3b:fa:58:63:d7:93:85:77:bc:ea:72:a4:bc:ac:
b2:26:b0:9e:87:20:0c:49:44:d3:a6:96:c8:44:22:4a:64:d8:
a4:b0:09:84:67:49:01:c5:0d:55:6b:46:8f:25:12:39:0d:cd:
02:88:92:77:66:d2:5a:dd:11:63:b0:a1:a3:91:a0:dd:35:ec:
60:fa:79:3d:ee:50:64:86:6e:4b:e5:86:35:d8:b1:93:8e:39:
49:41:e5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:17 2025 by rpki-client