Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400799.roa
File: AS400799.roa (raw, json)
Hash identifier: q7lSy2HnJXUShTjspUDvHhxNS3E7cIdrn8dCdVxo8v4=
Subject key identifier: 0F:04:7B:D9:46:4D:58:58:81:64:C9:23:72:44:FB:53:6F:8E:C1:37
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 04160F14034CD0D3A58210C48D7CA851A6412E13
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400799.roa
Signing time: Wed 11 Dec 2024 14:28:23 +0000
ROA not before: Wed 11 Dec 2024 14:23:23 +0000
ROA not after: Wed 10 Dec 2025 14:28:23 +0000
asID: 400799
IP address blocks: 104.234.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:16:0f:14:03:4c:d0:d3:a5:82:10:c4:8d:7c:a8:51:a6:41:2e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 11 14:23:23 2024 GMT
Not After : Dec 10 14:28:23 2025 GMT
Subject: CN=0F047BD9464D58588164C9237244FB536F8EC137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:26:49:42:f4:22:2e:00:02:af:d5:a5:9b:
71:5a:07:11:e6:92:a7:9f:6d:f1:04:e3:73:40:24:
36:d8:14:76:1a:fe:d5:c2:2d:0a:f9:99:e9:ec:15:
04:82:f9:21:a4:5d:a7:4b:e6:2e:81:79:fc:bf:00:
6a:17:a3:4a:2e:81:dc:25:c9:b0:1e:e2:26:75:65:
51:2d:cd:c5:e2:71:e1:e2:6d:f0:f5:57:35:cc:d6:
4d:7d:4b:46:4f:e0:9d:e5:cb:2c:44:60:4e:25:05:
a9:75:5a:03:46:80:21:9f:90:fe:c3:18:d8:88:9b:
0a:af:52:f2:89:fa:c1:43:4a:1b:b2:97:51:fb:93:
99:17:83:e8:26:05:93:ec:d9:15:f4:ef:d2:e9:aa:
79:08:54:1a:71:fc:9c:2c:98:c7:03:f3:53:50:15:
46:fe:10:61:b9:0b:8b:ef:c9:0e:8a:9d:7d:36:b9:
99:3b:2e:cb:36:20:e5:fd:28:c6:d0:d1:9b:3f:6a:
96:3e:b2:92:8f:e6:01:f7:60:a4:17:0e:14:78:12:
3d:01:8a:6f:b6:87:3d:e7:d5:76:4f:23:f8:37:7f:
87:97:14:b3:15:0b:31:e3:bc:95:f0:69:05:22:3d:
42:f3:82:90:d0:38:81:83:df:7d:e5:6b:7f:32:97:
f7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:04:7B:D9:46:4D:58:58:81:64:C9:23:72:44:FB:53:6F:8E:C1:37
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.169.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4c:00:83:32:0e:7a:80:b0:6b:76:e7:c2:ad:5d:ca:db:d9:
64:08:20:50:ed:a1:40:b5:f3:e6:4f:4b:ca:8a:54:db:1d:25:
35:55:2b:b1:fa:18:23:fa:7c:76:c3:1b:98:ca:34:cb:b1:16:
6b:2f:6c:39:2f:fe:49:1e:28:6b:1f:86:c8:0a:bd:81:f7:2d:
53:f5:0f:39:2e:f7:69:32:4d:1b:2c:7d:2b:ad:e4:21:c8:00:
57:b0:3c:53:d1:9f:84:a7:ab:07:74:36:6d:a5:ad:c8:71:10:
56:aa:ea:00:7c:1b:34:b0:a4:bd:19:0d:0b:7b:3f:25:19:c3:
23:a4:e1:c5:b8:20:64:2e:4f:be:cd:a6:f2:8a:7a:fb:56:82:
29:dd:d1:90:b7:b6:62:ac:bb:3b:bf:d1:d3:68:b1:d0:7f:f9:
cb:38:a2:1d:8c:6e:ad:b7:cd:4d:8e:f6:af:84:3b:60:c7:d4:
06:fe:64:48:01:e8:ac:75:b5:b3:bb:af:07:ce:9c:36:9d:aa:
a7:9d:32:49:09:80:cc:86:98:86:76:3d:0c:a5:55:20:3f:f8:
ed:c8:5c:55:d8:f9:4e:b1:9c:91:11:cf:ca:7d:94:e8:f0:c3:
43:4e:34:12:49:c6:b5:9f:ca:72:42:b1:b2:eb:8f:43:dc:f8:
23:e5:df:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:45 2025 by rpki-client