Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: joc0mnndz18IevjMxJ53tFjWrN6vhb5ngS3oPVhA+5o=
Subject key identifier: DE:D2:8F:3F:23:CF:6A:4D:75:90:90:2E:F5:0D:A7:D1:CB:05:44:BB
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 33AE4B2329716D4FBE18E0D46FDFBA38500847FF
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS984.roa
Signing time: Fri 17 Jan 2025 09:28:23 +0000
ROA not before: Fri 17 Jan 2025 09:23:23 +0000
ROA not after: Fri 16 Jan 2026 09:28:23 +0000
asID: 984
IP address blocks: 104.234.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ae:4b:23:29:71:6d:4f:be:18:e0:d4:6f:df:ba:38:50:08:47:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 17 09:23:23 2025 GMT
Not After : Jan 16 09:28:23 2026 GMT
Subject: CN=DED28F3F23CF6A4D7590902EF50DA7D1CB0544BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:12:be:58:ef:d3:2a:cf:d7:da:55:15:eb:
b6:3c:37:75:54:8b:56:40:1f:64:9c:85:fb:6c:f8:
66:f7:d5:3f:8a:7a:fc:6b:14:5a:81:75:03:68:17:
97:55:ff:e6:4a:e1:b0:94:eb:cf:88:08:15:82:5f:
7e:8c:e1:3a:5e:9e:6f:9d:da:e0:28:3f:b0:0a:13:
d7:60:99:11:69:cf:0f:49:70:9e:2a:fc:bc:b0:9a:
b2:99:36:f4:0a:79:97:d5:b3:8b:be:22:ae:fa:77:
1f:36:c7:98:97:55:67:c4:a9:7f:42:0d:9d:80:1e:
74:85:8a:bc:38:57:4b:c6:ef:01:63:c9:ac:87:f4:
2d:a3:a2:19:0d:24:6a:2b:9e:45:f1:27:33:c4:79:
66:46:b3:5a:88:ef:1f:c0:33:e5:ee:a2:56:b7:ae:
7f:47:23:55:c9:b2:ad:31:8d:e3:c2:3f:71:50:1d:
f9:ff:1a:8e:3e:f1:75:f3:0c:85:22:92:dc:13:ce:
81:60:a2:12:90:0a:63:2e:37:f8:94:c7:2e:63:9e:
20:3b:d5:dd:72:79:fb:39:54:03:ec:79:2b:44:19:
0a:71:35:f4:d1:13:b2:91:18:81:92:70:68:9d:4b:
fe:81:f4:cc:1a:c5:fd:f9:85:bb:c2:2e:73:ca:fb:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D2:8F:3F:23:CF:6A:4D:75:90:90:2E:F5:0D:A7:D1:CB:05:44:BB
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.64.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e4:2f:17:41:10:ce:fd:e3:7f:fc:80:29:25:f9:7b:54:ed:
67:f8:79:b4:77:bc:9f:04:00:8a:a1:d4:d9:72:57:f1:ac:4c:
55:69:49:c6:4c:c6:41:f2:e7:64:65:36:e1:69:3d:c4:79:1b:
f6:9e:65:24:b9:82:ae:54:8f:c0:0c:b1:5d:40:bb:01:85:63:
7c:6c:35:81:dc:2f:5f:7c:f7:88:1f:90:a3:21:c2:22:61:a7:
e7:be:cb:30:1b:de:e1:0a:1c:1d:f5:1f:dc:2b:a0:a3:6e:90:
9d:7f:4b:5e:27:d3:b7:a3:5b:ef:ce:49:9c:ad:dc:fa:c9:17:
58:2a:81:78:59:f7:bf:ac:b6:dd:15:5a:af:93:f6:93:f7:42:
8d:2a:bf:85:0e:58:49:28:8f:88:54:6b:71:2b:b3:10:a2:8a:
c3:25:a1:46:9f:2f:f5:e0:bb:0c:5d:82:0c:65:d5:2d:79:26:
68:dd:4a:31:88:9c:4e:04:55:ab:62:6c:77:0f:bd:9c:94:e3:
ff:b2:d7:c6:d9:2a:a8:9f:0d:d4:e5:95:76:2d:97:2b:f8:97:
3b:8a:74:13:3c:9b:88:68:0b:ab:17:3e:57:67:e6:ab:b3:c7:
b4:33:95:da:1f:6c:e6:a5:d2:2d:79:0c:5e:7a:29:40:d0:ce:
6f:e7:e7:40
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIUM65LIylxbU++GODUb9+6OFAIR/8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTE3MDkyMzIzWhcNMjYwMTE2MDkyODIz
WjAzMTEwLwYDVQQDEyhERUQyOEYzRjIzQ0Y2QTRENzU5MDkwMkVGNTBEQTdEMUNC
MDU0NEJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEASvljv0yrP
19pVFeu2PDd1VItWQB9knIX7bPhm99U/inr8axRagXUDaBeXVf/mSuGwlOvPiAgV
gl9+jOE6Xp5vndrgKD+wChPXYJkRac8PSXCeKvy8sJqymTb0CnmX1bOLviKu+ncf
NseYl1VnxKl/Qg2dgB50hYq8OFdLxu8BY8msh/Qto6IZDSRqK55F8SczxHlmRrNa
iO8fwDPl7qJWt65/RyNVybKtMY3jwj9xUB35/xqOPvF18wyFIpLcE86BYKISkApj
Ljf4lMcuY54gO9Xdcnn7OVQD7HkrRBkKcTX00ROykRiBknBonUv+gfTMGsX9+YW7
wi5zyvuFCwIDAQABo4ICfDCCAngwHQYDVR0OBBYEFN7Sjz8jz2pNdZCQLvUNp9HL
BUS7MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzk4NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqQDANBgkqhkiG9w0BAQsFAAOCAQEA
jOQvF0EQzv3jf/yAKSX5e1TtZ/h5tHe8nwQAiqHU2XJX8axMVWlJxkzGQfLnZGU2
4Wk9xHkb9p5lJLmCrlSPwAyxXUC7AYVjfGw1gdwvX3z3iB+QoyHCImGn577LMBve
4QocHfUf3Cugo26QnX9LXifTt6Nb785JnK3c+skXWCqBeFn3v6y23RVar5P2k/dC
jSq/hQ5YSSiPiFRrcSuzEKKKwyWhRp8v9eC7DF2CDGXVLXkmaN1KMYicTgRVq2Js
dw+9nJTj/7LXxtkqqJ8N1OWVdi2XK/iXO4p0EzybiGgLqxc+V2fmq7PHtDOV2h9s
5qXSLXkMXnopQNDOb+fnQA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:41 2025 by rpki-client