Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e342e302f32342d3234203d3e203139393137.roa
File: 3130342e3232362e342e302f32342d3234203d3e203139393137.roa (raw, json)
Hash identifier: IUtaw3L7TklUnjX0AdISGfKPrwu+xbbvAjdZiWZbLa4=
Subject key identifier: DC:C7:C5:83:AB:46:15:3C:F3:54:38:78:36:9D:5B:AC:B1:0E:D9:C8
Certificate issuer: /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial: 66E97CE82332E56CCB78B9B952FDB55E1CC5B6B2
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e342e302f32342d3234203d3e203139393137.roa
Signing time: Wed 18 Dec 2024 05:55:08 +0000
ROA not before: Wed 18 Dec 2024 05:50:08 +0000
ROA not after: Wed 17 Dec 2025 05:55:08 +0000
asID: 19917
IP address blocks: 104.226.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e9:7c:e8:23:32:e5:6c:cb:78:b9:b9:52:fd:b5:5e:1c:c5:b6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Validity
Not Before: Dec 18 05:50:08 2024 GMT
Not After : Dec 17 05:55:08 2025 GMT
Subject: CN=DCC7C583AB46153CF3543878369D5BACB10ED9C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:e8:34:72:54:62:1a:eb:ef:50:85:4c:4f:
04:25:d4:8d:08:95:98:36:f2:a2:e8:a6:d0:96:9b:
5b:66:e1:8b:0a:8b:a6:ac:29:27:84:46:2e:3a:1a:
97:53:08:b9:c5:01:47:0c:c3:ec:95:36:64:74:73:
40:b0:09:8f:eb:b1:ec:7b:25:47:11:f1:d8:ad:d8:
5e:56:1a:f6:f8:4d:b3:d2:d4:fa:b0:d6:63:c1:d5:
8c:69:1e:50:64:5e:a8:c0:fb:26:a6:6e:c5:3b:e1:
75:ad:8f:c2:52:63:7a:f4:97:a1:71:30:b0:2d:95:
6a:26:1e:4f:4a:e3:93:c7:8a:2f:18:f1:c5:d8:18:
cc:71:00:c1:b5:a3:38:34:de:36:56:66:1f:e2:bb:
a9:18:7c:b5:b8:98:76:74:36:c6:8b:e5:4a:e0:15:
cd:58:a2:82:37:aa:94:17:6b:ff:30:39:2d:c7:31:
5a:2f:3e:fb:91:72:f2:fd:93:43:1e:b9:25:d1:f2:
f6:17:54:c1:0a:c1:4f:92:a6:a4:f8:ea:4e:6e:d1:
eb:f5:80:17:08:43:5d:94:d4:cc:b0:e1:d8:1e:0a:
66:a2:e9:0a:2e:5c:51:c5:8c:74:8a:a4:b7:a3:55:
87:d6:53:f9:77:5a:b6:b8:62:e6:cd:90:54:e0:a9:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C7:C5:83:AB:46:15:3C:F3:54:38:78:36:9D:5B:AC:B1:0E:D9:C8
X509v3 Authority Key Identifier:
keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e342e302f32342d3234203d3e203139393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.226.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:36:53:f8:03:86:8b:61:e0:06:3c:c9:c5:13:e6:d4:c3:26:
ab:2a:38:3a:0b:3f:39:38:e5:b7:cd:98:27:c7:07:7c:16:a9:
ae:63:53:60:e4:5a:81:86:7a:9b:67:3a:6f:bb:17:bf:9d:e1:
44:39:cf:73:b2:d0:16:23:db:be:c1:72:7d:47:9a:51:c7:4a:
6a:53:31:bc:1b:55:48:d9:05:25:a1:eb:62:3e:85:29:5e:7a:
ae:68:82:b1:83:03:ba:8c:fc:25:f6:ce:bf:69:0c:aa:3f:fa:
84:11:1b:e4:2d:09:44:1a:72:ce:5b:9f:bb:a2:e1:4a:1d:37:
81:1f:2f:1b:a8:33:4d:ff:c5:85:d5:11:4c:3d:e3:61:34:21:
62:1b:93:d2:00:a5:0e:8f:42:9d:e5:cc:80:4f:a9:1c:2d:82:
23:e2:26:25:38:3a:58:a8:10:51:91:d5:55:5e:a2:2d:5d:95:
03:e0:9c:5d:63:73:bd:fd:08:0b:74:73:e7:f8:58:52:ab:34:
d2:b5:a7:29:0c:69:21:bf:5b:b8:9c:74:6e:bf:f2:b3:aa:e9:
4a:21:2b:ca:b0:1f:6f:e4:7c:bf:7c:26:53:9a:11:86:bb:cb:
d3:de:a7:7d:ad:b4:da:c1:0c:16:3a:25:47:28:0f:5f:ac:ae:
71:c6:9c:9b
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUZul86CMy5WzLeLm5Uv21XhzFtrIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWJmNzM5ZjYzYzY5NDM1MzVjZmU0ZWQyODEzZjgzOGVk
NTYwYjcwNzZmM2E0NTJlYjgwHhcNMjQxMjE4MDU1MDA4WhcNMjUxMjE3MDU1NTA4
WjAzMTEwLwYDVQQDEyhEQ0M3QzU4M0FCNDYxNTNDRjM1NDM4NzgzNjlENUJBQ0Ix
MEVEOUM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLLoNHJUYhrr
71CFTE8EJdSNCJWYNvKi6KbQlptbZuGLCoumrCknhEYuOhqXUwi5xQFHDMPslTZk
dHNAsAmP67HseyVHEfHYrdheVhr2+E2z0tT6sNZjwdWMaR5QZF6owPsmpm7FO+F1
rY/CUmN69JehcTCwLZVqJh5PSuOTx4ovGPHF2BjMcQDBtaM4NN42VmYf4rupGHy1
uJh2dDbGi+VK4BXNWKKCN6qUF2v/MDktxzFaLz77kXLy/ZNDHrkl0fL2F1TBCsFP
kqak+OpObtHr9YAXCENdlNTMsOHYHgpmoukKLlxRxYx0iqS3o1WH1lP5d1q2uGLm
zZBU4KnoAQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFNzHxYOrRhU881Q4eDadW6yx
DtnIMB8GA1UdIwQYMBaAFOIMIy9SScttgY2J97K9muOjaXV8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzEv
RTIwQzIzMkY1MjQ5Q0I2RDgxOEQ4OUY3QjJCRDlBRTNBMzY5NzU3Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg3ZmQ5MzU1LWZmZGMtNDk4Ni05MzI5LTRkMTkwOWUwMWEyZi8xYmY3
MzlmNjNjNjk0MzUzNWNmZTRlZDI4MTNmODM4ZWQ1NjBiNzA3NmYzYTQ1MmViOC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8xLzMxMzAzNDJlMzIzMjM2MmUzNDJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMxMzkzOTMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABo4gQwDQYJKoZIhvcNAQELBQAD
ggEBAJw2U/gDhoth4AY8ycUT5tTDJqsqODoLPzk45bfNmCfHB3wWqa5jU2DkWoGG
eptnOm+7F7+d4UQ5z3Oy0BYj277Bcn1HmlHHSmpTMbwbVUjZBSWh62I+hSleeq5o
grGDA7qM/CX2zr9pDKo/+oQRG+QtCUQacs5bn7ui4UodN4EfLxuoM03/xYXVEUw9
42E0IWIbk9IApQ6PQp3lzIBPqRwtgiPiJiU4OlioEFGR1VVeoi1dlQPgnF1jc739
CAt0c+f4WFKrNNK1pykMaSG/W7icdG6/8rOq6UohK8qwH2/kfL98JlOaEYa7y9Pe
p32ttNrBDBY6JUcoD1+srnHGnJs=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:04:07 2025 by rpki-client