Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20323039313831.roa
File: 3130342e3235342e3139342e302f32342d3234203d3e20323039313831.roa (raw, json)
Hash identifier: 4A0DPxCld03aET/LAXqyZ9SJTBWOqa962oSzBYA881c=
Subject key identifier: E4:53:6A:1A:18:6F:57:7C:1B:C4:B1:EF:08:2A:06:DA:C4:67:B1:72
Certificate issuer: /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial: 42339076E18DB83B21DCB45F5F9B63AAE26024D6
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20323039313831.roa
Signing time: Sun 16 Feb 2025 21:28:26 +0000
ROA not before: Sun 16 Feb 2025 21:23:26 +0000
ROA not after: Sun 15 Feb 2026 21:28:26 +0000
asID: 209181
IP address blocks: 104.254.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:33:90:76:e1:8d:b8:3b:21:dc:b4:5f:5f:9b:63:aa:e2:60:24:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Validity
Not Before: Feb 16 21:23:26 2025 GMT
Not After : Feb 15 21:28:26 2026 GMT
Subject: CN=E4536A1A186F577C1BC4B1EF082A06DAC467B172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:c8:32:40:55:a2:88:f4:ba:3f:9a:75:33:
c8:2d:56:9b:f3:89:dd:ac:7f:43:2a:b8:88:85:59:
e8:de:34:ed:54:60:d1:5b:67:35:31:92:82:41:a5:
f0:f9:3e:5d:6a:15:1c:55:8f:e5:ea:c7:6b:82:99:
e4:31:13:12:20:11:03:3a:29:4b:b0:b3:ee:96:f4:
3c:1e:c3:0d:cf:77:77:f4:22:15:02:c8:2d:fa:3e:
b8:14:73:15:0c:09:25:dc:f1:71:ab:3f:b7:26:65:
c7:27:47:6a:1b:b6:f2:5b:d7:bf:21:46:8e:15:b7:
6c:4e:11:b5:6d:66:fa:82:d4:96:02:a2:6d:5a:55:
ae:f1:76:db:0e:72:89:b3:55:96:8a:3c:30:76:cd:
a9:5a:23:5c:ab:f7:da:e1:8a:9f:fa:b5:3e:f9:eb:
68:5c:72:e2:95:f7:7c:2a:1d:da:71:4d:32:ff:02:
0e:a7:63:10:b8:58:c2:c0:26:39:f3:aa:eb:ea:ad:
7a:37:ee:1a:4c:5b:8d:68:61:ad:db:67:67:e9:91:
25:73:30:a7:be:8d:15:e9:e9:9e:37:9f:fb:3c:36:
08:b3:a7:3a:1f:69:0c:81:af:dc:94:61:e7:43:de:
9e:3f:b9:0d:0f:2f:49:a2:a0:e5:c6:cb:a1:ff:38:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:53:6A:1A:18:6F:57:7C:1B:C4:B1:EF:08:2A:06:DA:C4:67:B1:72
X509v3 Authority Key Identifier:
keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20323039313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.254.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b0:00:0c:86:1a:30:92:ec:36:6a:b0:1d:58:e1:88:85:34:
94:48:1a:fd:50:03:07:f7:31:ef:b1:c6:e0:a3:d1:e3:03:80:
93:55:7b:3c:2d:a0:7e:64:a2:2f:17:42:a9:8f:67:45:df:a6:
78:d3:13:95:76:8d:ea:43:d9:c8:00:45:e2:01:91:ea:62:fb:
be:44:57:4b:ca:52:14:77:88:04:fd:74:87:59:db:42:2c:6b:
0d:5d:67:a3:00:f1:73:af:68:56:30:dd:f8:f3:4a:ef:e2:61:
e2:6a:ce:1c:c9:de:6a:7c:42:1c:3a:43:e3:41:2c:74:7b:d0:
57:b1:68:0c:fe:d4:06:19:ea:f4:c2:1f:b9:46:9a:43:df:37:
6e:71:53:a3:7c:18:35:3b:b6:d9:a3:55:e1:ee:a8:6b:3c:75:
00:fc:11:cf:5f:51:e3:c5:8f:13:3e:2b:d7:bf:a7:6d:66:a0:
8d:cd:49:28:14:aa:d9:87:82:ad:9f:e3:3b:d4:c9:d0:e6:10:
78:2b:8e:71:75:58:e5:79:a0:57:bd:16:bd:05:80:01:45:d1:
a4:f7:70:5f:14:a1:0b:25:f9:ed:71:7c:58:a3:c9:c5:25:38:
7d:80:5a:d4:f5:2a:0b:34:23:be:ea:e4:45:00:dc:59:5e:58:
48:ff:20:30
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUQjOQduGNuDsh3LRfX5tjquJgJNYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjgzMmIxMDczNTVkYTI3NjcxZDJiNTMyMmVkZDQxMjEy
ZmM2YjgyMmIwYjAxZGExZmQwHhcNMjUwMjE2MjEyMzI2WhcNMjYwMjE1MjEyODI2
WjAzMTEwLwYDVQQDEyhFNDUzNkExQTE4NkY1NzdDMUJDNEIxRUYwODJBMDZEQUM0
NjdCMTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt7IMkBVooj0
uj+adTPILVab84ndrH9DKriIhVno3jTtVGDRW2c1MZKCQaXw+T5dahUcVY/l6sdr
gpnkMRMSIBEDOilLsLPulvQ8HsMNz3d39CIVAsgt+j64FHMVDAkl3PFxqz+3JmXH
J0dqG7byW9e/IUaOFbdsThG1bWb6gtSWAqJtWlWu8XbbDnKJs1WWijwwds2pWiNc
q/fa4Yqf+rU++etoXHLilfd8Kh3acU0y/wIOp2MQuFjCwCY586rr6q16N+4aTFuN
aGGt22dn6ZElczCnvo0V6emeN5/7PDYIs6c6H2kMga/clGHnQ96eP7kNDy9JoqDl
xsuh/zjYKQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFORTahoYb1d8G8Sx7wgqBtrE
Z7FyMB8GA1UdIwQYMBaAFLzeKwASGPzMBEZ0RQLsb6XJhfRrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGNlOWRlZmUwMThlMzJkNzc3ZmIxYjYzLzAv
QkNERTJCMDAxMjE4RkNDQzA0NDY3NDQ1MDJFQzZGQTVDOTg1RjQ2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzUyYTI0YmZlLTc2OTUtNDU2Yy04YjNkLTM0OWIzN2IwNDdkMy9mODMy
YjEwNzM1NWRhMjc2NzFkMmI1MzIyZWRkNDEyMTJmYzZiODIyYjBiMDFkYTFmZC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThjZTlkZWZlMDE4ZTMy
ZDc3N2ZiMWI2My8wLzMxMzAzNDJlMzIzNTM0MmUzMTM5MzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzkzMTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABo/sIwDQYJKoZIhvcN
AQELBQADggEBAB+wAAyGGjCS7DZqsB1Y4YiFNJRIGv1QAwf3Me+xxuCj0eMDgJNV
ezwtoH5koi8XQqmPZ0XfpnjTE5V2jepD2cgAReIBkepi+75EV0vKUhR3iAT9dIdZ
20Isaw1dZ6MA8XOvaFYw3fjzSu/iYeJqzhzJ3mp8Qhw6Q+NBLHR70FexaAz+1AYZ
6vTCH7lGmkPfN25xU6N8GDU7ttmjVeHuqGs8dQD8Ec9fUePFjxM+K9e/p21moI3N
SSgUqtmHgq2f4zvUydDmEHgrjnF1WOV5oFe9Fr0FgAFF0aT3cF8UoQsl+e1xfFij
ycUlOH2AWtT1Kgs0I77q5EUA3FleWEj/IDA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:40 2025 by rpki-client