Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32342d3234203d3e20313332393738.roa
File: 3130342e3235342e3230382e302f32342d3234203d3e20313332393738.roa (raw, json)
Hash identifier: mbdxxE4g6MeArr2LGcdfMDaUvn2C1StpOrsE7LJmnGM=
Subject key identifier: A5:F7:2B:43:E8:3F:3A:99:05:3D:EA:B3:F2:E0:3D:27:26:75:B8:2D
Certificate issuer: /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial: 1707F4C0D6AC084A7379D5E8F866D1312556E934
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32342d3234203d3e20313332393738.roa
Signing time: Tue 25 Feb 2025 15:24:36 +0000
ROA not before: Tue 25 Feb 2025 15:19:36 +0000
ROA not after: Tue 24 Feb 2026 15:24:36 +0000
asID: 132978
IP address blocks: 104.254.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:07:f4:c0:d6:ac:08:4a:73:79:d5:e8:f8:66:d1:31:25:56:e9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Validity
Not Before: Feb 25 15:19:36 2025 GMT
Not After : Feb 24 15:24:36 2026 GMT
Subject: CN=A5F72B43E83F3A99053DEAB3F2E03D272675B82D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:f8:20:3c:8a:95:cc:8a:66:e0:e3:28:43:
14:24:e2:e6:7d:44:65:db:f8:e5:2a:83:7c:9d:70:
1c:9c:78:d5:e4:10:e4:ca:5c:20:c7:e5:f4:37:d6:
c6:9f:b7:16:09:9f:e4:e3:03:eb:86:82:29:a7:2b:
b7:ba:5e:82:fa:7a:fb:8c:70:de:27:5c:16:0d:5b:
e8:8e:63:1b:44:59:cb:6c:6b:d0:0d:34:f5:f7:cb:
c4:9d:ca:ec:20:a6:42:8f:2c:e7:d1:c1:63:27:e6:
c1:14:34:d0:45:92:fe:8b:c8:0c:94:a9:6b:3a:f5:
56:d6:1b:02:ef:4a:77:66:84:f5:d9:ab:ff:71:c5:
2c:8c:53:fa:b0:d2:f3:fb:80:5c:19:9a:f4:47:cf:
7e:b1:5f:c1:e7:fa:46:da:8a:77:1e:b6:fe:85:5d:
79:e9:d3:bc:f2:f2:3d:ab:cf:83:0a:20:e2:f4:80:
1a:55:4b:b8:4a:10:b2:6e:59:68:7e:a5:a1:03:4c:
4b:e0:87:28:72:2b:16:02:de:4f:2d:f9:07:3d:fe:
f5:f3:b5:9e:a0:f3:bf:24:e8:a2:4c:23:0b:17:87:
a5:b1:2c:d8:1b:dc:4c:55:6c:09:71:36:fb:df:1b:
b6:c5:7d:f0:58:bd:8e:95:15:53:21:a0:b8:8b:fb:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F7:2B:43:E8:3F:3A:99:05:3D:EA:B3:F2:E0:3D:27:26:75:B8:2D
X509v3 Authority Key Identifier:
keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32342d3234203d3e20313332393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.254.208.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a0:92:ac:cd:f9:2d:4e:5d:be:3b:14:3c:b4:2f:d3:1d:64:
d4:8e:d0:78:39:04:4e:18:6f:27:ea:91:01:e0:c4:c3:0d:b8:
f9:d7:ff:87:2d:47:f1:61:ff:15:55:f1:14:df:80:b8:24:9f:
e4:e9:0c:53:1d:54:6e:6b:55:b1:9c:a7:9d:06:df:e4:ae:41:
69:d3:20:55:00:55:fc:8d:3a:b4:bc:a6:da:49:b3:f3:84:d1:
ec:aa:6f:a4:88:6d:57:cf:13:05:c6:7c:25:75:5a:53:67:d6:
fd:9e:84:f8:86:a0:51:97:b5:5b:68:f1:85:71:02:65:1c:d6:
6c:a4:13:c8:0d:be:18:ad:98:46:e2:cb:a2:44:5d:8c:df:e8:
ca:9a:4e:dd:63:5e:8f:52:85:9c:71:89:e6:69:f8:bf:0d:12:
06:33:e8:94:46:c8:dd:d4:95:6e:02:7a:a1:01:40:86:31:23:
1e:5f:31:28:24:da:e1:5f:8b:5f:31:a1:ea:6e:5a:d7:df:b4:
3a:5e:c3:39:f2:2b:19:66:73:f5:76:e5:42:38:6f:e3:51:06:
70:90:ad:86:b3:58:81:32:bd:6b:55:05:32:67:2d:2b:a0:9a:
ed:c8:e6:ea:d7:39:8d:23:fa:d5:0a:8d:34:db:87:5d:d1:4d:
8d:ed:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:52:26 2025 by rpki-client