Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32342d3234203d3e203136323736.roa
File: 3130342e3235342e3230382e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: +OxPRvNOwsjV7E3RMFZTITopL48OFYYrei+ji37HSSc=
Subject key identifier: 90:C9:81:C7:65:5D:D6:CB:85:16:2D:09:CA:88:AA:62:7C:23:D1:54
Certificate issuer: /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial: 1E10610771C895837725AE42FC624781508E3617
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32342d3234203d3e203136323736.roa
Signing time: Sun 23 Feb 2025 10:27:59 +0000
ROA not before: Sun 23 Feb 2025 10:22:59 +0000
ROA not after: Sun 22 Feb 2026 10:27:59 +0000
asID: 16276
IP address blocks: 104.254.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:10:61:07:71:c8:95:83:77:25:ae:42:fc:62:47:81:50:8e:36:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Validity
Not Before: Feb 23 10:22:59 2025 GMT
Not After : Feb 22 10:27:59 2026 GMT
Subject: CN=90C981C7655DD6CB85162D09CA88AA627C23D154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:2a:13:9e:0c:7c:8e:32:3a:2a:05:c2:e1:
af:ee:c5:44:18:54:35:ca:be:d1:d7:36:5f:e1:7c:
92:b3:90:8f:d9:b6:5b:06:7d:11:1a:a3:3e:19:e2:
73:00:8c:57:44:aa:b7:db:ef:fb:e7:75:48:60:1e:
16:d6:b7:b5:96:00:80:50:fb:56:d6:ac:39:07:56:
a6:f0:b3:61:ce:3e:9f:2b:1e:1d:d5:68:40:a2:b4:
4f:5b:26:ef:88:3a:b0:7a:50:48:ee:1c:9c:fc:16:
2b:29:c4:75:7a:b0:8d:2d:ab:ba:78:81:a8:59:bc:
df:0a:5b:8d:aa:40:9b:db:42:18:77:76:ff:97:68:
77:2d:80:95:07:ea:fa:1a:db:13:40:e6:52:b1:b9:
e0:9e:f6:a3:1c:37:58:49:ed:ff:6e:46:e9:86:77:
21:93:75:21:f6:e4:b3:1b:9b:62:53:a8:ff:b4:a9:
e8:7c:30:8a:b6:6d:4f:98:6f:0f:db:74:a8:22:e7:
2f:c4:3d:d8:a3:63:fb:c0:f0:9f:4a:a7:43:62:17:
26:83:e2:ed:c2:c3:5c:5f:ed:91:57:a2:14:e2:be:
5f:ad:a0:cd:95:f5:69:93:38:2c:a3:ca:8d:83:1a:
25:8c:14:75:ef:dc:a5:d0:99:bf:ce:55:9a:bc:eb:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C9:81:C7:65:5D:D6:CB:85:16:2D:09:CA:88:AA:62:7C:23:D1:54
X509v3 Authority Key Identifier:
keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.254.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b5:8e:19:c9:58:a0:8a:6d:96:81:4d:89:50:7b:07:0c:8d:
6c:74:fb:be:a1:f1:6e:a1:e3:9c:e2:9c:49:3c:b2:c3:16:a9:
c0:42:44:f0:cb:6b:e9:1c:f9:67:ae:c5:12:d7:d1:05:03:d8:
75:37:16:35:9e:ce:70:25:e4:b5:37:a5:73:25:75:de:30:65:
3b:65:4f:c8:90:ef:a6:74:36:71:b7:ad:a9:3e:db:b2:d6:fd:
0d:69:ef:c9:c4:d9:2e:02:e6:0b:11:3f:dd:73:ef:27:d3:8c:
da:8e:58:8c:e6:c7:cc:a6:35:a9:d5:4f:26:a8:b2:18:fd:dc:
98:91:4e:12:02:c5:ca:09:c3:30:1d:61:73:b5:1d:56:85:d7:
68:3a:5e:9f:ec:ed:7e:1a:30:f3:7a:d9:d3:81:f5:22:62:c3:
58:10:29:f0:91:20:bb:99:58:d0:10:4f:b2:29:f7:de:74:68:
f8:f3:f4:bb:57:fd:b5:af:df:8d:5e:af:3f:29:59:68:d4:93:
46:2a:93:a5:15:66:da:71:02:0b:91:3c:92:9a:83:71:fc:f1:
c0:94:fe:b8:d4:1e:af:d2:6e:fa:dc:e3:22:b7:bc:99:e3:60:
9a:82:83:4f:5e:9e:51:79:18:65:d5:b8:28:ac:e2:57:aa:97:
f4:0c:1c:90
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUHhBhB3HIlYN3Ja5C/GJHgVCONhcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWFjZTI4MGNlZmFjOWY1ZmFmNzRmMGUxMTQ3YTRhZjUy
OTkwNjJmNzRjZTA1MjFiNjIwHhcNMjUwMjIzMTAyMjU5WhcNMjYwMjIyMTAyNzU5
WjAzMTEwLwYDVQQDEyg5MEM5ODFDNzY1NURENkNCODUxNjJEMDlDQTg4QUE2MjdD
MjNEMTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR4qE54MfI4y
OioFwuGv7sVEGFQ1yr7R1zZf4XySs5CP2bZbBn0RGqM+GeJzAIxXRKq32+/753VI
YB4W1re1lgCAUPtW1qw5B1am8LNhzj6fKx4d1WhAorRPWybviDqwelBI7hyc/BYr
KcR1erCNLau6eIGoWbzfCluNqkCb20IYd3b/l2h3LYCVB+r6GtsTQOZSsbngnvaj
HDdYSe3/bkbphnchk3Uh9uSzG5tiU6j/tKnofDCKtm1PmG8P23SoIucvxD3Yo2P7
wPCfSqdDYhcmg+LtwsNcX+2RV6IU4r5fraDNlfVpkzgso8qNgxoljBR179yl0Jm/
zlWavOuKpQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJDJgcdlXdbLhRYtCcqIqmJ8
I9FUMB8GA1UdIwQYMBaAFKVf+gNccwyHmh7yY3TjYAJNbR8YMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODhlOGI5MDcwMTg5Njg5NzJlMjE2ZGU3LzAv
QTU1RkZBMDM1QzczMEM4NzlBMUVGMjYzNzRFMzYwMDI0RDZEMUYxOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzlhNjliOGNlLTI0ZGEtNDFiMy1hMDhlLTQ4ZDY0Yzk2NzM2MC9lYWNl
MjgwY2VmYWM5ZjVmYWY3NGYwZTExNDdhNGFmNTI5OTA2MmY3NGNlMDUyMWI2Mi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg4ZThiOTA3MDE4OTY4
OTcyZTIxNmRlNy8wLzMxMzAzNDJlMzIzNTM0MmUzMjMwMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM2MzIzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP7QMA0GCSqGSIb3DQEB
CwUAA4IBAQCOtY4ZyVigim2WgU2JUHsHDI1sdPu+ofFuoeOc4pxJPLLDFqnAQkTw
y2vpHPlnrsUS19EFA9h1NxY1ns5wJeS1N6VzJXXeMGU7ZU/IkO+mdDZxt62pPtuy
1v0Nae/JxNkuAuYLET/dc+8n04zajliM5sfMpjWp1U8mqLIY/dyYkU4SAsXKCcMw
HWFztR1WhddoOl6f7O1+GjDzetnTgfUiYsNYECnwkSC7mVjQEE+yKffedGj48/S7
V/21r9+NXq8/KVlo1JNGKpOlFWbacQILkTySmoNx/PHAlP641B6v0m763OMit7yZ
42CagoNPXp5ReRhl1bgorOJXqpf0DByQ
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:15 2025 by rpki-client