Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS142111.roa
File: AS142111.roa (raw, json)
Hash identifier: 9wbI55VHrp4RvVmcAV7JZlPvalOCH/A2vwUvBV9HBYY=
Subject key identifier: C7:93:C6:25:41:C7:A6:EF:34:D8:3A:E4:D1:80:BE:49:1D:81:BB:E9
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 3907EA97BA0AE1BE6627C97E556A2A38099C1B85
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS142111.roa
Signing time: Thu 06 Mar 2025 00:28:26 +0000
ROA not before: Thu 06 Mar 2025 00:23:26 +0000
ROA not after: Thu 05 Mar 2026 00:28:26 +0000
asID: 142111
IP address blocks: 104.234.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:07:ea:97:ba:0a:e1:be:66:27:c9:7e:55:6a:2a:38:09:9c:1b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 6 00:23:26 2025 GMT
Not After : Mar 5 00:28:26 2026 GMT
Subject: CN=C793C62541C7A6EF34D83AE4D180BE491D81BBE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:90:fb:83:7a:09:3c:8f:2e:05:2b:86:05:
ac:cc:67:d3:39:22:3f:2d:5f:31:5b:e9:74:61:00:
f5:f0:24:4b:42:fc:36:24:74:98:2d:d8:3b:41:c7:
1a:5b:d1:3f:4a:1d:42:cd:09:fa:fa:1f:28:65:0e:
bc:0d:66:bf:52:e9:ed:b0:cb:ec:8a:37:24:64:f6:
8b:ee:ff:67:ea:70:e1:0b:ec:ed:24:44:5f:53:f7:
ae:59:b5:72:a3:be:b5:10:73:ab:70:be:a0:79:89:
38:7c:ce:e7:bd:af:cd:40:64:77:cf:5b:c3:e5:78:
3d:0c:c2:d8:7c:88:ae:2d:e6:19:b5:e8:e8:aa:60:
7d:b3:79:dc:95:79:ef:94:a2:19:ed:7e:0c:a7:e0:
4f:55:7e:b5:e6:f7:31:8a:e9:cc:6d:45:79:50:23:
00:e3:78:f9:d0:18:bb:d0:3b:01:e3:4b:9a:47:8e:
60:49:dc:d2:60:1c:b7:8c:4e:af:b0:44:68:97:46:
7f:b7:71:d1:b1:dc:e9:b3:f2:f5:e5:64:69:7d:52:
12:7a:5b:f4:19:aa:12:71:68:3e:11:77:96:7f:7f:
b7:c5:6f:15:12:49:7f:93:a9:2d:ff:1b:ac:60:93:
9e:ba:34:bd:0b:99:2d:d8:86:14:42:6f:a4:54:11:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:93:C6:25:41:C7:A6:EF:34:D8:3A:E4:D1:80:BE:49:1D:81:BB:E9
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS142111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.69.0/24
Signature Algorithm: sha256WithRSAEncryption
08:77:ca:f1:e5:d8:a2:8c:f9:10:1b:ef:c9:ff:a8:1d:97:4b:
11:7c:34:5c:aa:e7:82:ad:ce:89:27:3c:d8:2f:f7:fd:84:39:
ce:d7:e6:73:00:22:95:66:eb:6c:03:73:04:72:f5:75:b6:bf:
86:fb:bb:38:20:95:e6:19:e0:73:05:70:d9:c5:bf:1a:22:f3:
9b:52:4a:3e:8a:87:44:1d:4f:79:e2:dc:18:4e:97:2a:6c:ba:
3e:04:a0:61:d9:63:7e:d4:a4:a1:71:91:05:99:16:3a:68:c1:
9b:04:b1:e1:c4:59:81:df:22:6e:1a:73:29:a8:f0:22:bf:e4:
33:a7:e9:fd:2a:c5:46:ad:6c:f1:56:9f:6e:82:0d:10:ca:5b:
31:aa:7f:09:92:79:96:19:57:18:b5:87:e7:51:4f:47:60:e4:
e3:6d:e6:0d:d1:0f:a1:7d:ca:a1:c3:f5:ed:cf:fa:b6:24:d2:
8e:0d:a4:e1:18:c8:03:ee:bd:76:1b:f5:e1:73:9c:8b:dd:0a:
21:3f:db:78:7b:17:85:8a:1a:7e:f6:3c:72:af:a0:7c:88:5c:
b0:ae:9c:13:da:f6:33:ea:e6:63:29:06:ea:39:70:93:c8:87:
a7:ff:35:ed:7b:3d:2d:4c:48:75:91:87:8b:fb:40:5a:d7:a4:
29:e3:15:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net