Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152672.roa
File: AS152672.roa (raw, json)
Hash identifier: C5hF5gF6p8uinUDySLADz/ZLOzwQv51ROt3vTv0fbdo=
Subject key identifier: F8:E5:84:1D:2C:EC:C4:61:E4:6A:A6:A9:6A:37:AD:21:57:A6:43:5E
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 728630D1581AF33F9D58B6D700251856643087B2
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152672.roa
Signing time: Sun 13 Apr 2025 04:28:29 +0000
ROA not before: Sun 13 Apr 2025 04:23:29 +0000
ROA not after: Sun 12 Apr 2026 04:28:29 +0000
asID: 152672
IP address blocks: 104.234.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:86:30:d1:58:1a:f3:3f:9d:58:b6:d7:00:25:18:56:64:30:87:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 13 04:23:29 2025 GMT
Not After : Apr 12 04:28:29 2026 GMT
Subject: CN=F8E5841D2CECC461E46AA6A96A37AD2157A6435E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:6d:2d:63:de:9a:23:ca:ac:70:15:d7:06:
f9:4a:0a:4a:58:6f:d3:73:fd:55:b9:3f:87:e4:85:
7a:4a:0b:3d:8f:40:8e:b5:d7:a2:de:5e:09:a7:ad:
3f:30:0d:7e:ad:2c:30:08:d6:df:21:7f:b3:c7:0c:
33:ce:d9:0a:e6:95:2f:8c:80:ce:49:fd:ee:75:07:
a8:19:30:da:25:81:70:57:80:fb:42:50:ed:9c:71:
4a:9a:4f:ef:4b:52:68:d8:f3:62:d1:69:1a:d6:c8:
f8:b5:23:b3:4b:d5:40:76:62:dd:52:c9:7f:28:05:
46:c3:b0:52:dd:d4:73:9a:c8:72:76:85:84:01:80:
90:86:aa:f9:4e:b6:0c:77:ee:75:32:d9:17:24:f6:
26:eb:60:67:c9:3d:bf:f8:2b:4a:de:a5:79:74:53:
2a:0d:de:16:dd:79:2f:b7:0f:51:5a:be:9a:6b:84:
12:d4:57:c8:56:11:b3:74:cb:cd:31:24:7e:12:90:
80:d6:ff:83:43:3f:4d:e0:d7:d5:81:a7:11:9b:b5:
b4:ba:13:41:91:4c:be:5c:1c:88:95:8a:5f:e6:e9:
c5:5d:27:aa:27:c0:16:ec:7d:ad:ab:30:35:e9:1b:
1e:b0:51:21:4b:76:ce:93:64:69:76:dc:01:9d:10:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:84:1D:2C:EC:C4:61:E4:6A:A6:A9:6A:37:AD:21:57:A6:43:5E
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.69.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:32:25:20:ea:51:48:6e:03:42:33:ac:35:51:f3:c3:f0:ba:
4e:42:55:a1:b3:c0:4a:0c:17:c1:d9:35:ad:10:8b:a7:cd:09:
61:5f:d0:d2:12:19:b6:01:26:99:7a:44:28:e3:54:44:f3:be:
77:cd:20:17:7f:12:17:32:21:b6:d9:91:70:7b:b0:23:dd:3b:
b5:92:b7:01:b1:c5:5a:b8:94:da:ad:68:43:2f:1c:53:16:d6:
e4:c0:63:d2:e7:06:22:1a:f5:a1:10:bc:d1:4b:1a:cc:4d:de:
07:b6:f7:94:94:4b:98:db:c8:e1:04:cc:f7:ca:82:11:9f:f6:
4f:6e:51:1e:52:6b:6d:7f:d1:38:b8:b6:1f:5a:ed:93:02:aa:
95:e5:fb:91:48:48:60:68:2e:b2:b5:42:e9:0b:ae:69:7e:32:
b4:26:1b:7f:c7:29:58:e1:4b:f4:4b:8d:6f:76:fd:55:3e:2e:
8c:b0:9c:f2:b5:21:d4:5a:7f:9d:46:af:0f:69:b4:87:b3:da:
11:f7:61:81:62:d7:dd:68:96:f4:14:bf:d1:c4:c5:cc:a7:fb:
46:30:68:f8:b5:e0:97:0c:63:a9:af:63:41:fd:3e:59:58:4d:
59:82:00:20:24:b3:d6:de:88:d8:d8:36:7b:38:cd:ae:6e:5d:
8f:76:a5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net