Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200017.roa
File: AS200017.roa (raw, json)
Hash identifier: uLHCH7yYqP1ahNmZg2JTzDyS8c+NGMPvJbqygLOoiJA=
Subject key identifier: 04:66:16:00:23:F6:2F:F0:A3:DA:F5:23:86:FF:42:71:C6:46:D4:92
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 12DACD52CDD5CC34BF0B3F80ABA035C54B386322
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200017.roa
Signing time: Thu 30 May 2024 14:01:15 +0000
ROA not before: Thu 30 May 2024 13:56:15 +0000
ROA not after: Thu 29 May 2025 14:01:15 +0000
asID: 200017
IP address blocks: 98.142.248.0/24 maxlen: 24
104.234.71.0/24 maxlen: 24
104.234.111.0/24 maxlen: 24
104.234.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:da:cd:52:cd:d5:cc:34:bf:0b:3f:80:ab:a0:35:c5:4b:38:63:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: May 30 13:56:15 2024 GMT
Not After : May 29 14:01:15 2025 GMT
Subject: CN=0466160023F62FF0A3DAF52386FF4271C646D492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:43:8a:2c:79:73:5c:85:69:cd:1a:20:4b:
f4:08:dd:cc:db:85:81:d9:7b:05:57:38:3e:19:92:
6b:e2:67:99:a0:e6:8b:19:b4:39:ac:80:02:e7:e8:
6b:b5:c1:1b:a8:1c:ee:a0:42:dd:61:d6:0a:f2:90:
3a:bd:70:4c:bf:a4:b7:68:38:5d:67:ec:3d:db:d5:
c2:89:42:21:5a:13:6d:33:8f:13:33:31:aa:bb:ad:
eb:a8:62:71:61:f9:c3:d8:72:5f:6f:de:74:bc:ed:
8b:5d:cd:53:5b:18:89:57:35:14:7d:69:e1:87:fb:
60:2b:18:11:00:77:c5:d5:4b:13:2f:77:f7:bd:5b:
e5:0f:d2:65:be:d1:9e:a5:29:46:09:90:6e:47:e1:
b2:6e:86:37:eb:0f:bd:d2:36:c0:65:7d:18:bf:e1:
ac:ca:d4:8e:ba:41:97:54:4e:d2:32:fb:57:fc:6c:
59:f8:45:c8:a0:73:82:62:60:63:35:9c:32:e8:64:
4c:57:c4:e4:a0:74:cc:bf:67:d7:6b:7f:67:c3:0d:
4f:7a:68:df:48:9b:e1:90:6b:44:b5:2d:b7:93:85:
cd:3e:11:fb:1f:99:23:ca:8a:00:45:01:88:1c:3a:
b6:e0:eb:d7:3a:97:9a:9f:0d:5a:7d:44:d1:f9:36:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:66:16:00:23:F6:2F:F0:A3:DA:F5:23:86:FF:42:71:C6:46:D4:92
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200017.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.248.0/24
104.234.71.0/24
104.234.111.0/24
104.234.188.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0a:eb:d4:c2:05:e1:ba:26:0d:c2:56:6e:4c:ee:fe:ff:02:
10:1d:d5:8d:48:86:c6:03:f3:82:68:7d:c8:70:75:0f:d2:c5:
ee:23:a8:18:10:1e:4a:7d:a8:f2:3a:98:7e:c3:a9:58:31:b2:
43:53:24:40:eb:e0:da:de:ca:74:1d:42:7e:9a:00:2a:9d:a5:
0d:75:79:56:d3:7c:3a:db:fd:a0:2b:29:30:c9:06:dc:2c:e3:
bf:e5:98:c2:aa:44:18:80:de:b0:d0:d8:0b:67:4d:70:a2:2a:
f4:9a:c8:80:f9:e0:08:c3:71:57:ce:d3:84:fb:d7:63:6f:2d:
d6:cb:da:29:b1:e8:21:db:77:64:42:8b:e8:e4:1c:1d:0b:db:
75:07:88:e1:36:40:e2:4f:e8:d5:f7:4a:d8:b1:9f:35:db:48:
ce:ed:d2:e6:ea:f6:7c:1f:79:46:a5:b1:fb:d2:55:a0:ae:3f:
86:b9:c5:9a:2a:fb:65:08:22:39:20:30:0c:ea:f4:cc:e2:4f:
4f:4f:6a:dd:1d:c0:15:6d:af:c7:f0:1a:bb:b2:40:ee:73:97:
7b:25:43:91:da:c2:8e:c8:45:1c:c5:49:56:09:e6:de:47:e1:
bb:1f:91:dd:90:f2:01:a5:dc:2d:04:e8:de:52:44:82:21:e1:
cf:3c:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net