Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: 8FQ2NSA2GeYoYNx2dFEx0Y0Xhm22tjCdMIlvyVuJo+M=
Subject key identifier: 90:A2:FE:37:CA:39:4A:E9:F5:8B:1A:66:6E:A0:AF:2B:7F:98:6F:1E
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 01007277CF27008597DC1EC3B0EA335C0B617DFE
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa
Signing time: Mon 21 Oct 2024 07:38:09 +0000
ROA not before: Mon 21 Oct 2024 07:33:09 +0000
ROA not after: Mon 20 Oct 2025 07:38:09 +0000
asID: 214025
IP address blocks: 104.234.107.0/24 maxlen: 24
104.234.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:00:72:77:cf:27:00:85:97:dc:1e:c3:b0:ea:33:5c:0b:61:7d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Oct 21 07:33:09 2024 GMT
Not After : Oct 20 07:38:09 2025 GMT
Subject: CN=90A2FE37CA394AE9F58B1A666EA0AF2B7F986F1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:92:cd:4d:04:da:d7:1a:22:49:b8:5d:b9:
1c:fd:cf:ae:5f:f3:22:72:92:8f:67:c0:0c:2b:ee:
99:5f:b2:ea:31:91:b8:b9:5f:bc:f5:23:a4:81:1b:
30:0d:cc:eb:bc:b7:2d:79:e4:7c:98:d5:12:43:b9:
b8:0e:63:c4:24:14:4f:34:5d:77:6f:ed:64:79:a0:
1a:30:e3:27:8d:02:80:46:bb:1f:e6:5b:89:35:68:
11:e6:5b:e9:35:7d:8f:69:46:75:d6:81:19:db:0a:
e9:b6:3f:aa:e7:e0:d9:12:68:d2:a6:cd:30:e8:99:
06:17:06:9a:b9:70:69:42:08:0c:f5:f8:2f:83:1a:
34:e2:3d:27:77:e3:06:db:6d:51:0a:c4:58:e7:e7:
45:83:c1:00:ed:91:a3:1f:2c:86:20:0d:0f:c4:f6:
0e:ca:3a:90:bc:c2:2a:3f:c0:c4:d4:57:a7:40:84:
9c:51:df:8c:65:de:fb:61:46:52:0c:1a:98:01:a3:
15:59:6a:f6:8a:96:f2:af:80:ea:41:0b:8b:46:76:
2a:67:3c:22:2f:c4:c3:94:11:ce:48:d3:a3:e9:c8:
1f:2d:20:10:bf:fa:09:42:6f:7c:f8:a0:61:52:90:
80:46:33:d5:6e:43:e7:3f:c7:d8:d9:67:72:e5:fd:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A2:FE:37:CA:39:4A:E9:F5:8B:1A:66:6E:A0:AF:2B:7F:98:6F:1E
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.107.0/24
104.234.157.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:79:96:0a:c6:d7:a2:2c:43:1c:09:a5:1e:b7:74:b2:39:ce:
ac:45:2a:05:be:8e:b6:07:64:60:fd:48:a3:e3:53:fc:9e:00:
1d:cd:1c:70:62:4b:d8:12:d4:35:83:a6:3e:6d:8c:83:af:ad:
78:09:46:75:2d:b3:7e:d6:d7:14:cf:7d:1c:7a:76:2a:d7:1d:
09:68:c0:23:00:1e:b7:04:2b:27:31:bc:e3:fd:13:66:bf:5c:
9b:c5:a4:f5:c9:1d:56:97:01:82:7a:a2:08:ee:58:ec:9a:06:
d1:dc:66:11:16:b1:a9:df:13:48:ec:8c:7a:61:c8:ad:b5:01:
ba:a6:9b:a7:3f:89:10:8b:c0:10:a5:0a:ef:a5:78:0e:64:49:
d2:8c:8e:65:e2:de:2f:53:39:6c:c6:fd:2e:8c:d7:a0:e7:25:
e7:21:60:06:bc:86:4e:33:91:48:c7:f0:c1:65:6c:4f:c2:76:
bc:44:f3:49:90:6d:e5:21:13:08:11:4e:a1:e7:a3:b2:48:a2:
78:a1:41:06:7c:fd:54:53:36:1b:49:79:48:79:6a:e1:df:09:
95:7e:96:fd:e5:ed:39:e5:b7:f8:46:27:19:00:53:a4:29:d1:
aa:74:43:4c:e6:34:5c:d2:67:e1:6e:10:a2:0f:6c:89:11:2b:
e9:02:8f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 19:01:40 2024 by rpki-client on console.sobornost.net