Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25369.roa
File: AS25369.roa (raw, json)
Hash identifier: 1CVcX+aMDKJxQ0Cz86erTIBPvWaEJhS2JjTrnoWocg0=
Subject key identifier: 84:5D:13:ED:72:BB:D3:A6:F3:03:DA:26:87:B9:32:A1:B4:AB:5C:07
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 2E86AFB2D6901B0DE3EF22AC5C45A2535F8FB9C4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25369.roa
Signing time: Fri 15 Nov 2024 23:49:21 +0000
ROA not before: Fri 15 Nov 2024 23:44:21 +0000
ROA not after: Fri 14 Nov 2025 23:49:21 +0000
asID: 25369
IP address blocks: 104.234.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:86:af:b2:d6:90:1b:0d:e3:ef:22:ac:5c:45:a2:53:5f:8f:b9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Nov 15 23:44:21 2024 GMT
Not After : Nov 14 23:49:21 2025 GMT
Subject: CN=845D13ED72BBD3A6F303DA2687B932A1B4AB5C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:ff:69:96:71:d7:c8:4f:47:88:8e:6e:47:
c2:0b:77:95:b5:c8:40:e1:c2:ec:7f:5d:b1:0d:0f:
e4:ca:80:26:dd:d6:db:77:f9:30:55:d5:ac:0f:d5:
33:35:90:b0:73:ea:9e:a5:83:84:9d:69:76:63:dc:
12:09:4c:f5:68:67:8f:4f:b2:96:af:ef:61:28:38:
62:81:46:f1:79:44:0f:7b:54:27:ea:41:61:be:af:
86:3f:9e:7f:7a:ee:d3:c5:9e:d7:0e:1f:2b:6e:1e:
98:4a:15:48:13:41:a3:ad:d0:7f:a8:f0:9f:b2:fc:
3a:65:a7:4f:a4:75:b3:2d:79:df:9e:46:f6:9f:e5:
c3:d0:94:c7:c7:be:52:2f:a0:5c:88:6b:b8:47:52:
f2:d4:50:49:ce:ff:56:36:96:26:a3:71:08:cd:9a:
22:bd:c6:1c:41:0f:ad:6b:56:d6:ec:a9:7f:42:c1:
75:4b:61:57:b2:44:1a:94:48:45:b6:34:0d:92:21:
aa:cb:05:35:50:80:63:8d:0c:ec:ed:57:5b:7a:fe:
99:82:3f:f4:6c:b8:73:9f:9a:51:be:2b:55:f9:44:
40:ec:a1:e4:9d:9f:bd:9a:9f:c9:44:96:3f:fa:c0:
7a:99:18:d1:ef:b9:04:c2:71:39:43:60:53:f1:07:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5D:13:ED:72:BB:D3:A6:F3:03:DA:26:87:B9:32:A1:B4:AB:5C:07
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:aa:aa:64:85:e0:8c:46:73:ed:96:7c:a9:f2:9c:ba:e3:86:
05:50:11:80:de:bd:d6:c0:bb:b3:c7:2f:0d:94:de:c7:1a:de:
f5:e7:b8:b8:b9:ab:7f:5f:c8:a9:69:4f:72:ba:f4:b4:87:ed:
76:33:b7:0d:4f:0f:9b:a6:58:88:92:e2:cb:5c:a6:bf:e6:61:
fd:32:ea:41:a9:99:ba:98:89:8b:73:5e:2a:8b:60:fd:37:7a:
5a:12:93:47:3f:a7:30:2d:93:38:de:6e:46:cb:a2:32:f0:47:
26:3b:9f:54:06:59:02:a8:52:42:c6:9e:70:d4:de:d9:bb:fd:
b8:5c:3f:35:ac:fa:c9:32:f2:66:f4:22:04:8b:25:db:4b:ea:
1a:71:96:2a:ee:4a:a5:b2:b5:1a:33:ff:47:b0:6c:21:22:2d:
37:b4:bd:eb:53:9a:09:28:1b:3b:d1:28:89:12:fd:64:d5:62:
eb:43:4b:15:67:43:3c:4b:55:6d:b5:39:72:61:95:4c:3f:3a:
62:1c:c1:06:0e:40:a2:06:f2:61:47:e3:96:a5:e1:75:3d:93:
f1:bb:51:9b:1f:2a:ac:2d:37:f2:bf:dd:63:05:9d:2a:0e:20:
4b:67:8d:dd:72:ed:a7:d2:c2:d3:c9:ab:d3:53:74:30:ab:e9:
c8:f5:b4:07
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIULoavstaQGw3j7yKsXEWiU1+PucQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMTE1MjM0NDIxWhcNMjUxMTE0MjM0OTIx
WjAzMTEwLwYDVQQDEyg4NDVEMTNFRDcyQkJEM0E2RjMwM0RBMjY4N0I5MzJBMUI0
QUI1QzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk//aZZx18hP
R4iObkfCC3eVtchA4cLsf12xDQ/kyoAm3dbbd/kwVdWsD9UzNZCwc+qepYOEnWl2
Y9wSCUz1aGePT7KWr+9hKDhigUbxeUQPe1Qn6kFhvq+GP55/eu7TxZ7XDh8rbh6Y
ShVIE0GjrdB/qPCfsvw6ZadPpHWzLXnfnkb2n+XD0JTHx75SL6BciGu4R1Ly1FBJ
zv9WNpYmo3EIzZoivcYcQQ+ta1bW7Kl/QsF1S2FXskQalEhFtjQNkiGqywU1UIBj
jQzs7Vdbev6Zgj/0bLhzn5pRvitV+URA7KHknZ+9mp/JRJY/+sB6mRjR77kEwnE5
Q2BT8Qd8ewIDAQABo4ICfjCCAnowHQYDVR0OBBYEFIRdE+1yu9Om8wPaJoe5MqG0
q1wHMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzI1MzY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOo4MA0GCSqGSIb3DQEBCwUAA4IB
AQCyqqpkheCMRnPtlnyp8py644YFUBGA3r3WwLuzxy8NlN7HGt7157i4uat/X8ip
aU9yuvS0h+12M7cNTw+bpliIkuLLXKa/5mH9MupBqZm6mImLc14qi2D9N3paEpNH
P6cwLZM43m5Gy6Iy8EcmO59UBlkCqFJCxp5w1N7Zu/24XD81rPrJMvJm9CIEiyXb
S+oacZYq7kqlsrUaM/9HsGwhIi03tL3rU5oJKBs70SiJEv1k1WLrQ0sVZ0M8S1Vt
tTlyYZVMPzpiHMEGDkCiBvJhR+OWpeF1PZPxu1GbHyqsLTfyv91jBZ0qDiBLZ43d
cu2n0sLTyavTU3Qwq+nI9bQH
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net