Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa
File: AS400529.roa (raw, json)
Hash identifier: W0mvMbnE681tgnADQEbk4lDrB7Tdurj/hHSsFTaRSek=
Subject key identifier: E6:5C:90:CF:0C:D0:A2:38:25:FD:24:CA:DB:AA:4B:28:88:BC:9F:FA
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 3BC34DC3121B1CA0E802FF3F1827F34CFC8A334D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa
Signing time: Sat 12 Apr 2025 15:28:18 +0000
ROA not before: Sat 12 Apr 2025 15:23:18 +0000
ROA not after: Sat 11 Apr 2026 15:28:18 +0000
asID: 400529
IP address blocks: 104.234.107.0/24 maxlen: 24
104.234.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c3:4d:c3:12:1b:1c:a0:e8:02:ff:3f:18:27:f3:4c:fc:8a:33:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 12 15:23:18 2025 GMT
Not After : Apr 11 15:28:18 2026 GMT
Subject: CN=E65C90CF0CD0A23825FD24CADBAA4B2888BC9FFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:41:91:4b:23:41:5f:4e:40:43:c1:0e:2a:
ee:bd:40:03:fe:0c:6c:50:f6:1a:92:d0:e8:e6:fd:
71:ee:9d:2b:df:f4:5f:8a:e6:71:ac:5f:13:6d:c4:
e4:ae:8e:7a:65:9e:aa:2e:ff:57:ef:e8:82:10:b0:
45:3c:c2:2b:34:3c:12:f0:5b:60:cd:ef:cb:6c:2d:
40:06:72:de:02:79:d4:a8:44:1c:69:a9:f4:eb:07:
fd:da:8e:59:17:bd:e7:2b:97:ac:66:0b:be:49:96:
e4:cf:8d:14:55:2f:24:27:81:c6:57:c3:93:34:ab:
52:a9:ee:17:e1:0d:f8:68:e1:e8:ba:5e:31:6b:4b:
fb:53:63:91:e2:fc:64:35:0a:8d:a7:ee:6f:69:5b:
ff:00:00:f1:23:c6:07:db:91:9c:ca:12:38:96:8d:
57:b4:68:93:ca:a5:0a:8a:d8:36:0f:43:4d:bb:de:
20:0b:7d:3a:85:4a:b0:69:02:c9:a9:56:4a:7f:d9:
6c:56:30:ba:c2:34:c6:0d:76:fd:52:65:12:08:32:
42:b1:d8:73:eb:80:61:0f:c8:84:80:08:da:33:23:
bf:38:3f:85:f1:a6:a8:4e:56:cd:0a:81:b3:03:6f:
ed:bd:e7:eb:8a:55:a7:52:ca:0b:ea:bb:32:de:aa:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5C:90:CF:0C:D0:A2:38:25:FD:24:CA:DB:AA:4B:28:88:BC:9F:FA
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.107.0/24
104.234.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9a:2f:6b:90:1f:f4:93:d5:16:a2:d7:e7:5e:7c:d8:a9:fd:
73:9c:fd:09:e5:ae:7d:25:5f:71:e9:80:92:75:90:b3:a6:1b:
83:29:60:c8:f9:4a:09:b1:f9:d5:51:ad:f9:1b:4c:6d:f2:c0:
13:c7:36:ad:22:1a:29:9e:87:23:9d:71:4a:92:f0:34:39:48:
c8:61:d8:07:74:b2:fa:0d:30:7d:ca:4e:4c:7e:23:50:ff:dd:
c1:a7:cb:9e:b3:67:6e:89:a1:93:e6:44:6b:34:f4:6d:44:14:
58:ed:bb:5b:2c:8c:ab:88:1f:dc:ca:84:4e:35:df:8d:96:d0:
72:f2:16:88:df:d6:ab:3e:28:8b:11:d4:b5:b5:5c:66:f3:f9:
41:f0:39:31:d7:8b:ef:7b:91:92:fc:d7:04:52:4a:40:13:64:
02:d8:21:08:e5:9c:f2:f1:67:ad:5a:96:ac:83:ba:e8:17:a7:
33:e5:ce:f4:52:a2:67:3d:f1:bb:d7:c0:e1:72:13:08:9f:04:
6b:80:bb:f5:64:7f:0e:e5:07:a0:6e:db:64:ee:39:f5:43:fc:
67:67:95:e1:56:75:5b:3c:12:c6:d5:5f:a1:17:89:7c:a7:6d:
56:8c:b5:8e:eb:39:3b:46:cc:26:56:b8:4a:fb:8c:ae:eb:df:
ad:2c:6d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net