Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa
File: AS400810.roa (raw, json)
Hash identifier: HDX17L2rgWQLkqbWMgHo1dOkMEhHXGX5wG1tfg5qErA=
Subject key identifier: 0D:7E:C0:96:91:73:A0:FC:26:46:14:18:60:33:D6:6B:E0:6B:24:88
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 0D528F783BD4028EC93C0FDDAD7610273AB0E1CE
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa
Signing time: Sat 12 Apr 2025 15:26:53 +0000
ROA not before: Sat 12 Apr 2025 15:21:53 +0000
ROA not after: Sat 11 Apr 2026 15:26:53 +0000
asID: 400810
IP address blocks: 98.142.246.0/24 maxlen: 24
104.234.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:52:8f:78:3b:d4:02:8e:c9:3c:0f:dd:ad:76:10:27:3a:b0:e1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 12 15:21:53 2025 GMT
Not After : Apr 11 15:26:53 2026 GMT
Subject: CN=0D7EC0969173A0FC264614186033D66BE06B2488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e9:53:f8:47:35:66:14:d7:20:a8:23:4f:3f:
a6:b5:99:c2:4e:d1:90:74:58:e4:88:26:bd:f4:6f:
f8:8a:ee:bb:86:9c:47:4f:48:90:da:ac:2a:7b:63:
62:af:c1:38:68:22:20:13:3a:fc:c2:ae:4e:8f:b1:
39:c4:50:68:32:52:f1:d3:ec:df:5b:c6:e6:08:6e:
e7:03:fc:c9:ec:9b:8c:8d:b2:85:57:bf:67:6d:a3:
f3:ae:af:e7:12:c1:c5:77:13:96:56:95:08:1e:e3:
00:24:0b:27:5b:1c:3c:18:e4:67:85:db:78:7a:9b:
45:8f:93:20:ba:23:41:ff:f6:ce:99:6d:02:75:2b:
7c:6f:b6:bc:52:e1:9c:ff:7b:f7:eb:90:ea:99:ee:
00:79:ea:b9:f7:fc:5d:a5:76:1d:b3:23:85:7e:15:
14:13:54:c9:26:a7:fa:f9:d6:01:50:ea:6f:db:26:
77:6e:36:6d:e5:70:f9:33:8f:a8:13:c5:95:fd:fd:
b5:af:05:66:dc:ad:09:43:57:77:98:49:d0:6d:6a:
12:43:17:6c:2a:18:d0:9d:83:5d:cb:a5:35:e4:e4:
99:8c:6b:7f:f3:74:4d:82:69:69:40:dd:9d:50:26:
c4:f3:0c:be:af:19:25:2c:c1:1b:a4:e5:2b:9d:15:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7E:C0:96:91:73:A0:FC:26:46:14:18:60:33:D6:6B:E0:6B:24:88
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.246.0/24
104.234.107.0/24
Signature Algorithm: sha256WithRSAEncryption
27:54:f6:52:b6:96:d0:be:cc:4c:2d:d5:bc:eb:16:7b:d8:e5:
05:cf:26:e5:c5:60:90:5e:7d:70:bd:30:05:7d:f1:4c:9e:12:
7d:43:c7:ce:ed:74:27:56:20:f8:ec:5a:da:22:70:f8:52:7b:
91:04:49:d1:f0:5c:1c:10:d2:8f:c3:d1:5c:6d:5c:24:71:47:
15:22:14:a8:9d:3a:b9:92:0b:5e:7e:93:42:ea:45:04:37:ec:
c1:b6:ee:a9:40:9b:76:b9:66:01:bb:68:2c:14:0b:ae:72:22:
45:7a:02:6c:a3:1f:1c:bb:50:42:4a:86:cd:79:2d:c8:fc:b7:
ab:76:16:9a:02:92:10:8c:2e:d5:ea:e0:c9:bb:77:04:26:9f:
fe:9d:45:46:72:a2:10:53:99:0b:42:e1:1c:5d:69:7d:26:1c:
d7:f5:1b:d7:81:70:f6:b8:ad:b2:85:d6:f4:8a:ad:15:59:a5:
8a:f3:a6:53:d4:8b:f3:c9:cf:19:af:95:1b:52:89:16:51:84:
43:b6:fb:9b:8e:45:fa:9a:f0:16:34:ab:9e:62:b6:84:4e:54:
5a:1e:e2:03:12:dd:e0:5e:db:90:63:ca:85:ba:64:b4:62:0b:
57:3b:5b:4b:29:4d:17:8a:5a:d5:da:6f:12:bb:f2:e7:41:b3:
a3:67:73:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net