Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS137235.roa
File: AS137235.roa (raw, json)
Hash identifier: 8lqHAoJbypK50FUuKdvX+bg4w7/JzNdLlmQWCW0CDho=
Subject key identifier: 30:6F:06:1B:65:82:55:DF:2D:EA:F0:CC:C6:11:0C:2D:1E:DD:0E:5C
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 63147005C2C425B37DA7DDA978F1101BBE2C9135
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS137235.roa
Signing time: Fri 11 Apr 2025 10:18:33 +0000
ROA not before: Fri 11 Apr 2025 10:13:33 +0000
ROA not after: Fri 10 Apr 2026 10:18:33 +0000
asID: 137235
IP address blocks: 199.103.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:14:70:05:c2:c4:25:b3:7d:a7:dd:a9:78:f1:10:1b:be:2c:91:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Apr 11 10:13:33 2025 GMT
Not After : Apr 10 10:18:33 2026 GMT
Subject: CN=306F061B658255DF2DEAF0CCC6110C2D1EDD0E5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:9f:1a:52:5a:92:41:ce:06:9f:3d:bb:a0:
9f:4d:82:ef:eb:e1:f4:4a:b5:07:69:a8:2e:3a:2c:
a1:a9:b0:46:dd:8f:8b:57:ea:69:7e:fa:7b:16:41:
43:56:b9:cb:aa:33:27:9e:76:a7:82:5f:ce:36:1d:
52:6e:22:09:94:75:b6:4f:22:ac:7a:0f:13:48:74:
52:83:5c:e5:11:a7:ae:dd:23:ac:c5:68:d7:f7:13:
90:c3:ba:61:26:36:25:aa:26:b8:67:a6:dd:55:8a:
3d:e5:28:cf:4c:3e:d0:7c:81:81:60:95:62:36:c3:
dc:ab:07:28:9f:b1:15:50:fd:a2:9f:85:21:b1:06:
cc:72:cb:e7:cf:35:70:fe:55:07:5d:1a:db:ae:5a:
b7:0b:33:3b:24:ac:fd:ce:61:a4:78:42:c1:27:7a:
8c:5b:79:df:b6:64:2b:25:59:fb:2c:fd:25:1d:ff:
6d:c4:7d:cf:ff:8b:39:37:52:56:95:46:11:6c:61:
d7:7b:12:b8:1f:d9:2b:d9:26:c9:bb:00:f0:e1:f8:
50:fe:c0:36:05:20:b4:41:f4:ae:50:8a:23:e1:a5:
8d:fa:d0:65:df:80:11:9b:09:92:57:cf:3c:31:61:
93:36:e2:27:95:56:08:27:33:c2:86:f4:7a:da:50:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6F:06:1B:65:82:55:DF:2D:EA:F0:CC:C6:11:0C:2D:1E:DD:0E:5C
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS137235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.103.94.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:8d:51:c2:bd:00:58:11:96:ce:05:06:1f:87:e5:dc:06:26:
ff:ac:39:a9:8a:ca:b2:90:b3:31:df:98:83:84:8e:86:80:eb:
9d:1e:d3:d2:7a:b4:9c:ce:f9:48:e1:3c:47:5d:64:2d:8d:ca:
1e:fc:f6:3c:18:bf:7a:a9:77:92:bc:77:24:47:00:fd:42:83:
a6:08:97:ae:dd:6d:14:05:b1:dc:6c:18:a9:e3:7d:38:87:d1:
f5:22:a5:8e:a6:e5:a5:71:af:3e:7b:2c:8e:e1:cd:34:31:2b:
b8:a8:b7:45:23:9e:52:a5:05:00:77:45:9a:c9:7e:ee:63:ec:
13:ab:4c:44:0f:f7:fd:3a:54:bf:8d:f1:11:97:81:cb:da:02:
35:57:05:a3:f3:8c:9d:03:4b:48:1f:8c:51:ce:bb:14:a2:9a:
99:4f:29:15:95:e3:16:33:de:c2:3c:c0:2e:2a:2b:6a:fc:46:
02:88:51:96:d5:d2:26:14:18:99:ce:e5:cc:fe:fc:01:f3:05:
60:4b:dc:45:fa:87:d2:31:3d:b2:0b:44:43:d7:eb:58:ab:1c:
df:4d:ca:1f:e2:cb:86:eb:37:7f:03:6e:1d:7a:11:b8:88:81:
d2:e5:72:4f:6f:af:45:1b:8f:fc:ba:c9:8a:d6:7f:d1:09:38:
25:66:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net