Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152672.roa
File: AS152672.roa (raw, json)
Hash identifier: UMLQYCdRwYqBHoOhQBALp1KBcGsraR301sJsArsNjfo=
Subject key identifier: 66:54:9C:E2:4C:F8:5E:DC:5E:12:DD:D3:58:3D:96:94:58:62:11:BD
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 1BB882829EDF1618DA49197CC9C93C1EC658A41D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152672.roa
Signing time: Sun 13 Apr 2025 04:28:29 +0000
ROA not before: Sun 13 Apr 2025 04:23:29 +0000
ROA not after: Sun 12 Apr 2026 04:28:29 +0000
asID: 152672
IP address blocks: 157.254.227.0/24 maxlen: 24
157.254.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b8:82:82:9e:df:16:18:da:49:19:7c:c9:c9:3c:1e:c6:58:a4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Apr 13 04:23:29 2025 GMT
Not After : Apr 12 04:28:29 2026 GMT
Subject: CN=66549CE24CF85EDC5E12DDD3583D9694586211BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:80:b1:55:7a:0c:ab:99:e3:83:06:c3:90:15:
d8:dc:fe:be:49:71:80:ef:bf:b9:2f:e5:7b:dd:0e:
58:58:71:ba:7d:78:df:e4:c7:f7:e6:14:d1:5c:a2:
32:56:07:3e:14:71:44:79:d1:51:bd:61:52:b7:a1:
8d:a6:e7:f8:ad:33:4c:db:5b:ec:d6:c6:ae:bf:70:
0b:0c:71:8e:16:93:f2:0f:4e:f5:2e:da:17:5f:f1:
2b:0d:2b:01:7c:85:90:d8:8d:8e:a7:5f:92:a4:82:
5d:f5:f1:48:c2:9f:2e:93:77:e9:69:7f:7f:04:33:
94:65:21:c2:7e:c3:f4:da:cd:63:fe:37:12:0f:b4:
5f:b0:bb:c6:58:22:57:4d:31:3e:11:a8:b8:63:a0:
e9:4e:a1:47:93:e2:77:44:07:50:01:67:40:b9:f9:
3d:d8:ad:68:7a:51:2d:dd:b5:bb:b4:6d:52:c6:12:
4e:a5:21:5c:cf:ed:55:65:c7:f0:3b:67:40:63:28:
44:b9:e4:f4:c8:cd:23:b4:3f:ba:96:97:9a:97:43:
93:7d:55:71:b5:17:f4:62:3c:74:5b:a0:3e:8e:6c:
12:9e:ea:14:8f:6e:06:42:2c:59:c1:7e:5e:d9:ec:
bb:52:70:dc:8e:32:78:d0:5c:48:53:aa:8a:8e:e9:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:54:9C:E2:4C:F8:5E:DC:5E:12:DD:D3:58:3D:96:94:58:62:11:BD
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.227.0/24
157.254.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b7:a0:65:dd:ac:a7:38:9a:98:b8:36:53:c5:5e:4c:2a:88:
ad:e4:aa:ff:88:28:bb:02:99:96:17:52:27:d3:6b:68:ff:05:
37:95:3e:5b:04:bd:55:50:73:c5:0c:0c:30:66:0c:0a:8a:58:
ea:f0:76:1e:30:cb:7e:af:2e:dc:24:a9:49:c6:64:e4:2f:15:
9e:b1:44:da:dd:c3:b7:7b:d4:15:69:39:37:00:ac:5f:d8:3e:
85:84:d1:19:1f:a1:b8:49:22:ba:cc:03:0d:2f:45:fd:5f:6a:
fb:20:11:b0:1d:0f:3a:77:f0:10:3e:c9:c3:f6:b5:1c:26:04:
41:99:9c:6e:a8:8b:e4:ef:8c:ea:ad:a7:96:ef:3f:3a:4d:cc:
e6:8a:f3:a7:4c:d4:6d:7c:36:b8:0e:96:72:68:02:b3:e4:59:
7f:a0:5a:a9:a5:26:ae:09:4b:00:f0:f2:ae:8f:5d:e9:70:93:
de:98:83:9c:9a:92:c0:16:ed:f1:a2:83:f2:b7:ff:e8:ae:6f:
8c:14:13:50:3d:4f:42:e2:ce:82:df:4b:9f:5e:72:29:00:a3:
44:47:dc:09:bb:fd:ae:23:1a:d7:28:84:5e:f0:85:fe:57:bb:
44:24:fb:1d:28:22:bb:f2:27:e1:25:a6:25:0b:a8:a3:b1:42:
31:79:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net