Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: xO5eM+L+701JPDSqmc7Obu6wysNDbcAkNEy042xCRag=
Subject key identifier: 83:01:2E:0A:B6:68:7A:7F:83:D5:59:F4:FC:C7:2D:5B:A8:B7:61:35
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 3FB2A821149CAF0E1D76B2AF83D8E19DEBC57BF5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212238.roa
Signing time: Wed 25 Dec 2024 10:28:23 +0000
ROA not before: Wed 25 Dec 2024 10:23:23 +0000
ROA not after: Wed 24 Dec 2025 10:28:23 +0000
asID: 212238
IP address blocks: 157.254.162.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b2:a8:21:14:9c:af:0e:1d:76:b2:af:83:d8:e1:9d:eb:c5:7b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Dec 25 10:23:23 2024 GMT
Not After : Dec 24 10:28:23 2025 GMT
Subject: CN=83012E0AB6687A7F83D559F4FCC72D5BA8B76135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:45:a0:0d:65:f6:1a:26:b9:c6:2e:71:16:da:
bf:47:e4:61:87:27:35:a3:d4:8a:85:32:af:cf:a5:
28:04:0d:75:a9:a3:14:d5:d0:70:e0:cf:f3:71:90:
d1:87:c6:d7:fb:f5:e5:23:e3:48:51:c0:36:5e:b4:
2c:3c:74:3c:95:50:14:3e:89:35:45:a1:1f:b3:a1:
63:3c:fb:77:37:47:4f:e4:51:b5:02:c7:74:90:c9:
b2:bc:94:57:36:22:f9:c1:1d:94:01:9e:d2:7a:69:
7f:09:22:b3:ed:e5:a2:b7:87:ec:6b:7e:d5:da:99:
42:8f:80:6d:0a:bc:5a:4f:b9:73:76:8d:fa:98:cf:
20:64:e3:20:11:21:62:aa:51:9d:38:4f:d1:28:06:
04:f8:a0:cf:bf:1d:be:d6:ae:ab:04:9a:13:22:0b:
97:3b:fd:95:2f:1e:2e:92:30:39:80:83:65:cd:86:
6e:08:fc:10:1c:77:9f:05:15:60:67:8c:2e:77:29:
d5:41:e1:37:ce:9a:b9:ce:3c:2f:6e:69:58:23:b6:
97:7b:d9:db:ea:7a:f2:ba:9f:ed:f6:37:c0:7c:b0:
36:f4:b7:91:0e:91:88:f5:25:f5:ef:d5:c7:3c:d5:
e7:2b:6c:f2:fd:8b:7d:c1:fa:f0:33:aa:fd:8d:d3:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:01:2E:0A:B6:68:7A:7F:83:D5:59:F4:FC:C7:2D:5B:A8:B7:61:35
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.162.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:a0:d9:da:df:69:be:44:10:1f:7f:fb:c3:46:c0:6e:80:79:
24:d9:29:29:e2:89:07:7c:c0:2b:2e:92:64:79:a9:da:20:ab:
2a:a5:ae:3b:ff:8c:b8:0b:58:88:8a:13:82:7f:ec:91:20:b9:
dd:a7:91:a8:74:26:0c:1a:25:8a:54:6e:e8:a4:6f:51:1b:7c:
70:97:34:b9:e9:0a:35:55:ec:e9:9e:7c:d5:76:05:b9:87:2b:
d5:7d:7e:ee:c4:67:b1:25:77:65:c2:fa:bf:96:73:de:f3:e2:
10:fe:e9:02:a3:9c:a2:2a:9d:a7:73:2c:8d:50:6c:7d:12:b8:
df:d7:70:b1:c2:19:50:e8:70:a0:d8:79:4f:ef:79:30:4c:89:
35:2f:ad:22:d3:10:db:e3:7f:72:42:0d:d1:6d:c2:c7:fc:e1:
6b:ab:5c:ab:83:c7:f2:b3:fc:40:92:cf:8c:f9:48:2b:ef:26:
93:e6:e8:d1:c3:b7:f6:ef:b6:ce:52:f2:25:b4:7c:4d:18:20:
04:97:3e:af:c6:54:5c:2f:d7:df:4c:fb:df:3e:2c:87:53:54:
75:01:30:c2:8a:42:a1:e4:48:7e:51:aa:9b:69:d1:d5:b2:0b:
09:e0:d8:f4:df:58:80:a1:41:37:d7:8f:4d:fa:dd:c4:30:ac:
c4:b0:a7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net