Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400890.roa
File: AS400890.roa (raw, json)
Hash identifier: GeluJB9wAce0SuQVbaqwCDjoomFQYC2c6YF3DKtV9xo=
Subject key identifier: 73:A3:22:E5:FD:A5:09:D0:BF:D7:B6:BD:4A:52:5F:A6:52:9B:0C:4E
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 1E4707423F9FC687B7977E494C047ED7335B0D03
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400890.roa
Signing time: Thu 30 May 2024 22:47:39 +0000
ROA not before: Thu 30 May 2024 22:42:39 +0000
ROA not after: Thu 29 May 2025 22:47:39 +0000
asID: 400890
IP address blocks: 157.254.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:47:07:42:3f:9f:c6:87:b7:97:7e:49:4c:04:7e:d7:33:5b:0d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: May 30 22:42:39 2024 GMT
Not After : May 29 22:47:39 2025 GMT
Subject: CN=73A322E5FDA509D0BFD7B6BD4A525FA6529B0C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9e:53:31:48:24:93:05:90:bf:7c:8f:57:94:
7e:78:53:c7:8a:6e:e7:4d:5d:3b:93:c7:66:22:f3:
c9:04:d0:69:b7:b7:17:f1:f5:ec:e9:c8:57:5e:90:
65:dd:b7:18:8e:62:5d:8a:ec:8f:c5:73:63:2e:e9:
4a:43:fc:6a:f3:55:6b:46:0c:23:72:b9:11:f7:a7:
d1:67:39:e5:55:0e:55:ba:f3:37:a2:c7:90:e1:cd:
58:a0:fe:e8:bc:08:bb:7a:04:0b:c5:3d:4a:4a:7e:
16:9d:f4:56:33:7c:d1:f3:8f:01:6c:b6:0f:fc:c3:
ca:14:0a:36:c0:55:aa:3a:b5:8a:2e:8f:99:f3:62:
a5:9f:db:b4:a9:86:3b:5d:a4:6c:e4:29:fa:ff:2e:
ba:c4:76:54:02:ca:74:9b:6d:99:0c:b7:6f:71:0f:
03:cc:66:69:cb:e4:7f:63:4a:e5:b4:d5:26:90:bf:
da:3e:b9:b5:6f:51:b9:ca:ca:ad:ad:f5:42:45:40:
80:e7:86:9c:2f:9b:30:56:71:c5:8d:7b:12:57:ce:
4c:70:67:09:2d:3a:b5:9b:b8:ef:eb:36:eb:75:69:
ad:fc:50:97:da:2a:02:d7:2a:aa:4a:c4:9d:52:e0:
57:b5:ea:94:0a:9f:ee:12:6b:f6:07:ab:5f:18:9d:
94:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A3:22:E5:FD:A5:09:D0:BF:D7:B6:BD:4A:52:5F:A6:52:9B:0C:4E
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400890.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.229.0/24
Signature Algorithm: sha256WithRSAEncryption
93:0e:b6:90:de:95:e1:9c:7f:6f:78:f9:b9:1e:18:05:2c:83:
31:8f:b3:85:30:c5:41:f7:c9:c5:2c:73:04:8f:87:d3:17:4c:
34:e9:3b:19:04:f6:fb:e9:26:e3:3e:6c:29:7e:ba:95:4a:71:
fc:af:72:a6:1c:6e:fc:34:f2:75:44:d2:9f:66:f3:7d:9b:d2:
c7:fd:3d:a5:59:a6:d3:eb:e2:15:c0:f6:7f:21:1f:4d:3e:3e:
d3:35:a8:6a:cb:ef:c7:58:bf:ef:1e:55:60:58:8e:a2:0a:1a:
80:de:31:93:18:bb:17:25:fc:31:a0:8e:55:9c:b5:67:8b:16:
06:d1:f7:76:63:77:dd:f3:b3:eb:91:24:48:bd:3e:50:64:da:
5d:f1:ce:54:25:0f:fa:61:d6:38:56:0a:ca:88:c2:69:79:0f:
31:0d:31:c8:0a:8f:b1:98:fc:66:15:ce:82:26:e8:37:b9:01:
3c:6b:2d:24:12:06:d1:89:3f:07:62:ac:30:76:ee:59:cc:38:
4b:3b:54:9b:96:c0:d2:5d:f3:2e:60:1e:4d:4e:62:05:d9:d3:
90:65:a7:c7:57:f6:e5:aa:cd:7c:6e:e1:98:97:60:4b:88:de:
f7:d7:c7:08:dd:c5:3e:8c:29:99:09:d9:68:4b:86:56:60:22:
cd:46:c0:c1
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUHkcHQj+fxoe3l35JTAR+1zNbDQMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwNTMwMjI0MjM5WhcNMjUwNTI5MjI0NzM5
WjAzMTEwLwYDVQQDEyg3M0EzMjJFNUZEQTUwOUQwQkZEN0I2QkQ0QTUyNUZBNjUy
OUIwQzRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA855TMUgkkwWQ
v3yPV5R+eFPHim7nTV07k8dmIvPJBNBpt7cX8fXs6chXXpBl3bcYjmJdiuyPxXNj
LulKQ/xq81VrRgwjcrkR96fRZznlVQ5VuvM3oseQ4c1YoP7ovAi7egQLxT1KSn4W
nfRWM3zR848BbLYP/MPKFAo2wFWqOrWKLo+Z82Kln9u0qYY7XaRs5Cn6/y66xHZU
Asp0m22ZDLdvcQ8DzGZpy+R/Y0rltNUmkL/aPrm1b1G5ysqtrfVCRUCA54acL5sw
VnHFjXsSV85McGcJLTq1m7jv6zbrdWmt/FCX2ioC1yqqSsSdUuBXteqUCp/uEmv2
B6tfGJ2UjQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFHOjIuX9pQnQv9e2vUpSX6ZS
mwxOMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzQwMDg5MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+5TANBgkqhkiG9w0BAQsFAAOC
AQEAkw62kN6V4Zx/b3j5uR4YBSyDMY+zhTDFQffJxSxzBI+H0xdMNOk7GQT2++km
4z5sKX66lUpx/K9yphxu/DTydUTSn2bzfZvSx/09pVmm0+viFcD2fyEfTT4+0zWo
asvvx1i/7x5VYFiOogoagN4xkxi7FyX8MaCOVZy1Z4sWBtH3dmN33fOz65EkSL0+
UGTaXfHOVCUP+mHWOFYKyojCaXkPMQ0xyAqPsZj8ZhXOgiboN7kBPGstJBIG0Yk/
B2KsMHbuWcw4SztUm5bA0l3zLmAeTU5iBdnTkGWnx1f25arNfG7hmJdgS4je99fH
CN3FPowpmQnZaEuGVmAizUbAwQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net