Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401104.roa
File: AS401104.roa (raw, json)
Hash identifier: IWgUkKsxphPC2P7kr1YdkKf1Thcpvq0YDfMQk9uOmmw=
Subject key identifier: B8:58:89:2C:6E:68:6F:EA:3B:4E:3B:E6:B8:4D:BD:D4:7C:03:05:D4
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 347A1724EB2430C42DBF5434D6FFE867155FFC76
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401104.roa
Signing time: Wed 02 Apr 2025 23:28:33 +0000
ROA not before: Wed 02 Apr 2025 23:23:33 +0000
ROA not after: Wed 01 Apr 2026 23:28:33 +0000
asID: 401104
IP address blocks: 157.254.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:7a:17:24:eb:24:30:c4:2d:bf:54:34:d6:ff:e8:67:15:5f:fc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Apr 2 23:23:33 2025 GMT
Not After : Apr 1 23:28:33 2026 GMT
Subject: CN=B858892C6E686FEA3B4E3BE6B84DBDD47C0305D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b9:fc:7a:24:6c:51:11:e6:d3:c7:98:82:58:
19:59:45:c0:b2:41:56:4a:30:04:a1:35:47:7f:69:
b7:f5:f1:35:00:48:e9:78:30:d8:75:d2:d3:d6:76:
5e:93:46:aa:94:f3:c6:8f:56:2c:ff:67:3d:46:38:
68:a8:71:a4:4a:82:6e:be:c2:f3:30:69:09:ec:81:
3b:8d:d3:b9:40:d4:ed:d3:a9:b3:88:92:ce:9f:d0:
f5:db:25:95:12:6f:3e:48:e6:e3:53:b0:d8:44:f5:
9f:87:d5:5c:f9:c2:bd:e7:17:cb:19:6f:28:85:f2:
b4:8d:f4:1b:a2:e3:f5:6b:df:6d:b0:ec:99:37:7f:
56:89:f8:74:ed:97:12:71:d8:bc:51:e6:e1:ff:07:
4c:24:b8:03:d0:dc:3d:2f:f8:24:d5:de:95:88:17:
17:d3:7e:a0:b5:40:56:62:19:1b:9f:80:27:2e:46:
4a:35:35:5b:45:3b:d6:d5:28:b0:0a:ca:71:f4:52:
85:0b:cc:f6:76:41:46:8c:9b:95:1b:f1:e6:be:78:
be:46:d5:7b:e0:9f:e4:ef:b9:4d:c5:fd:ca:18:a4:
f6:3e:bf:e2:33:76:4e:64:ae:4c:29:0d:74:53:2f:
8c:0f:58:e4:9a:40:e8:48:81:d5:d9:da:aa:1c:e5:
3c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:58:89:2C:6E:68:6F:EA:3B:4E:3B:E6:B8:4D:BD:D4:7C:03:05:D4
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401104.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.219.0/24
Signature Algorithm: sha256WithRSAEncryption
15:61:25:07:66:46:c7:c7:63:a3:58:e7:99:0b:54:9d:6b:0f:
6f:8c:7e:46:b8:32:66:46:6e:e9:29:f4:35:5f:25:d7:d8:8d:
85:5a:5f:ec:30:78:ac:16:5f:83:07:46:93:5b:a3:57:27:d9:
3c:ec:52:fd:51:65:31:25:5a:f7:75:35:d0:47:63:3b:e1:fa:
d5:2b:69:11:c6:89:e3:de:4e:76:b1:97:0e:2d:e5:35:9f:05:
22:da:44:f0:37:8d:22:32:a8:e0:65:71:b3:e2:fb:62:ed:93:
0b:de:b7:ab:eb:60:da:43:c8:26:3b:8a:55:8b:5e:ee:54:08:
63:4d:70:00:5b:96:6a:22:e4:e3:00:78:d6:0d:dc:60:58:a2:
c1:34:ba:f2:f6:97:8c:7b:53:e3:14:e6:99:1c:7e:b6:0a:b3:
e2:5c:57:60:6a:7c:15:37:cf:54:85:d4:41:39:0a:5e:f8:bc:
05:3d:08:bb:13:32:bb:6d:64:31:5b:83:7e:be:82:b1:2a:33:
e7:18:7f:31:95:a1:d8:2f:b9:04:94:cc:80:6e:da:2e:28:2e:
be:08:b1:f5:ca:92:89:fb:c5:8d:1a:20:a3:8d:ca:99:4c:b8:
af:96:66:b2:55:ca:ed:aa:23:bb:5d:be:4f:42:ef:ae:d4:cd:
3b:90:b5:6a
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUNHoXJOskMMQtv1Q01v/oZxVf/HYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNDAyMjMyMzMzWhcNMjYwNDAxMjMyODMz
WjAzMTEwLwYDVQQDEyhCODU4ODkyQzZFNjg2RkVBM0I0RTNCRTZCODREQkRENDdD
MDMwNUQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57n8eiRsURHm
08eYglgZWUXAskFWSjAEoTVHf2m39fE1AEjpeDDYddLT1nZek0aqlPPGj1Ys/2c9
RjhoqHGkSoJuvsLzMGkJ7IE7jdO5QNTt06mziJLOn9D12yWVEm8+SObjU7DYRPWf
h9Vc+cK95xfLGW8ohfK0jfQbouP1a99tsOyZN39Wifh07ZcScdi8Uebh/wdMJLgD
0Nw9L/gk1d6ViBcX036gtUBWYhkbn4AnLkZKNTVbRTvW1SiwCspx9FKFC8z2dkFG
jJuVG/Hmvni+RtV74J/k77lNxf3KGKT2Pr/iM3ZOZK5MKQ10Uy+MD1jkmkDoSIHV
2dqqHOU86QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFLhYiSxuaG/qO0475rhNvdR8
AwXUMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzQwMTEwNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+2zANBgkqhkiG9w0BAQsFAAOC
AQEAFWElB2ZGx8djo1jnmQtUnWsPb4x+RrgyZkZu6Sn0NV8l19iNhVpf7DB4rBZf
gwdGk1ujVyfZPOxS/VFlMSVa93U10EdjO+H61StpEcaJ495OdrGXDi3lNZ8FItpE
8DeNIjKo4GVxs+L7Yu2TC963q+tg2kPIJjuKVYte7lQIY01wAFuWaiLk4wB41g3c
YFiiwTS68vaXjHtT4xTmmRx+tgqz4lxXYGp8FTfPVIXUQTkKXvi8BT0IuxMyu21k
MVuDfr6CsSoz5xh/MZWh2C+5BJTMgG7aLiguvgix9cqSifvFjRogo43KmUy4r5Zm
slXK7aoju12+T0LvrtTNO5C1ag==
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net