Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: sVzG147ZIhfWUTL8OG/jclalEORX5/KOoLAjkS/aouE=
Subject key identifier: CB:AF:8D:27:94:81:72:03:54:82:5B:F5:5F:85:74:13:05:31:43:6D
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 456F95F8BA1A326BB1723F41FD63360AC00DA840
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
Signing time: Mon 14 Apr 2025 12:55:12 +0000
ROA not before: Mon 14 Apr 2025 12:50:12 +0000
ROA not after: Mon 13 Apr 2026 12:55:12 +0000
asID: 834
IP address blocks: 157.254.34.0/23 maxlen: 24
157.254.144.0/21 maxlen: 24
157.254.166.0/24 maxlen: 24
157.254.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6f:95:f8:ba:1a:32:6b:b1:72:3f:41:fd:63:36:0a:c0:0d:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Apr 14 12:50:12 2025 GMT
Not After : Apr 13 12:55:12 2026 GMT
Subject: CN=CBAF8D279481720354825BF55F8574130531436D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:68:d5:ef:80:b9:fa:ba:3a:7c:f6:1b:a4:
d0:67:01:09:42:2f:43:76:66:1b:2f:7e:cc:37:74:
40:49:20:76:25:da:56:a8:57:5e:45:1f:a1:25:09:
01:f2:e9:01:96:77:39:21:27:fd:69:c2:1d:71:b4:
cc:1d:23:ec:74:e7:08:be:20:94:98:e2:96:9c:9d:
2b:f1:ff:13:3c:9e:50:1a:26:01:94:59:47:5c:aa:
70:a8:89:b4:79:f2:dc:e5:de:80:dc:92:be:6d:3e:
9c:d6:78:d7:41:6f:07:d4:71:14:4b:24:ef:17:4c:
0c:e3:9a:07:3d:26:be:5d:11:88:5e:d7:0a:93:1e:
cb:86:0b:2d:33:6f:37:fe:fc:57:07:d0:57:1e:c1:
e3:0a:bd:53:ce:44:f7:07:97:7f:72:f5:11:ec:42:
e3:6b:8f:f3:85:99:61:54:50:4e:4e:58:ae:41:cd:
88:aa:d8:7a:1f:7a:b5:79:5b:9e:5b:84:b3:3c:7d:
53:cd:06:dc:48:58:7c:5e:68:73:a0:20:69:0f:62:
60:f8:55:04:91:90:b0:36:20:2a:64:b4:cf:09:4b:
50:a0:43:2f:36:09:b5:0d:c6:9d:7d:f3:0a:c2:53:
e4:84:06:ea:fa:72:5a:f9:92:29:ad:09:2e:4c:b3:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AF:8D:27:94:81:72:03:54:82:5B:F5:5F:85:74:13:05:31:43:6D
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.34.0/23
157.254.144.0/21
157.254.166.0/24
157.254.230.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:33:23:51:0d:0e:99:b0:10:a2:e6:9e:13:06:a3:f1:4b:f7:
ff:24:67:04:64:41:5b:03:c4:b7:ff:37:c7:62:9b:d3:64:ed:
34:a6:05:12:11:1c:37:75:4d:5b:6d:15:83:2c:34:99:33:fc:
8b:3f:ca:60:05:7a:55:6a:e5:05:d3:3c:5b:0c:3b:dc:0b:2e:
12:0f:92:39:69:ec:03:27:15:47:66:65:87:87:59:c1:6a:09:
29:90:65:77:df:82:28:3f:24:a3:b4:05:80:2b:74:2f:2e:75:
47:ae:60:f8:12:40:c8:37:e5:b0:10:16:e9:35:5b:2b:a7:b2:
12:e5:b7:de:5a:aa:b5:f4:2c:f1:6b:52:09:0b:a5:5b:a7:b5:
e7:a2:d7:78:bc:f8:be:8a:ec:fa:e4:f5:cc:40:6b:1c:1b:67:
72:b7:2e:3c:9a:e4:83:17:62:f6:06:fd:02:5c:a0:a2:b8:90:
58:86:f5:a9:43:49:62:a8:9b:09:b4:90:3b:95:10:7f:1a:aa:
4e:e7:b0:b1:f1:df:9f:13:fe:3b:c0:34:8c:af:9e:87:cd:12:
7c:04:b6:a7:40:29:cb:47:e5:b5:42:42:d7:2a:75:69:ea:19:
cf:56:ac:90:fb:6a:d2:ef:ee:6d:f7:40:b0:20:49:a6:4b:eb:
fd:b4:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net