Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS198125.roa
File: AS198125.roa (raw, json)
Hash identifier: fLO286rM3MPaKJlUNbczO1HTOZvun0bH8EpPp/DQ4do=
Subject key identifier: 42:C7:51:AC:DF:2B:08:63:E3:97:C3:F5:AC:7F:17:50:65:4A:5F:6F
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 134219F19CD6A73A0DD00BF21EA605B6F2175E66
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS198125.roa
Signing time: Fri 11 Apr 2025 20:31:04 +0000
ROA not before: Fri 11 Apr 2025 20:26:04 +0000
ROA not after: Fri 10 Apr 2026 20:31:04 +0000
asID: 198125
IP address blocks: 27.0.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:42:19:f1:9c:d6:a7:3a:0d:d0:0b:f2:1e:a6:05:b6:f2:17:5e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Apr 11 20:26:04 2025 GMT
Not After : Apr 10 20:31:04 2026 GMT
Subject: CN=42C751ACDF2B0863E397C3F5AC7F1750654A5F6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:ae:40:3b:51:fc:d0:c6:a1:d6:0a:f1:3f:
99:d5:fb:06:71:2d:9a:75:16:3b:48:db:c7:b4:0c:
b2:7d:4e:56:b4:b6:db:4c:d2:23:db:99:72:04:34:
16:3f:b8:88:11:fc:c1:04:c8:36:a8:43:2f:fb:f2:
16:a4:3d:97:e0:65:24:fe:68:77:d5:20:2c:00:ea:
82:c9:02:5b:20:4e:cd:75:2c:69:5c:73:3d:b3:31:
cf:6b:e2:93:af:fd:1b:0b:1c:33:94:99:d0:70:02:
50:e3:9f:22:38:b2:cd:d3:a7:9e:7d:4d:db:77:cd:
ab:9f:4f:f3:34:9e:3a:02:87:4c:91:84:51:9c:ff:
56:88:db:b1:2d:be:c6:5d:a4:01:b1:fe:92:58:c2:
ea:af:8f:55:8d:5f:30:1a:8d:6d:58:f1:14:b9:b4:
d5:df:ff:ed:96:c5:6b:1b:a5:54:1b:71:80:95:30:
13:2c:4e:d2:2c:a1:76:2d:73:a3:46:20:82:2f:eb:
2e:06:77:41:da:78:25:79:52:5e:2e:0b:e7:a5:14:
f4:d7:3f:0e:91:11:8d:35:56:e8:7f:a9:f8:7c:57:
f7:37:67:57:27:53:bd:c2:81:81:68:ba:17:4a:d3:
85:ec:d7:80:86:c7:be:ab:a3:38:e6:fc:a0:50:91:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C7:51:AC:DF:2B:08:63:E3:97:C3:F5:AC:7F:17:50:65:4A:5F:6F
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS198125.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.233.0/24
Signature Algorithm: sha256WithRSAEncryption
44:39:a0:cd:76:69:ac:ab:49:f1:a1:4e:74:62:a8:ae:97:06:
86:23:a2:f3:15:c3:7f:88:76:85:d3:ec:c7:b8:d2:75:c9:bd:
05:b7:42:00:71:fd:18:ee:26:b2:90:66:ac:e4:bf:0d:92:b3:
d1:d3:ce:40:4d:03:9b:f9:06:3a:f3:7a:3f:43:6e:6b:fc:2a:
56:70:42:e2:cc:82:55:6d:74:38:95:c2:40:1d:f7:22:88:54:
98:40:42:09:82:6e:4c:74:6e:9c:d9:ee:41:84:35:c4:8b:1a:
e0:b4:59:30:b2:96:44:ed:dc:eb:f9:c3:e4:61:38:30:22:a9:
95:d1:41:33:a9:77:11:de:c3:5f:64:46:05:9c:b0:10:52:e4:
1a:cf:33:98:80:75:9a:8b:27:37:91:ad:eb:47:32:96:7c:10:
72:fe:69:5c:29:01:2b:98:1d:65:6f:04:c6:f8:c4:36:1f:e5:
5b:57:03:31:3f:fc:c9:c4:5e:b3:48:1d:5f:de:c0:73:49:9e:
01:1d:06:56:8f:3d:de:b9:e8:5f:b9:7c:ac:50:47:9d:7e:13:
6c:67:aa:d1:91:7f:9c:3d:e7:b4:9d:40:d2:63:e9:cf:ca:d6:
5d:61:de:31:87:53:49:36:54:6c:76:c0:28:77:e8:5b:32:11:
21:db:2e:67
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUE0IZ8ZzWpzoN0AvyHqYFtvIXXmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTA0MTEyMDI2MDRaFw0yNjA0MTAyMDMxMDRaMDMxMTAvBgNV
BAMTKDQyQzc1MUFDREYyQjA4NjNFMzk3QzNGNUFDN0YxNzUwNjU0QTVGNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtAa5AO1H80Mah1grxP5nV+wZx
LZp1FjtI28e0DLJ9Tla0tttM0iPbmXIENBY/uIgR/MEEyDaoQy/78hakPZfgZST+
aHfVICwA6oLJAlsgTs11LGlccz2zMc9r4pOv/RsLHDOUmdBwAlDjnyI4ss3Tp559
Tdt3zaufT/M0njoCh0yRhFGc/1aI27EtvsZdpAGx/pJYwuqvj1WNXzAajW1Y8RS5
tNXf/+2WxWsbpVQbcYCVMBMsTtIsoXYtc6NGIIIv6y4Gd0HaeCV5Ul4uC+elFPTX
Pw6REY01Vuh/qfh8V/c3Z1cnU73CgYFouhdK04Xs14CGx76rozjm/KBQkWH/AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUQsdRrN8rCGPjl8P1rH8XUGVKX28wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTk4MTI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAGwDpMA0GCSqGSIb3DQEBCwUAA4IBAQBEOaDNdmms
q0nxoU50YqiulwaGI6LzFcN/iHaF0+zHuNJ1yb0Ft0IAcf0Y7iaykGas5L8NkrPR
085ATQOb+QY683o/Q25r/CpWcELizIJVbXQ4lcJAHfciiFSYQEIJgm5MdG6c2e5B
hDXEixrgtFkwspZE7dzr+cPkYTgwIqmV0UEzqXcR3sNfZEYFnLAQUuQazzOYgHWa
iyc3ka3rRzKWfBBy/mlcKQErmB1lbwTG+MQ2H+VbVwMxP/zJxF6zSB1f3sBzSZ4B
HQZWjz3euehfuXysUEedfhNsZ6rRkX+cPee0nUDSY+nPytZdYd4xh1NJNlRsdsAo
d+hbMhEh2y5n
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:10 2025 by rpki-client on console.sobornost.net