Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa
File: AS200325.roa (raw, json)
Hash identifier: jMo99/YMxIW4okhYWNq3w1VcaS1pUCEIsxNfJLYK8i0=
Subject key identifier: F0:71:DF:20:E1:4A:F7:D4:35:B1:0C:8F:67:3E:FD:22:34:E8:47:EE
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 122B7312829A8C1E69B56160093C2227B9C90CF7
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa
Signing time: Mon 02 Sep 2024 23:13:12 +0000
ROA not before: Mon 02 Sep 2024 23:08:12 +0000
ROA not after: Mon 01 Sep 2025 23:13:12 +0000
asID: 200325
IP address blocks: 157.53.226.0/24 maxlen: 24
2607:f740:e00c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:2b:73:12:82:9a:8c:1e:69:b5:61:60:09:3c:22:27:b9:c9:0c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Sep 2 23:08:12 2024 GMT
Not After : Sep 1 23:13:12 2025 GMT
Subject: CN=F071DF20E14AF7D435B10C8F673EFD2234E847EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:9a:90:7f:19:fa:f6:88:66:94:37:86:8c:
4f:22:93:bd:67:7b:87:e5:62:bf:99:c9:00:36:66:
c6:2a:3a:ed:c9:ec:87:9e:72:60:ce:a8:85:ed:ce:
63:4a:3f:a3:61:8c:29:85:ca:02:80:9d:02:a3:c7:
ff:83:5b:b8:72:43:9d:a2:2f:13:f5:6e:22:71:ee:
3c:b3:39:0a:8e:c1:9e:9b:b6:7f:b6:bf:0c:98:71:
74:63:59:53:88:e9:cb:50:bf:de:b0:f7:97:6c:94:
7d:4c:05:c4:f4:f4:9d:8a:2e:82:3b:21:27:26:30:
f6:ca:96:f7:b9:ce:22:36:33:e5:8f:ab:49:33:e7:
d3:2c:ed:0d:4c:84:73:54:fe:44:79:b3:81:f4:83:
b7:13:73:48:78:5e:4a:83:35:5c:6a:73:0d:f9:d1:
21:22:ee:de:55:25:c4:d9:6a:0d:9b:dd:61:59:4e:
44:6c:45:c7:a7:88:d8:dd:08:e1:66:87:bb:1b:48:
95:75:45:d8:e0:da:33:d8:60:38:7e:7a:87:6c:17:
df:5b:16:0a:31:da:1f:3c:99:eb:2b:68:43:27:e7:
aa:1a:25:32:56:e6:ca:86:a9:96:02:dd:0c:29:d4:
b8:b8:f7:1a:15:a9:6d:0d:09:e7:e5:99:aa:ff:bb:
3c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:71:DF:20:E1:4A:F7:D4:35:B1:0C:8F:67:3E:FD:22:34:E8:47:EE
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.53.226.0/24
IPv6:
2607:f740:e00c::/48
Signature Algorithm: sha256WithRSAEncryption
91:94:87:f2:52:af:07:bc:f7:59:ae:7d:d7:1c:a2:b2:bd:43:
c9:50:10:92:6c:c2:10:46:af:a9:89:5a:ce:04:9d:fb:59:b5:
0d:1c:e7:45:3b:3c:e4:dc:57:76:d3:fa:77:26:fc:81:12:96:
05:36:5e:16:03:1a:7b:b1:d2:9e:66:ee:08:2a:60:65:a8:c4:
b7:3f:47:34:f9:e2:07:4e:cd:ac:ea:50:10:3a:3b:e3:7d:a0:
b0:ae:de:d3:5a:d7:4c:de:17:a3:4e:e6:9a:e0:bd:7c:60:68:
0a:a3:21:7e:01:88:d2:3a:70:b8:05:ca:5d:03:5e:4c:fb:21:
79:51:10:49:b3:02:85:47:f8:9a:9a:19:7e:3c:5f:a8:6b:57:
72:69:4d:5c:43:78:c3:f8:f2:18:92:9d:ec:65:97:ce:86:64:
69:07:6a:3b:3a:c3:6f:ab:02:ee:e6:42:ca:58:a0:59:58:a8:
e5:a9:16:e5:1b:c0:83:bb:d1:1d:6c:0f:33:60:97:ab:a1:22:
ab:81:37:66:58:dd:27:73:f0:ef:cf:ac:8d:b9:e3:82:29:d4:
06:a3:dc:ec:b9:7e:76:85:e0:f6:a3:70:3c:02:23:e1:fc:07:
ee:97:e0:49:ce:6e:ce:d9:c6:af:3a:25:a5:ca:6a:d1:2e:0d:
df:30:d7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:35:22 2025 by rpki-client