Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137897.roa
File: AS137897.roa (raw, json)
Hash identifier: KlhmTucNGgyU3mAFIEP2EUY/MOc1CWc3TH3e5ZA+xrY=
Subject key identifier: 57:59:C5:B4:79:FB:DD:E1:A2:61:5B:E8:91:49:99:12:AA:29:11:E6
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 7DE15E46DC469868AA7AEEFE9B22FD5E6037EB72
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137897.roa
Signing time: Fri 24 Jan 2025 13:46:42 +0000
ROA not before: Fri 24 Jan 2025 13:41:42 +0000
ROA not after: Fri 23 Jan 2026 13:46:42 +0000
asID: 137897
IP address blocks: 23.95.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e1:5e:46:dc:46:98:68:aa:7a:ee:fe:9b:22:fd:5e:60:37:eb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jan 24 13:41:42 2025 GMT
Not After : Jan 23 13:46:42 2026 GMT
Subject: CN=5759C5B479FBDDE1A2615BE891499912AA2911E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:7c:ef:8c:6f:22:3c:7c:5a:f6:8f:5b:a2:
63:55:45:26:85:cf:51:33:ab:5d:f8:9b:33:c1:7f:
c6:41:b3:eb:b1:ca:90:f7:66:7d:2a:df:86:a8:a1:
64:fe:db:76:96:83:3d:2a:5d:43:df:3c:31:7f:83:
db:19:50:8e:54:24:f5:ad:0a:21:02:7a:54:25:c1:
c7:4d:29:f0:dc:23:cb:da:16:67:f7:36:d5:69:c5:
b0:0c:72:83:0b:79:d2:90:39:c5:a9:98:10:62:33:
3b:cc:23:34:de:68:be:9f:f9:b3:bf:4f:97:f0:1e:
5b:5a:e0:50:4b:22:66:50:a7:2f:b6:86:23:9a:9b:
c3:ce:fc:65:6a:8a:cf:0e:38:30:8f:20:bd:f8:97:
02:ed:17:7b:1e:fd:39:8b:c6:bd:14:eb:0a:ba:cb:
6b:f8:ea:65:e4:e1:e4:06:6d:98:38:27:27:e5:fe:
f1:c0:4d:8f:1c:18:a7:4f:bb:86:ff:83:a6:90:e2:
c2:85:5e:ca:e9:51:99:88:0c:24:84:71:05:a4:27:
dd:9a:b3:d7:07:36:e0:d7:56:1b:3e:3f:7c:96:a1:
3e:bc:6b:aa:f7:31:4e:e4:4b:06:6a:00:87:4d:c7:
d9:49:1a:a3:b0:ba:55:28:5c:8f:98:77:57:39:7a:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:59:C5:B4:79:FB:DD:E1:A2:61:5B:E8:91:49:99:12:AA:29:11:E6
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
63:da:b1:47:57:fe:1a:3f:78:1e:1a:eb:06:e6:74:2a:12:e5:
b8:39:af:23:68:38:5e:9d:2f:78:90:65:cc:e7:5b:00:0b:97:
70:4b:11:47:d8:72:15:e5:3c:70:93:96:5e:ad:23:17:39:69:
1e:96:18:bc:f1:f8:25:4b:3e:61:a7:bd:a3:07:28:5f:95:9e:
7e:c6:8e:f7:fe:e7:14:3c:2d:ff:12:36:3f:18:9a:8d:5a:50:
46:25:6b:7d:c6:43:a4:49:26:12:75:e8:c9:e5:ea:bd:47:24:
28:0d:ea:81:28:97:a9:73:c5:dd:5d:01:d9:8d:4a:39:4d:6d:
58:88:19:e9:0b:e9:90:4b:cc:15:db:40:27:fb:43:99:ad:b2:
78:62:ce:04:b5:be:21:ab:94:bb:38:d7:21:5c:fa:41:25:a5:
cf:f5:dc:08:a6:76:d3:0e:55:30:f1:86:eb:0f:3f:4a:46:26:
e6:9a:89:c5:f6:44:2e:08:90:51:76:94:ed:d5:fd:3c:fa:8a:
19:a6:7a:a5:13:01:5b:78:52:f0:d6:38:a4:da:53:c5:e3:c4:
ac:65:5e:94:77:4d:d2:a4:1d:ca:04:94:c3:3b:d8:db:25:4c:
9a:a0:b3:ed:53:8e:ee:7a:00:66:4d:a0:b3:ce:68:0e:d0:ac:
f0:5e:47:6c
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUfeFeRtxGmGiqeu7+myL9XmA363IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMTI0MTM0MTQyWhcNMjYwMTIzMTM0NjQy
WjAzMTEwLwYDVQQDEyg1NzU5QzVCNDc5RkJEREUxQTI2MTVCRTg5MTQ5OTkxMkFB
MjkxMUU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfF874xvIjx8
WvaPW6JjVUUmhc9RM6td+JszwX/GQbPrscqQ92Z9Kt+GqKFk/tt2loM9Kl1D3zwx
f4PbGVCOVCT1rQohAnpUJcHHTSnw3CPL2hZn9zbVacWwDHKDC3nSkDnFqZgQYjM7
zCM03mi+n/mzv0+X8B5bWuBQSyJmUKcvtoYjmpvDzvxlaorPDjgwjyC9+JcC7Rd7
Hv05i8a9FOsKustr+Opl5OHkBm2YOCcn5f7xwE2PHBinT7uG/4OmkOLChV7K6VGZ
iAwkhHEFpCfdmrPXBzbg11YbPj98lqE+vGuq9zFO5EsGagCHTcfZSRqjsLpVKFyP
mHdXOXoj1wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFdZxbR5+93homFb6JFJmRKq
KRHmMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzEzNzg5Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABdfnzANBgkqhkiG9w0BAQsFAAOC
AQEAY9qxR1f+Gj94HhrrBuZ0KhLluDmvI2g4Xp0veJBlzOdbAAuXcEsRR9hyFeU8
cJOWXq0jFzlpHpYYvPH4JUs+Yae9owcoX5WefsaO9/7nFDwt/xI2PxiajVpQRiVr
fcZDpEkmEnXoyeXqvUckKA3qgSiXqXPF3V0B2Y1KOU1tWIgZ6QvpkEvMFdtAJ/tD
ma2yeGLOBLW+IauUuzjXIVz6QSWlz/XcCKZ20w5VMPGG6w8/SkYm5pqJxfZELgiQ
UXaU7dX9PPqKGaZ6pRMBW3hS8NY4pNpTxePErGVelHdN0qQdygSUwzvY2yVMmqCz
7VOO7noAZk2gs85oDtCs8F5HbA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:29 2025 by rpki-client