Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152672.roa
File: AS152672.roa (raw, json)
Hash identifier: WXdNXskGgBGcviJMXfbpEog9CzHDaWqjJ+3dCEqu44M=
Subject key identifier: 79:DF:95:2C:DD:BC:50:57:89:52:2D:CA:6F:5B:CF:53:A0:93:95:CC
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 4A1C3CBAECDF5C647BB9AD832882146C794864D9
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152672.roa
Signing time: Mon 27 Jan 2025 14:49:31 +0000
ROA not before: Mon 27 Jan 2025 14:44:31 +0000
ROA not after: Mon 26 Jan 2026 14:49:31 +0000
asID: 152672
IP address blocks: 23.95.126.0/24 maxlen: 24
198.23.184.0/24 maxlen: 24
198.23.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:1c:3c:ba:ec:df:5c:64:7b:b9:ad:83:28:82:14:6c:79:48:64:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jan 27 14:44:31 2025 GMT
Not After : Jan 26 14:49:31 2026 GMT
Subject: CN=79DF952CDDBC505789522DCA6F5BCF53A09395CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:45:8c:f7:fa:c3:5a:8f:8c:34:4b:e2:0e:6d:
43:a9:2d:3f:5e:a7:77:ec:19:b1:08:9c:0e:e8:4b:
3f:8a:2c:07:29:f0:77:39:ea:9f:8f:ed:b0:5e:b4:
cf:5d:a6:bd:8c:ac:ad:e3:1b:30:9a:a5:fa:ff:35:
7e:05:2f:22:14:8a:72:ad:86:f2:7f:ff:1d:8b:05:
a5:56:e7:07:97:0c:bd:c2:d6:14:f1:1a:3b:1a:14:
e6:2e:bc:66:c9:c2:a0:22:d2:20:ac:c0:89:be:70:
92:d9:47:7f:b0:0e:d2:ea:60:90:88:c3:2d:da:52:
b3:3f:a1:0b:9c:0c:ca:d3:c2:d1:a3:3f:20:68:91:
16:09:ee:72:83:45:66:c2:7e:87:c0:00:a6:de:95:
d6:4a:97:74:82:1f:d8:ac:35:b4:b6:01:a2:78:2b:
0d:e9:37:07:1b:f1:df:03:2e:cc:ab:71:90:a0:f4:
04:d4:e5:11:b9:cd:38:f3:9a:c5:59:19:48:d4:3d:
99:07:1f:89:af:c1:c8:9c:83:5d:a8:f8:41:d2:5e:
a7:67:41:37:f4:96:74:70:8b:63:49:9f:76:bf:20:
17:bd:03:e6:0e:3d:7c:66:4c:40:8c:fa:58:a8:4e:
20:25:b1:a5:5a:37:8c:2f:5e:e3:15:a0:79:c2:e3:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DF:95:2C:DD:BC:50:57:89:52:2D:CA:6F:5B:CF:53:A0:93:95:CC
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.95.126.0/24
198.23.184.0/24
198.23.195.0/24
Signature Algorithm: sha256WithRSAEncryption
14:17:b0:5e:80:ca:4b:ec:d3:c8:d7:3d:0d:2e:28:6f:21:88:
39:63:45:24:b9:38:43:be:98:fa:28:6d:58:b6:03:01:88:d4:
8b:b9:50:92:9a:1b:c9:82:2a:08:d2:b2:0a:b1:5d:6b:4d:b3:
ca:f1:f6:f2:12:c1:d5:d2:a6:e2:d8:69:b5:8d:b5:41:46:b3:
f5:f5:19:65:40:19:71:4c:df:5f:e8:81:e6:62:c0:a2:31:18:
e8:62:05:19:04:dc:b4:b3:1a:0d:af:ac:bf:e2:42:f1:b4:65:
4b:bb:7f:ea:ce:f1:43:a3:f4:07:c9:60:c5:21:85:54:5b:01:
4f:31:1b:ef:00:97:e4:10:40:c5:48:28:aa:33:ba:46:6d:bc:
9c:75:17:2a:f8:b6:c2:33:16:60:20:7a:14:ad:91:52:13:26:
d9:7c:e6:04:0a:10:28:ca:a4:bc:8f:72:eb:7c:8a:c0:4b:aa:
91:17:34:db:0c:95:ad:26:ad:dd:91:8d:f4:67:b2:10:fa:a8:
a6:7d:4a:b8:ec:1d:c1:20:7f:e9:0e:fe:63:72:83:2c:ae:bc:
ad:8c:69:2b:c5:7b:33:d6:1e:d4:5c:dd:24:d1:a8:8c:5f:1b:
d9:07:b9:06:38:cf:8c:1c:53:2c:05:f9:76:9e:fc:f2:b8:65:
67:99:e5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:31:39 2025 by rpki-client