Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS151734.roa
File: AS151734.roa (raw, json)
Hash identifier: Mh6YLWqLW9reQPQIXBlV0JncghPA3ajHzVfslgrJxGQ=
Subject key identifier: 8C:F9:37:90:AF:36:C4:AC:25:5C:F3:4A:24:FD:34:12:23:C2:B1:C9
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 0361FB77064E550A5513C5436E8FD17FB6FE5202
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS151734.roa
Signing time: Mon 29 Jul 2024 10:57:02 +0000
ROA not before: Mon 29 Jul 2024 10:52:02 +0000
ROA not after: Mon 28 Jul 2025 10:57:02 +0000
asID: 151734
IP address blocks: 157.254.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:61:fb:77:06:4e:55:0a:55:13:c5:43:6e:8f:d1:7f:b6:fe:52:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jul 29 10:52:02 2024 GMT
Not After : Jul 28 10:57:02 2025 GMT
Subject: CN=8CF93790AF36C4AC255CF34A24FD341223C2B1C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:13:b9:6c:cb:e2:dd:27:df:b9:97:b8:d9:
89:77:b0:3b:fd:6b:7e:ec:22:8a:78:60:15:51:9b:
37:16:28:e9:f9:66:19:be:3a:04:14:d2:83:11:06:
74:0b:44:d1:9b:69:4c:29:7c:7b:e0:f4:92:47:a8:
3f:7c:95:d6:a7:a3:3a:af:3f:3d:f4:8d:51:9f:d6:
c5:80:4a:5c:d6:d7:5b:02:c0:65:2d:b0:e6:cb:d1:
18:51:46:aa:d0:89:50:3a:ef:aa:ac:fb:3d:28:2a:
62:97:5d:7a:e5:ae:db:ff:d3:a5:2c:62:bc:64:7e:
1c:9b:f4:91:bc:52:96:cc:7f:3c:3f:33:34:b1:8f:
d8:44:b1:f8:dd:a7:aa:be:cc:3f:4f:81:6f:b4:32:
53:45:2a:ab:0a:80:d2:e6:9a:75:fb:54:8b:c6:45:
3e:d3:41:04:c6:25:03:b1:9d:d9:90:92:c7:29:7a:
9e:b1:f9:a0:bb:f7:c0:d1:4c:50:78:5a:9a:8e:a4:
46:df:08:d8:6d:79:5b:1d:e5:63:42:b9:27:40:d9:
4a:ea:9f:00:fc:4d:77:13:94:78:13:1b:07:84:e6:
b1:57:ac:e6:17:14:af:b5:ca:7c:d8:41:fa:8f:6a:
82:4b:04:91:33:1e:7b:5c:96:dc:6c:13:d3:f6:31:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F9:37:90:AF:36:C4:AC:25:5C:F3:4A:24:FD:34:12:23:C2:B1:C9
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS151734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.25.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fd:65:47:6b:ee:3a:71:b8:8f:fc:1d:cb:0f:77:47:db:83:
62:af:82:f3:79:b7:93:1d:9f:aa:fd:59:12:c7:21:1b:ac:b1:
07:fe:50:5c:64:c4:56:7c:5b:b0:49:01:1a:08:8e:2e:f2:ba:
5b:2b:bd:6e:5b:35:a1:93:8a:4a:a0:29:2b:4c:a8:e0:36:92:
c4:8c:75:68:cf:2f:62:b1:be:f4:7b:19:da:65:eb:be:5a:2b:
a9:80:f5:c9:07:85:a9:96:68:d4:65:a9:1f:cf:2a:32:f7:18:
78:d5:c8:b9:c6:36:b2:58:62:a4:ad:ad:4c:b4:6d:91:f7:4e:
2e:42:c9:39:0b:de:dc:8d:07:60:7a:d1:80:91:0f:17:8f:22:
92:e0:cb:4e:c5:5c:5e:64:04:3b:65:fe:5d:d6:be:f6:79:8a:
2f:e7:39:05:14:94:90:53:84:15:34:9e:ee:91:92:bf:70:2b:
87:7a:e1:12:a3:a9:6c:0e:ca:af:eb:29:71:8f:0f:34:d9:ab:
7e:38:ab:50:69:fb:f9:12:47:e1:5c:5a:c2:fc:88:9f:d7:5f:
4e:4a:54:03:ab:38:47:35:23:48:4c:27:2c:d1:1b:f5:96:88:
d1:14:d6:14:64:69:3a:d3:b7:26:88:37:e5:44:ca:90:a8:e8:
52:18:bd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:59:28 2025 by rpki-client