Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: pYKQkzap1d7Yzq+lCf0E2U/X2XhcRZN0EqvQ+tRgyQ0=
Subject key identifier: AE:0B:3C:86:B6:4E:63:09:8C:1F:9B:B8:88:D8:37:2B:7C:67:E8:42
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 43C61FC7B3B50A504C0AEB3AF6B3A323011E2E6C
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa
Signing time: Tue 28 Jan 2025 18:00:57 +0000
ROA not before: Tue 28 Jan 2025 17:55:57 +0000
ROA not after: Tue 27 Jan 2026 18:00:57 +0000
asID: 29802
IP address blocks: 157.254.158.0/24 maxlen: 24
157.254.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c6:1f:c7:b3:b5:0a:50:4c:0a:eb:3a:f6:b3:a3:23:01:1e:2e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jan 28 17:55:57 2025 GMT
Not After : Jan 27 18:00:57 2026 GMT
Subject: CN=AE0B3C86B64E63098C1F9BB888D8372B7C67E842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:a8:cf:48:0e:d5:20:ec:e5:da:83:8c:ec:
72:9c:ae:e9:3c:8f:f8:23:04:54:a4:5b:d4:c1:b3:
55:c8:51:b5:d2:56:f5:fc:61:30:99:e7:1c:7a:93:
9f:ac:31:20:de:ad:6a:e0:57:9e:6f:5d:93:6d:35:
84:d0:88:58:79:0f:ae:a4:e4:95:f2:66:ba:5a:21:
2e:be:48:5d:3f:23:f5:7e:d4:cc:88:4d:66:97:50:
1c:fb:df:d5:f2:62:b7:79:e3:cb:7b:c0:eb:6a:ed:
f6:df:bb:e5:0f:06:11:a7:60:8c:6a:20:3b:1f:d3:
3f:88:47:08:4e:0d:d4:38:30:3f:98:6d:e9:4f:11:
17:cb:54:13:de:e4:3b:f7:86:a3:7e:2d:39:d1:73:
ed:8e:a0:13:56:f7:0d:44:a6:18:e4:3f:a7:2b:e5:
6c:14:4a:7c:65:74:ae:fa:d1:59:da:3a:d5:37:55:
a7:85:30:15:2c:b8:d4:8f:71:47:be:3d:1e:6f:1d:
12:38:b1:e0:2e:0c:30:97:c1:64:8f:c6:45:e6:e2:
de:d7:71:77:3e:26:4b:7e:57:18:0f:78:7a:95:b9:
ba:73:98:1b:fc:25:7d:40:8b:b9:d8:f2:7b:2a:65:
21:db:ee:46:59:07:bd:5c:6c:06:63:6a:f0:6b:86:
64:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0B:3C:86:B6:4E:63:09:8C:1F:9B:B8:88:D8:37:2B:7C:67:E8:42
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.158.0/24
157.254.248.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:d7:8e:37:82:1c:8e:82:08:47:e6:ec:01:fc:21:1a:7a:99:
46:8a:61:31:d8:89:4d:ce:94:2b:4b:90:7a:05:fa:da:4a:40:
db:5c:4e:f6:02:12:22:d0:dd:08:4c:b8:1d:ee:d1:03:db:60:
e4:03:be:57:e0:a4:cb:3b:d4:ad:f2:79:0b:5f:ea:63:1e:d9:
3e:a7:d8:fc:71:2e:db:5b:52:c9:d1:af:5c:b2:3e:bd:82:83:
6e:06:27:4a:c0:77:b0:74:53:4c:eb:36:7b:62:ba:f5:c5:f4:
62:4a:18:84:08:b5:80:c2:b1:6d:3d:ee:6c:6b:69:3a:cb:70:
4c:ab:db:8a:40:64:be:29:99:95:15:83:69:e1:04:aa:2b:b2:
20:c9:45:b4:6c:96:49:74:7b:d9:ab:b9:1c:3b:92:62:30:f6:
15:51:1c:a3:c5:be:9b:f2:d3:2a:e8:8c:a9:45:5a:78:4d:8d:
dc:fc:65:67:18:44:ba:40:96:78:52:1e:96:df:89:c8:55:5a:
e8:ec:05:83:5c:9f:09:13:29:b7:79:00:40:fe:e3:89:c1:4b:
7f:10:86:cb:c3:1c:9e:21:de:56:5b:3d:bd:5e:d6:48:1d:ec:
db:f9:ba:22:75:b1:7c:a2:a2:09:e6:c2:d1:4a:22:02:7f:d0:
aa:29:d2:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUQ8Yfx7O1ClBMCus69rOjIwEeLmwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMTI4MTc1NTU3WhcNMjYwMTI3MTgwMDU3
WjAzMTEwLwYDVQQDEyhBRTBCM0M4NkI2NEU2MzA5OEMxRjlCQjg4OEQ4MzcyQjdD
NjdFODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXGoz0gO1SDs
5dqDjOxynK7pPI/4IwRUpFvUwbNVyFG10lb1/GEwmeccepOfrDEg3q1q4Feeb12T
bTWE0IhYeQ+upOSV8ma6WiEuvkhdPyP1ftTMiE1ml1Ac+9/V8mK3eePLe8Drau32
37vlDwYRp2CMaiA7H9M/iEcITg3UODA/mG3pTxEXy1QT3uQ794ajfi050XPtjqAT
VvcNRKYY5D+nK+VsFEp8ZXSu+tFZ2jrVN1WnhTAVLLjUj3FHvj0ebx0SOLHgLgww
l8Fkj8ZF5uLe13F3PiZLflcYD3h6lbm6c5gb/CV9QIu52PJ7KmUh2+5GWQe9XGwG
Y2rwa4ZkTQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFK4LPIa2TmMJjB+buIjYNyt8
Z+hCMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnf6eAwQCnf74MA0GCSqGSIb3DQEB
CwUAA4IBAQC71443ghyOgghH5uwB/CEaeplGimEx2IlNzpQrS5B6BfraSkDbXE72
AhIi0N0ITLgd7tED22DkA75X4KTLO9St8nkLX+pjHtk+p9j8cS7bW1LJ0a9csj69
goNuBidKwHewdFNM6zZ7Yrr1xfRiShiECLWAwrFtPe5sa2k6y3BMq9uKQGS+KZmV
FYNp4QSqK7IgyUW0bJZJdHvZq7kcO5JiMPYVURyjxb6b8tMq6IypRVp4TY3c/GVn
GES6QJZ4Uh6W34nIVVro7AWDXJ8JEym3eQBA/uOJwUt/EIbLwxyeId5WWz29XtZI
Hezb+boidbF8oqIJ5sLRSiICf9CqKdJV
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:35:33 2025 by rpki-client