Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400958.roa
File: AS400958.roa (raw, json)
Hash identifier: bMm0k8kf8g6AJEkjTWW3Z4gCAeY4RhBc7HtH/bKfqDw=
Subject key identifier: 5C:B9:FF:D2:E7:9A:64:74:DE:C0:4E:BA:D7:1B:1A:EA:74:58:FF:27
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 5251529857FB3903210074E1DF26BD9B3FDE9862
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400958.roa
Signing time: Sat 21 Dec 2024 15:16:11 +0000
ROA not before: Sat 21 Dec 2024 15:11:11 +0000
ROA not after: Sat 20 Dec 2025 15:16:11 +0000
asID: 400958
IP address blocks: 157.254.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:51:52:98:57:fb:39:03:21:00:74:e1:df:26:bd:9b:3f:de:98:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Dec 21 15:11:11 2024 GMT
Not After : Dec 20 15:16:11 2025 GMT
Subject: CN=5CB9FFD2E79A6474DEC04EBAD71B1AEA7458FF27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:e5:8d:f5:8d:0b:80:d7:f3:1e:84:5d:bf:
ef:90:8c:3b:4f:70:f0:51:f1:11:80:1d:50:6d:20:
55:2a:90:d3:10:f9:b3:7f:17:ef:e1:3a:4f:c2:cf:
2c:2b:ec:bf:5b:25:77:b5:be:d0:8f:13:ec:45:c4:
fc:40:65:07:24:74:54:91:62:ea:5e:ba:37:82:3c:
59:6e:29:bf:b7:55:9f:95:2d:2e:25:3a:49:f2:6c:
e6:a4:f4:b3:b5:c9:ef:4c:d0:9f:21:10:34:30:07:
b5:82:4f:f5:8a:60:72:79:14:63:9b:33:3f:a9:a2:
5c:76:58:2d:cf:1c:9b:4f:c0:97:32:e9:53:50:35:
37:9c:b8:c0:34:5d:5c:14:3a:2b:ba:49:e6:7e:02:
6c:d6:68:37:53:88:7c:a9:e4:5a:0f:27:89:31:80:
98:7b:aa:3a:97:13:e2:e4:fd:2c:2f:b1:03:b1:89:
b1:b1:43:c8:be:9c:b7:cb:5c:57:02:90:4b:de:6a:
d8:0e:7f:34:25:38:f8:0f:c5:c0:dc:d3:85:38:5b:
8b:76:5f:55:90:61:d2:6a:01:55:78:61:04:03:41:
fd:a7:1c:3a:44:97:45:48:38:37:11:18:c9:57:fc:
f1:1b:29:0b:fe:ce:10:d9:62:a2:b0:95:c4:d5:67:
eb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B9:FF:D2:E7:9A:64:74:DE:C0:4E:BA:D7:1B:1A:EA:74:58:FF:27
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400958.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.171.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:af:71:c7:33:43:fb:45:ad:e1:3f:fe:cb:7c:92:21:b9:c0:
bb:9e:3a:fc:e1:a2:13:da:02:da:e3:bb:b9:6a:3a:27:87:56:
f0:2f:64:62:4c:ac:20:a5:f3:2d:c2:63:5d:ff:a4:9e:8d:44:
e7:01:28:6e:39:fd:f5:ee:a5:08:b1:d1:c6:20:98:d6:6e:ba:
4e:1b:17:48:e1:cd:cd:89:e6:f3:3d:64:b6:76:51:33:50:a1:
a1:d2:17:72:34:b1:e4:52:80:be:b2:92:d6:9f:ed:aa:65:d8:
66:13:56:d9:a0:83:28:a6:2e:fe:be:ea:9b:fe:b3:e0:de:4f:
5c:6d:6c:bd:a8:31:b3:1e:31:46:86:fb:4a:7e:68:b3:ec:c5:
e4:0f:47:7c:a2:62:ba:2a:32:dd:76:eb:69:c3:8a:3e:b4:62:
c2:1e:41:19:2a:c5:5d:81:40:be:ca:2f:a9:0f:19:58:90:c7:
80:13:ea:3b:b4:cd:31:9e:fb:f9:0c:46:53:d0:96:7e:10:7f:
0a:d4:06:cb:63:88:35:23:49:81:55:13:22:fe:22:03:d6:a8:
b0:b9:d5:d1:20:e3:34:16:7d:d7:97:5e:fd:1c:96:fb:3a:8e:
43:e1:35:d4:07:37:60:f0:70:c5:12:ed:69:56:4c:ee:58:cd:
ee:a0:df:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:57:59 2025 by rpki-client