Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7018.roa
File: AS7018.roa (raw, json)
Hash identifier: A02EEC0TLMj6PtEoDZzefvDY9AkVNzpIhfe2xm4U2FY=
Subject key identifier: 05:55:5B:EE:55:95:78:67:7D:0C:09:03:F3:B0:8D:2D:AE:0A:80:85
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 5BBA21CCEAE930FB041AA698165FF38A31D04C99
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7018.roa
Signing time: Fri 31 Jan 2025 00:00:11 +0000
ROA not before: Thu 30 Jan 2025 23:55:11 +0000
ROA not after: Fri 30 Jan 2026 00:00:11 +0000
asID: 7018
IP address blocks: 157.254.176.0/23 maxlen: 24
157.254.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ba:21:cc:ea:e9:30:fb:04:1a:a6:98:16:5f:f3:8a:31:d0:4c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jan 30 23:55:11 2025 GMT
Not After : Jan 30 00:00:11 2026 GMT
Subject: CN=05555BEE559578677D0C0903F3B08D2DAE0A8085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:9a:e2:b9:93:3b:2d:40:6a:9d:66:46:40:
51:53:95:d4:f6:62:0c:bd:3a:6f:db:e3:22:31:bb:
ec:39:f0:5b:47:e2:f9:07:ea:0c:5c:47:47:cc:7c:
a8:fc:38:98:6f:0e:05:f2:63:ea:f9:e0:e6:d7:15:
0f:6e:9e:4a:ec:cc:9c:3d:24:51:ae:b0:f8:a5:7c:
19:ca:04:0e:b8:fb:b6:40:c4:a8:74:48:cc:c3:1d:
5d:71:85:e9:97:a0:d8:a3:43:e5:96:46:c8:e7:ff:
d4:0b:32:f4:f2:41:6b:a3:3d:d9:8b:02:76:ff:d1:
93:8b:d8:a0:2c:40:61:95:aa:c0:3c:24:35:a5:c5:
e6:d2:39:b9:42:95:de:f7:1a:4e:54:fb:40:ed:b9:
5b:06:4e:81:35:47:34:b8:15:75:f8:14:95:d9:d2:
41:9b:9e:29:b5:1a:47:a8:15:12:80:d3:d3:88:d8:
fe:03:69:c1:59:20:0b:a0:7b:4a:b0:42:bf:a8:df:
c2:99:64:a7:77:ab:d2:ea:71:06:df:4e:74:c7:8f:
22:58:c8:84:a2:39:38:52:10:6c:15:cf:ae:ff:4c:
f9:f5:1c:d0:2e:50:2d:4f:00:63:e7:33:73:b0:21:
a2:d6:29:cf:07:ad:6c:d7:39:02:9f:0d:66:98:64:
92:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:55:5B:EE:55:95:78:67:7D:0C:09:03:F3:B0:8D:2D:AE:0A:80:85
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.176.0/23
157.254.254.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:17:14:8f:9c:87:ff:5d:4c:69:6a:24:97:09:5c:a7:7a:b9:
19:38:0f:70:e5:e4:9f:ad:ed:d4:1d:a9:b0:91:a9:4d:f0:b9:
e6:98:3b:f3:44:4c:c4:51:29:3e:8b:cb:ae:12:35:2d:32:76:
c0:21:e5:a2:6c:63:21:53:75:f3:f8:bd:ae:a6:3b:61:83:01:
4f:db:e9:ac:74:25:83:6c:40:8c:aa:18:a6:5b:8d:86:55:bf:
c3:a0:18:89:9d:d9:48:c4:87:94:6e:c6:12:d6:16:06:c0:0d:
c6:84:c4:da:c4:68:28:34:f6:4b:cb:54:b4:c0:76:61:08:83:
a2:8e:46:6d:bf:c1:00:38:94:12:c6:45:b7:4a:2b:97:d3:a6:
e5:f1:0f:2b:0e:4a:38:ac:dd:ce:8d:77:0c:33:70:39:01:77:
12:e3:72:8e:94:a1:10:8c:be:5b:7e:31:96:6d:e3:b0:2a:ba:
3f:cf:2f:b0:ad:8f:1c:91:93:91:79:5f:cf:c6:78:1b:19:27:
1d:e9:e0:0d:e2:d1:2b:a5:61:55:68:50:e0:4c:75:4e:c9:54:
25:65:4a:5b:77:9e:9f:41:a6:44:da:81:e5:0d:ab:22:ae:65:
3c:b6:8a:b1:e3:39:31:5b:16:9f:ab:4e:b7:ff:b7:05:4e:4b:
6f:e6:ef:ad
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUW7ohzOrpMPsEGqaYFl/zijHQTJkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMTMwMjM1NTExWhcNMjYwMTMwMDAwMDEx
WjAzMTEwLwYDVQQDEygwNTU1NUJFRTU1OTU3ODY3N0QwQzA5MDNGM0IwOEQyREFF
MEE4MDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFOa4rmTOy1A
ap1mRkBRU5XU9mIMvTpv2+MiMbvsOfBbR+L5B+oMXEdHzHyo/DiYbw4F8mPq+eDm
1xUPbp5K7MycPSRRrrD4pXwZygQOuPu2QMSodEjMwx1dcYXpl6DYo0PllkbI5//U
CzL08kFroz3ZiwJ2/9GTi9igLEBhlarAPCQ1pcXm0jm5QpXe9xpOVPtA7blbBk6B
NUc0uBV1+BSV2dJBm54ptRpHqBUSgNPTiNj+A2nBWSALoHtKsEK/qN/CmWSnd6vS
6nEG3050x48iWMiEojk4UhBsFc+u/0z59RzQLlAtTwBj5zNzsCGi1inPB61s1zkC
nw1mmGSSWQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFAVVW+5VlXhnfQwJA/OwjS2u
CoCFMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzcwMTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYI
KwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAGd/rADBAGd/v4wDQYJKoZIhvcNAQEL
BQADggEBAKQXFI+ch/9dTGlqJJcJXKd6uRk4D3Dl5J+t7dQdqbCRqU3wueaYO/NE
TMRRKT6Ly64SNS0ydsAh5aJsYyFTdfP4va6mO2GDAU/b6ax0JYNsQIyqGKZbjYZV
v8OgGImd2UjEh5RuxhLWFgbADcaExNrEaCg09kvLVLTAdmEIg6KORm2/wQA4lBLG
RbdKK5fTpuXxDysOSjis3c6NdwwzcDkBdxLjco6UoRCMvlt+MZZt47Aquj/PL7Ct
jxyRk5F5X8/GeBsZJx3p4A3i0SulYVVoUOBMdU7JVCVlSlt3np9BpkTageUNqyKu
ZTy2irHjOTFbFp+rTrf/twVOS2/m760=
-----END CERTIFICATE-----
Generated at Wed May 7 22:14:47 2025 by rpki-client