Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: l7UHruMDYxAxtoyH0O7kiTyn0l7wBeRGp1KWU+o6apw=
Subject key identifier: E4:A4:96:0F:CD:A3:23:39:A0:55:30:C9:70:5F:1D:6E:B8:8D:36:08
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 1D11ED27684B3EF5BD36D3C171A650F05B6C5B68
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
Signing time: Fri 31 Jan 2025 00:01:18 +0000
ROA not before: Thu 30 Jan 2025 23:56:18 +0000
ROA not after: Fri 30 Jan 2026 00:01:18 +0000
asID: 834
IP address blocks: 157.254.144.0/21 maxlen: 24
157.254.175.0/24 maxlen: 24
157.254.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:11:ed:27:68:4b:3e:f5:bd:36:d3:c1:71:a6:50:f0:5b:6c:5b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jan 30 23:56:18 2025 GMT
Not After : Jan 30 00:01:18 2026 GMT
Subject: CN=E4A4960FCDA32339A05530C9705F1D6EB88D3608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e9:83:e0:64:9e:dd:aa:fc:9c:2e:b2:5b:47:
aa:de:84:5b:31:3c:d8:c1:24:d1:e8:21:2f:90:69:
53:32:fa:d5:1c:f7:67:82:ff:85:90:2a:8e:90:7a:
a0:68:b8:89:3e:23:55:25:de:3f:7d:fd:c7:d1:92:
49:9e:3d:e3:dc:15:43:dc:01:fd:3b:94:f4:c6:69:
9a:11:5a:1b:a6:ba:75:42:34:90:47:81:08:a2:c7:
40:43:69:26:0a:5d:ad:e1:56:46:39:bd:34:cf:56:
cf:9c:d9:5b:5f:e8:75:87:7c:15:50:53:29:57:7b:
91:84:c8:e9:95:c4:48:f8:ec:71:8c:3f:4c:68:38:
a9:83:06:b0:80:6e:e8:17:c2:5f:9f:98:a7:3f:cc:
97:20:03:11:33:14:e4:0c:34:14:90:9e:e4:91:fe:
17:ff:d0:e4:e9:16:5f:d0:af:45:f5:08:a2:fd:bc:
04:a6:72:c8:6f:47:db:5c:06:3a:6b:80:48:d3:75:
9f:30:f9:3e:f0:a6:dc:6b:cd:82:84:c2:4a:b2:ba:
66:d3:3e:dd:e8:58:76:78:d7:f2:e7:7a:f5:b8:8f:
91:7d:1e:02:f2:c0:e8:68:36:4b:91:88:1d:34:96:
05:6d:65:b4:ee:54:e4:2f:1e:e0:ea:d3:b6:7c:36:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A4:96:0F:CD:A3:23:39:A0:55:30:C9:70:5F:1D:6E:B8:8D:36:08
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.144.0/21
157.254.175.0/24
157.254.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:82:d0:f7:af:58:e0:e0:8f:35:91:2a:56:21:85:ad:11:8a:
e8:34:3c:16:43:58:42:ff:b9:b2:82:4a:2a:77:c1:8d:3e:12:
b7:b8:1b:fb:58:32:53:2c:0c:c5:df:67:7e:da:70:a6:91:a9:
59:6c:fc:ef:e8:76:39:fa:24:e2:31:e9:da:fe:f9:bb:67:ea:
a2:17:73:48:4f:fb:0a:34:b5:9a:04:7e:5b:26:ff:c1:85:a8:
74:78:03:d0:89:65:e4:ad:0d:5f:1f:d7:1e:05:a7:67:95:b0:
25:3e:04:e6:01:75:bb:16:21:71:ec:44:bf:ab:5c:0d:4c:fe:
80:43:0a:6c:fc:29:2d:ce:7b:87:58:b9:7f:a4:93:58:b5:6b:
68:b1:ce:7e:95:57:74:9d:6c:89:0e:e3:d9:01:08:f1:49:b8:
52:ab:20:8f:cd:41:37:67:d2:4b:08:12:82:e7:72:9b:d2:c3:
16:20:b8:bd:31:61:b0:ca:6d:ec:fa:06:36:44:12:36:bb:bb:
62:06:46:5f:b8:5f:4a:ba:e9:2d:bb:20:a8:ab:79:1c:c5:7a:
55:c6:c8:91:4b:75:1c:d8:b5:19:15:c4:63:0a:66:19:00:96:
02:4c:0f:c6:d7:df:bd:96:31:c8:8b:32:6d:e1:6e:62:5d:2b:
21:db:73:94
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIUHRHtJ2hLPvW9NtPBcaZQ8FtsW2gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMTMwMjM1NjE4WhcNMjYwMTMwMDAwMTE4
WjAzMTEwLwYDVQQDEyhFNEE0OTYwRkNEQTMyMzM5QTA1NTMwQzk3MDVGMUQ2RUI4
OEQzNjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjemD4GSe3ar8
nC6yW0eq3oRbMTzYwSTR6CEvkGlTMvrVHPdngv+FkCqOkHqgaLiJPiNVJd4/ff3H
0ZJJnj3j3BVD3AH9O5T0xmmaEVobprp1QjSQR4EIosdAQ2kmCl2t4VZGOb00z1bP
nNlbX+h1h3wVUFMpV3uRhMjplcRI+OxxjD9MaDipgwawgG7oF8Jfn5inP8yXIAMR
MxTkDDQUkJ7kkf4X/9Dk6RZf0K9F9Qii/bwEpnLIb0fbXAY6a4BI03WfMPk+8Kbc
a82ChMJKsrpm0z7d6Fh2eNfy53r1uI+RfR4C8sDoaDZLkYgdNJYFbWW07lTkLx7g
6tO2fDb4EwIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFOSklg/NoyM5oFUwyXBfHW64
jTYIMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggr
BgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEA53+kAMEAJ3+rwMEAJ3+4DANBgkqhkiG
9w0BAQsFAAOCAQEAfoLQ969Y4OCPNZEqViGFrRGK6DQ8FkNYQv+5soJKKnfBjT4S
t7gb+1gyUywMxd9nftpwppGpWWz87+h2Ofok4jHp2v75u2fqohdzSE/7CjS1mgR+
Wyb/wYWodHgD0Ill5K0NXx/XHgWnZ5WwJT4E5gF1uxYhcexEv6tcDUz+gEMKbPwp
Lc57h1i5f6STWLVraLHOfpVXdJ1siQ7j2QEI8Um4Uqsgj81BN2fSSwgSgudym9LD
FiC4vTFhsMpt7PoGNkQSNru7YgZGX7hfSrrpLbsgqKt5HMV6VcbIkUt1HNi1GRXE
YwpmGQCWAkwPxtffvZYxyIsybeFuYl0rIdtzlA==
-----END CERTIFICATE-----
Generated at Mon May 5 07:11:22 2025 by rpki-client