Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: QkPjwBATxTTLLeYr2fWgfaGXtVqRD3UVXk1fZQQ205s=
Subject key identifier: C7:0F:E1:E0:F1:21:8D:E2:99:BF:FC:B5:FB:49:F6:C6:E6:16:39:B0
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 171320C8C2E07661F5D00885CE9CA16D634EE8FE
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa
Signing time: Tue 31 Dec 2024 01:01:12 +0000
ROA not before: Tue 31 Dec 2024 00:56:12 +0000
ROA not after: Tue 30 Dec 2025 01:01:12 +0000
asID: 16509
IP address blocks: 157.53.253.0/24 maxlen: 24
157.53.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:13:20:c8:c2:e0:76:61:f5:d0:08:85:ce:9c:a1:6d:63:4e:e8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Dec 31 00:56:12 2024 GMT
Not After : Dec 30 01:01:12 2025 GMT
Subject: CN=C70FE1E0F1218DE299BFFCB5FB49F6C6E61639B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:99:2e:ed:86:9f:1e:2f:67:d2:a9:81:79:
c4:63:9a:23:fd:49:2a:de:80:9f:07:97:3d:10:43:
e4:a6:1a:e9:87:59:23:75:03:03:b0:37:68:50:97:
ec:75:e7:34:ab:35:84:34:19:22:68:3b:7e:97:05:
b1:47:de:15:c0:e6:92:05:94:25:53:67:59:ec:c8:
7e:33:a2:99:d9:71:65:98:93:8a:52:b9:a0:9b:3f:
49:e6:90:43:36:cd:ee:84:9a:fd:7c:3b:25:0c:c6:
ce:ed:a9:36:5b:ab:a2:e9:10:5d:a9:3f:d4:3e:5a:
3d:51:34:66:44:74:6b:ff:e0:09:ae:aa:f2:cc:e5:
7b:93:0f:9c:db:ef:2b:5d:24:5b:37:c2:ab:13:5c:
ff:b6:93:01:f3:7d:3f:2f:02:09:32:4a:a8:4d:5d:
73:b6:8f:96:ee:64:d1:cc:77:f0:a6:f2:fa:ef:67:
06:b8:f0:47:ad:88:10:2b:62:40:f6:b9:68:bf:61:
5e:02:2d:6c:fc:cd:b6:68:cb:e8:1c:c5:28:ab:7a:
5d:56:6a:ec:8d:2a:7e:6a:8d:91:3a:93:cb:3a:98:
b5:43:9c:ea:31:d4:cd:b6:e0:a2:c2:02:d3:ca:97:
a9:b9:03:21:05:20:d5:cd:d9:4a:4a:cf:70:e6:cb:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0F:E1:E0:F1:21:8D:E2:99:BF:FC:B5:FB:49:F6:C6:E6:16:39:B0
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.53.253.0-157.53.255.255
Signature Algorithm: sha256WithRSAEncryption
77:33:5f:6e:57:55:61:44:28:e5:f5:58:a1:93:01:9d:14:99:
2a:98:e7:7c:c4:94:ba:ea:6a:e2:3f:8b:15:82:3a:69:9e:05:
c4:2a:89:ac:55:0c:05:4e:5c:20:52:3d:86:5c:b6:9e:78:73:
c6:9e:48:22:98:16:05:db:07:1c:e2:78:db:9f:cf:67:ff:49:
a0:fc:d1:5e:47:d2:e0:89:be:9c:4c:5c:ff:65:6a:c9:ce:e5:
7f:02:e3:b1:4a:2a:ab:54:41:dd:59:c0:e2:95:a2:91:24:f1:
1e:c8:d7:e8:4b:c3:5e:a6:02:ba:dd:d6:80:4a:28:2c:ba:fb:
63:65:60:6a:60:bb:6a:2a:80:da:b4:e9:af:b4:47:37:88:18:
a7:2a:3b:53:a4:1f:31:2b:07:81:b2:3b:92:38:16:df:7b:ad:
15:7f:e8:42:25:42:c6:e6:59:1a:a2:a5:18:60:9c:2e:6a:df:
e7:39:e6:96:70:6e:7f:6b:06:b3:07:16:3e:2d:d6:b2:ce:74:
37:1b:5a:83:d8:93:3f:6f:ee:e2:56:e9:4c:89:d8:2c:b7:c7:
35:67:7e:47:ed:b0:26:82:e4:ec:d2:f3:d5:84:4e:2a:75:aa:
92:e3:c3:8a:2d:ed:ac:0d:e5:e4:13:dd:cf:d6:24:25:e4:e6:
66:03:72:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:16 2025 by rpki-client