Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS151872.roa
File: AS151872.roa (raw, json)
Hash identifier: tQtkQTbnPluG4A7SC+z9nyb1MSGiosESgUPIPmxa42E=
Subject key identifier: FD:46:BF:A4:FA:08:99:68:7A:0B:7B:A4:A3:61:38:6A:03:52:18:28
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 267C469538E8AFC50C8EBD5D60326BD1DE8DD768
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS151872.roa
Signing time: Tue 11 Feb 2025 00:57:20 +0000
ROA not before: Tue 11 Feb 2025 00:52:20 +0000
ROA not after: Tue 10 Feb 2026 00:57:20 +0000
asID: 151872
IP address blocks: 107.173.8.0/24 maxlen: 24
192.227.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:7c:46:95:38:e8:af:c5:0c:8e:bd:5d:60:32:6b:d1:de:8d:d7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Feb 11 00:52:20 2025 GMT
Not After : Feb 10 00:57:20 2026 GMT
Subject: CN=FD46BFA4FA0899687A0B7BA4A361386A03521828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:9f:da:a1:01:5a:68:8a:e0:79:75:35:da:
9f:e4:6c:8c:e0:74:8d:0d:85:a9:ff:3c:94:86:89:
e7:90:b5:5e:7e:fd:44:57:b8:71:06:f8:72:83:06:
75:15:ae:74:9b:09:41:2c:61:af:d9:28:09:0a:cd:
2e:af:84:c9:8a:5f:03:30:db:5f:a4:8b:e9:0c:f9:
20:01:4d:62:0f:4c:7d:40:8e:44:ed:8e:7a:51:49:
b8:c7:d3:39:44:80:e1:86:eb:8a:ae:a1:f0:7b:ae:
b4:fb:b0:44:46:cb:83:45:23:3c:72:0c:b1:1d:44:
b4:1c:27:82:1b:73:aa:0b:21:7e:e2:81:be:1e:76:
f9:1b:0d:f2:3d:3f:58:e2:d9:58:dd:09:58:8d:5a:
b4:07:ba:81:04:bd:ba:46:20:4c:45:4f:a0:c2:63:
5e:39:1d:f4:8e:3a:96:ef:b6:76:b6:5d:ee:1f:b4:
a7:cf:2b:58:e5:a9:ef:13:b8:be:84:a4:6d:29:5f:
c9:23:bb:bb:82:80:52:70:ab:90:be:f0:ab:3a:0d:
7c:07:c2:d0:e7:1b:ad:3a:d4:32:55:ab:2b:f2:0e:
f8:09:34:57:0f:ca:7e:63:74:53:e7:14:96:e6:80:
d4:da:97:a9:67:98:86:56:f8:4f:da:5c:5a:d9:37:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:46:BF:A4:FA:08:99:68:7A:0B:7B:A4:A3:61:38:6A:03:52:18:28
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS151872.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.173.8.0/24
192.227.201.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ea:8d:b7:bc:f8:0e:6b:e4:0a:b6:4d:b0:8a:49:f3:a5:2f:
f7:bb:5a:d3:1d:3b:56:64:2f:d5:7f:03:a6:69:ae:83:de:b0:
e0:0d:52:b4:d8:2b:e1:a3:a8:d4:ec:83:c3:96:0c:c6:8f:45:
50:06:d8:81:dd:aa:92:4a:4c:fd:71:a2:87:4f:8c:91:d5:49:
c1:d8:52:55:12:5b:24:43:b5:17:01:e1:1e:7f:26:3f:58:bf:
99:80:93:2a:8d:d8:f6:0b:d0:8c:4c:02:90:a1:65:e5:bd:77:
59:3b:25:7b:6e:91:ea:97:d8:50:27:39:ea:5f:31:a6:b4:a0:
f0:1c:cf:bc:32:9c:bf:b5:aa:0e:50:ab:00:8d:14:f9:29:22:
2c:a9:1b:02:7f:e0:3b:94:fe:ff:92:da:ae:be:b1:80:0e:6d:
b7:6d:30:b0:2c:ee:06:b5:be:4e:68:73:fd:b2:4c:ae:5f:ca:
3b:bf:d2:46:2e:e9:bb:f7:a0:e8:0b:6e:00:88:ff:70:56:2c:
bc:ed:02:f4:d1:28:09:df:19:f8:eb:f1:fc:f9:e4:5e:f8:28:
03:8f:c3:f3:8a:b0:28:51:3e:af:ec:e9:3d:e4:d8:dd:1c:d0:
77:93:13:c5:4f:0a:7b:cf:e9:34:7f:d2:73:10:4d:c0:10:0a:
a9:ed:a8:9d
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUJnxGlTjor8UMjr1dYDJr0d6N12gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMjExMDA1MjIwWhcNMjYwMjEwMDA1NzIw
WjAzMTEwLwYDVQQDEyhGRDQ2QkZBNEZBMDg5OTY4N0EwQjdCQTRBMzYxMzg2QTAz
NTIxODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9qf2qEBWmiK
4Hl1Ndqf5GyM4HSNDYWp/zyUhonnkLVefv1EV7hxBvhygwZ1Fa50mwlBLGGv2SgJ
Cs0ur4TJil8DMNtfpIvpDPkgAU1iD0x9QI5E7Y56UUm4x9M5RIDhhuuKrqHwe660
+7BERsuDRSM8cgyxHUS0HCeCG3OqCyF+4oG+Hnb5Gw3yPT9Y4tlY3QlYjVq0B7qB
BL26RiBMRU+gwmNeOR30jjqW77Z2tl3uH7SnzytY5anvE7i+hKRtKV/JI7u7goBS
cKuQvvCrOg18B8LQ5xutOtQyVasr8g74CTRXD8p+Y3RT5xSW5oDU2pepZ5iGVvhP
2lxa2TfMnQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFP1Gv6T6CJloegt7pKNhOGoD
UhgoMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzE1MTg3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGutCAMEAMDjyTANBgkqhkiG9w0B
AQsFAAOCAQEAleqNt7z4DmvkCrZNsIpJ86Uv97ta0x07VmQv1X8Dpmmug96w4A1S
tNgr4aOo1OyDw5YMxo9FUAbYgd2qkkpM/XGih0+MkdVJwdhSVRJbJEO1FwHhHn8m
P1i/mYCTKo3Y9gvQjEwCkKFl5b13WTsle26R6pfYUCc56l8xprSg8BzPvDKcv7Wq
DlCrAI0U+SkiLKkbAn/gO5T+/5Larr6xgA5tt20wsCzuBrW+Tmhz/bJMrl/KO7/S
Ri7pu/eg6AtuAIj/cFYsvO0C9NEoCd8Z+Ovx/PnkXvgoA4/D84qwKFE+r+zpPeTY
3RzQd5MTxU8Ke8/pNH/ScxBNwBAKqe2onQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:20 2025 by rpki-client