Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: jblETvpw3aPahe+K4brgp130npOhXVw/HaL9zhCiLRk=
Subject key identifier: 57:28:A7:F0:70:25:49:DD:44:76:CE:9B:24:58:C4:28:B0:38:23:CC
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 56A442BEB283C71EFF61C9368768A62A2AC68B3A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152179.roa
Signing time: Wed 16 Oct 2024 06:58:32 +0000
ROA not before: Wed 16 Oct 2024 06:53:32 +0000
ROA not after: Wed 15 Oct 2025 06:58:32 +0000
asID: 152179
IP address blocks: 192.227.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a4:42:be:b2:83:c7:1e:ff:61:c9:36:87:68:a6:2a:2a:c6:8b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Oct 16 06:53:32 2024 GMT
Not After : Oct 15 06:58:32 2025 GMT
Subject: CN=5728A7F0702549DD4476CE9B2458C428B03823CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:85:f3:7c:e3:7d:00:67:58:c9:e8:bb:b7:
29:f9:35:35:a5:1e:13:f6:18:07:a3:c0:4f:e1:86:
db:ca:1f:39:9a:99:2e:42:14:51:85:2f:06:70:c6:
cc:72:4a:9b:04:a6:8a:48:94:2d:e4:16:0f:0c:d6:
72:38:9a:fc:2f:c0:96:f8:5a:50:ef:5e:3a:79:c3:
58:26:56:e3:86:50:cb:d1:1d:23:6d:ed:8a:9f:a4:
d5:f5:4d:1b:c8:10:db:a1:b3:51:65:8f:9f:1e:d7:
86:94:15:ad:c6:8c:49:51:f2:99:75:6c:ca:27:1e:
8f:e7:ac:39:13:61:ca:28:40:d9:6a:25:7e:0d:24:
56:ca:4a:41:1e:63:28:c4:a3:57:5e:24:83:4d:5c:
24:a1:9f:0b:79:3e:a5:fb:6a:09:87:54:f3:1a:4e:
68:0e:ae:b6:cf:c9:49:74:63:76:d4:d8:4b:50:16:
d4:bf:21:04:54:81:13:3e:ce:b4:81:0c:41:3c:01:
1b:90:50:d6:a8:e0:d5:9d:71:6c:ab:de:0d:ad:68:
11:0f:6b:43:04:b7:03:8f:2f:c4:c2:2e:4c:ca:18:
6c:1a:66:e1:9d:e6:86:21:a6:3b:e3:43:9f:af:0e:
99:d9:eb:fc:d4:71:42:c5:d1:d0:77:66:cc:63:46:
1e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:28:A7:F0:70:25:49:DD:44:76:CE:9B:24:58:C4:28:B0:38:23:CC
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.227.250.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ee:f0:1f:88:5e:50:a5:55:4c:4e:b5:94:eb:41:1e:bb:04:
29:c2:b1:c8:21:af:f1:84:10:5a:19:f0:f1:62:8e:3d:71:15:
e7:b2:61:3a:b5:b6:94:7f:71:58:4d:ed:7f:ec:04:7b:2f:65:
a0:5d:d4:48:0d:e2:11:0e:5f:c5:3b:84:c9:2e:7f:a4:d9:98:
a4:66:dd:79:3f:a4:db:cb:94:76:fa:60:f4:ab:92:83:95:b7:
67:95:1a:9e:3b:bb:df:ee:db:96:e5:26:91:e6:f7:8d:ae:96:
f7:f9:12:2f:91:0e:0f:73:03:70:e9:5e:25:57:c8:83:78:a1:
e5:cf:8f:62:d1:69:49:fe:b3:a1:2e:cf:0e:ce:c4:1b:50:77:
85:60:8d:ce:7e:e4:8b:6a:d9:ff:87:85:35:35:19:94:ce:92:
ce:7f:c7:4b:7f:33:11:c6:f5:34:52:41:9d:cd:d1:4c:dd:d3:
9d:f4:c6:a2:8d:81:f1:9e:bb:07:69:1c:1f:02:84:cc:59:4b:
ee:fe:b2:dd:9b:d3:b7:f7:0f:1b:c6:1b:1b:3e:33:67:ca:b7:
e0:d7:fb:e8:88:81:1c:4c:87:19:9a:fd:fd:4a:a3:6e:d9:4e:
31:93:4a:f5:0d:50:94:7e:b7:39:98:dc:0d:93:d9:0d:74:a1:
6c:1a:e5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:22 2025 by rpki-client