Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS262851.roa
File: AS262851.roa (raw, json)
Hash identifier: 50i9X7uhwHo3RPl9QlHDw8pbtZEXiaE5QNLSd5X5duE=
Subject key identifier: 69:B7:94:85:BE:31:0B:3B:BF:85:D9:CA:72:CD:6C:F1:33:4B:AF:29
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 5093679165D847E4716D2E09F0CF3FA813D8AFEA
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS262851.roa
Signing time: Thu 13 Mar 2025 20:58:43 +0000
ROA not before: Thu 13 Mar 2025 20:53:43 +0000
ROA not after: Thu 12 Mar 2026 20:58:43 +0000
asID: 262851
IP address blocks: 107.172.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:93:67:91:65:d8:47:e4:71:6d:2e:09:f0:cf:3f:a8:13:d8:af:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Mar 13 20:53:43 2025 GMT
Not After : Mar 12 20:58:43 2026 GMT
Subject: CN=69B79485BE310B3BBF85D9CA72CD6CF1334BAF29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:2e:51:a6:61:91:85:96:5b:42:98:a3:bc:
21:69:a9:2c:b7:41:d0:be:cd:cc:69:c0:20:bf:ff:
a7:f6:0c:eb:a5:10:71:a0:b7:70:23:7a:bf:16:2e:
e6:e4:a2:f4:dc:d5:bc:63:3d:5e:24:ce:54:94:3f:
53:de:a9:09:7a:6a:e8:fd:5a:f7:e2:f1:ae:e0:f9:
8a:b2:ee:e5:f1:42:2f:29:5f:9e:53:e1:3b:b0:3f:
c1:09:5f:ae:fe:d9:8a:0c:cf:4f:db:91:f8:7b:49:
b8:8a:92:d9:02:6b:75:2e:1f:81:c1:9c:8d:85:6a:
91:70:9b:a2:cb:8c:18:b7:60:13:d9:93:53:9b:25:
75:e8:15:33:d3:30:2f:48:c2:a8:7b:7b:4b:1a:57:
36:74:ed:5f:a4:3a:cd:96:e7:ee:54:b0:d8:cc:7b:
34:99:69:06:00:98:68:ac:50:50:3d:5c:ba:5a:2a:
99:83:0d:c2:f7:ca:ad:df:6f:1e:3c:d6:ed:af:8b:
42:fd:5d:17:a1:9a:ae:dc:60:43:bf:05:6c:3a:ea:
38:34:3e:14:14:62:66:15:5d:5d:5f:44:49:28:02:
8f:04:99:b0:66:f0:de:b3:dc:65:6c:a5:bd:9d:d9:
eb:cb:44:93:69:0c:51:72:4d:a5:3c:89:58:14:62:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B7:94:85:BE:31:0B:3B:BF:85:D9:CA:72:CD:6C:F1:33:4B:AF:29
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS262851.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.172.152.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ec:f5:dc:94:e8:ff:ac:f5:82:2e:a7:17:3c:ae:e5:93:93:
d8:ad:c5:41:ab:e3:bb:a9:40:41:7a:9b:30:26:8d:cf:51:b0:
6e:9e:17:c2:03:b1:a5:2b:c2:47:1c:11:97:ef:d1:64:28:7b:
eb:32:c4:7e:21:42:69:dd:15:ce:6c:b9:3b:7d:96:e6:f3:04:
ac:5e:fe:30:59:dd:94:c5:62:11:fe:c7:0f:fe:0b:44:22:93:
67:61:f1:74:bb:56:76:5f:95:ef:21:81:49:f1:d0:6e:c3:41:
16:4a:e5:fb:02:37:93:5c:65:d0:6b:22:54:7b:e4:5d:a9:a4:
b5:1a:17:ea:34:89:c9:fe:9b:e3:b2:9e:e6:f8:dc:34:f4:84:
bb:01:6c:c4:1b:87:76:35:c7:94:1f:4c:c3:39:0c:e1:56:37:
fc:d6:45:e0:ad:1f:fd:fe:61:f9:16:34:7c:ee:33:be:f4:17:
b6:bc:b8:97:49:3f:60:80:fd:5c:a8:38:dd:cb:6b:7c:86:ce:
8d:95:ce:c8:6d:5a:2c:18:dd:48:3e:78:ca:53:e7:ef:53:ae:
1e:1d:3c:88:0b:1e:63:21:3a:9a:ac:a8:17:99:c5:b2:7b:2a:
9b:e6:16:75:5a:2f:45:bd:67:16:96:27:a7:7d:06:50:5e:a5:
29:76:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:21 2025 by rpki-client