Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS134176.roa
File: AS134176.roa (raw, json)
Hash identifier: iIc5UXARGuHfwjZpa5OGkJroZt2cu5hL+REXKxIMikQ=
Subject key identifier: E7:C2:B1:79:4D:C8:D9:83:63:54:2D:32:F0:C8:95:E8:61:16:59:D2
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 0D87836F7131EA5707A3EBA0B82EFB273A5CC230
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS134176.roa
Signing time: Thu 16 Jan 2025 06:52:54 +0000
ROA not before: Thu 16 Jan 2025 06:47:54 +0000
ROA not after: Thu 15 Jan 2026 06:52:54 +0000
asID: 134176
IP address blocks: 157.254.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:87:83:6f:71:31:ea:57:07:a3:eb:a0:b8:2e:fb:27:3a:5c:c2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jan 16 06:47:54 2025 GMT
Not After : Jan 15 06:52:54 2026 GMT
Subject: CN=E7C2B1794DC8D98363542D32F0C895E8611659D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:c3:79:ab:d3:02:26:0a:97:a9:c1:6b:34:
72:55:ad:8d:b0:66:a3:9d:84:29:d3:80:11:59:91:
46:b1:14:f8:8a:9d:fe:bc:15:8f:ae:68:b3:ce:43:
ee:31:0a:e0:bd:da:bb:e1:c0:62:13:10:9d:7b:45:
f3:4b:0e:68:e4:5d:36:45:14:4c:5e:7d:0c:43:b7:
3f:72:60:d9:c9:bd:7a:14:3c:c4:bc:66:40:ce:be:
a6:fa:1f:67:33:00:8a:79:80:e1:b1:ad:cf:eb:c4:
db:af:8f:7f:5c:d4:ba:69:ca:fb:62:c8:32:4d:97:
77:25:ad:49:5f:8c:2e:de:c2:e3:d9:67:cc:8e:c7:
b5:d3:82:da:e1:a0:45:26:d5:a6:f1:b7:dd:4e:d9:
34:d7:61:be:95:55:4c:bb:6c:25:d3:85:5f:33:08:
21:49:f1:e6:55:c8:6b:9c:2f:82:4f:17:c2:69:78:
7c:83:3c:16:f7:a5:43:49:47:90:0e:b2:7f:46:3b:
4b:e9:19:6d:ab:d3:d4:c0:3c:1e:b3:8c:80:ee:2a:
0a:b7:95:35:70:6c:5a:97:f0:26:bb:8d:c6:e4:13:
f0:33:bb:78:7d:69:1c:59:8e:c1:a2:0f:34:46:40:
c6:83:02:5f:d1:c7:ee:d6:ac:d5:96:ec:90:e2:8b:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C2:B1:79:4D:C8:D9:83:63:54:2D:32:F0:C8:95:E8:61:16:59:D2
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS134176.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.27.0/24
Signature Algorithm: sha256WithRSAEncryption
75:47:59:0f:ab:67:a2:b3:9c:f9:6b:02:56:3e:7e:38:4d:de:
38:32:49:21:64:ac:3c:ba:15:d8:cb:be:40:7f:5d:e9:bd:5a:
60:45:c0:38:1c:0e:3a:53:99:b5:29:0d:48:2b:51:5b:ce:5a:
ee:70:61:30:68:dc:66:b9:eb:ba:cd:8f:8a:bd:92:87:c1:47:
1a:f6:a9:0d:c6:dd:f3:24:1d:1b:07:f3:59:a0:c0:1a:e5:aa:
7c:3e:73:df:7e:63:ed:d3:12:07:94:06:9b:c1:c3:54:76:9d:
4b:07:dd:15:5f:05:48:26:5c:ad:c7:73:cf:fc:fd:bc:93:19:
98:26:7b:7c:35:c5:f6:48:03:49:6a:7b:4d:0f:40:89:02:b7:
77:30:48:c7:50:db:b5:37:dd:14:f6:4c:ef:2e:0e:a7:48:d2:
0e:3f:46:48:d3:a6:39:f7:bc:ca:3c:00:4c:3c:54:0f:9d:20:
12:a2:6c:37:11:3f:00:95:b4:f7:04:eb:9e:a1:10:23:69:53:
a4:b1:82:0c:e5:02:4f:3c:c7:49:01:43:6f:ea:f8:6e:30:82:
f5:d6:8e:78:1d:6c:2f:97:f7:df:0d:10:51:0f:0d:bc:2b:58:
81:df:b7:79:c8:9f:eb:84:f0:c3:92:e9:62:1e:8e:70:48:8c:
f5:88:6d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:31 2025 by rpki-client