Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS136907.roa
File: AS136907.roa (raw, json)
Hash identifier: RRtJt7qtGx7wFvGSC502yWEjU8vjxrgZYdsH12GqLIA=
Subject key identifier: 17:B3:55:0C:1A:BF:2A:18:8D:F8:56:4D:02:E4:56:51:EE:BA:39:09
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 7C58CD6F3ADC782C99F39D2E5B03CB3CE193FDA6
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS136907.roa
Signing time: Sat 07 Dec 2024 09:05:08 +0000
ROA not before: Sat 07 Dec 2024 09:00:08 +0000
ROA not after: Sat 06 Dec 2025 09:05:08 +0000
asID: 136907
IP address blocks: 157.254.208.0/22 maxlen: 24
157.254.211.0/24 maxlen: 24
157.254.212.0/22 maxlen: 24
157.254.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:58:cd:6f:3a:dc:78:2c:99:f3:9d:2e:5b:03:cb:3c:e1:93:fd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Dec 7 09:00:08 2024 GMT
Not After : Dec 6 09:05:08 2025 GMT
Subject: CN=17B3550C1ABF2A188DF8564D02E45651EEBA3909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:d3:e4:8b:5b:03:24:ca:81:86:8b:3c:fb:
a7:5f:64:fa:79:bb:d7:27:de:1e:86:47:0d:af:1c:
9d:92:65:a6:32:d8:08:08:87:59:41:d0:2d:a0:c5:
59:2d:67:fa:30:23:a7:a0:38:05:0e:74:4e:92:91:
3c:a1:3c:2d:bb:3e:a7:10:fb:19:c7:df:2e:cb:2a:
7a:b1:f3:1e:fc:59:5c:15:92:0f:a8:3d:96:ef:09:
2d:98:e2:18:86:4a:7f:45:ef:97:ae:00:ae:a0:f6:
b6:ed:a6:3c:4e:5d:65:cb:db:bc:c6:07:83:36:27:
5a:00:c7:87:7f:1d:11:45:93:1c:0b:46:b5:d1:9b:
4b:4c:99:94:5b:9d:44:e7:22:d1:e8:14:90:be:35:
1b:75:01:19:8c:07:24:69:1e:58:7a:6f:79:93:d3:
9f:cc:9b:64:40:fb:bc:0e:5c:30:99:07:3c:85:3f:
65:0e:60:28:82:f6:ee:7c:dc:b7:b2:de:b4:22:26:
a9:ed:d9:f2:2c:d5:ec:a2:4a:30:ef:45:04:0a:55:
1b:d4:76:31:25:3f:a6:51:91:1a:ce:56:ae:6f:2a:
08:43:b7:5c:5d:f7:6f:e4:bc:76:1b:81:f2:d0:00:
9e:fb:20:81:32:58:12:54:a5:be:74:11:16:b0:13:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B3:55:0C:1A:BF:2A:18:8D:F8:56:4D:02:E4:56:51:EE:BA:39:09
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS136907.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.208.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:4a:ef:d0:6d:b8:2f:68:12:ed:27:75:5c:de:df:95:44:42:
bc:1f:88:e8:44:21:78:d2:8a:ea:0f:77:f6:e1:df:b8:b0:ff:
e6:d1:a4:dc:0c:b6:60:47:2e:7e:7a:85:3e:ce:62:cc:ec:61:
e8:d4:6d:49:79:5c:32:34:40:9b:56:8c:0d:16:b6:cb:02:fa:
c2:30:0f:39:58:0f:47:50:01:96:14:9f:85:b9:e0:3d:eb:6a:
c5:83:5f:9b:73:06:8d:23:32:4e:69:85:aa:1e:75:87:fe:64:
e0:64:2c:06:4e:fc:48:94:30:72:a1:c0:ba:d7:11:82:c1:f4:
71:e4:88:ec:a6:f5:35:f4:62:1d:69:55:b7:2e:a1:30:a9:fc:
67:2b:cf:1e:92:b7:d1:0b:34:a7:45:67:34:5a:70:cf:15:ab:
af:be:f4:16:4e:58:93:d4:eb:2e:a0:cf:f8:01:fd:44:f5:84:
9b:a9:4c:dc:3e:99:01:05:a7:02:8d:ff:7a:2a:46:ac:73:6b:
22:87:c6:83:d3:dc:6c:15:30:17:18:9d:04:b3:89:f0:d9:3d:
28:33:a9:e8:5f:7b:13:b7:65:90:8c:5e:e7:72:03:05:26:41:
8b:76:b1:b9:63:d3:d5:9e:11:b8:6b:fa:7f:b7:61:da:69:dc:
7c:18:ab:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:06 2025 by rpki-client