Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS150654.roa
File: AS150654.roa (raw, json)
Hash identifier: dDjmmJlIQCypJH+VRR4nxr053lSyXzY3xH+4+0robCA=
Subject key identifier: 23:5C:A2:96:92:2B:61:51:9C:2D:2D:65:E4:FE:58:19:9D:1C:84:64
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 589FFDC800BC1EACFAAED9AEF259AEF2DC0B839B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS150654.roa
Signing time: Fri 21 Feb 2025 15:33:58 +0000
ROA not before: Fri 21 Feb 2025 15:28:58 +0000
ROA not after: Fri 20 Feb 2026 15:33:58 +0000
asID: 150654
IP address blocks: 157.254.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9f:fd:c8:00:bc:1e:ac:fa:ae:d9:ae:f2:59:ae:f2:dc:0b:83:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Feb 21 15:28:58 2025 GMT
Not After : Feb 20 15:33:58 2026 GMT
Subject: CN=235CA296922B61519C2D2D65E4FE58199D1C8464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:5a:e0:22:d8:65:86:b9:33:76:53:9e:8c:
d6:c7:95:19:a7:7c:11:0d:96:3c:24:7b:ad:ab:27:
af:db:72:2f:fa:95:20:d3:cf:f9:3e:4f:a8:b7:7d:
f0:99:68:e4:45:9a:b2:0f:18:d8:c1:e3:35:f4:e9:
a4:bf:5f:bf:81:97:fe:28:84:52:ff:fe:b4:8b:f4:
97:53:ab:26:56:b1:94:6e:41:2b:ed:6a:30:62:25:
89:47:ba:18:f3:3d:94:3d:19:4a:04:0d:c6:e2:d1:
c4:86:f2:69:e5:bf:d5:1a:30:31:4d:ec:56:40:e0:
0d:9f:58:58:8d:5c:b3:1f:78:cc:c3:4c:1c:34:cc:
5f:46:6e:62:08:69:c9:e8:f0:60:cb:f9:a7:2e:c9:
75:ba:4c:78:41:78:17:97:fe:80:86:b7:f4:98:83:
1a:be:c8:62:4a:78:54:56:86:84:ad:bd:14:bf:10:
22:a8:e8:bf:a1:ee:13:83:e6:74:86:09:3f:7b:a2:
cb:5a:8f:31:f2:70:56:1e:3b:9a:1a:7f:e1:65:05:
46:e1:43:1a:b1:cb:97:98:ef:09:c8:d2:52:0e:ba:
c3:f4:00:bf:b9:ce:a6:18:56:34:72:9d:55:25:fc:
55:11:13:a8:86:47:e9:9a:21:f6:2c:f9:4e:72:8a:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5C:A2:96:92:2B:61:51:9C:2D:2D:65:E4:FE:58:19:9D:1C:84:64
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS150654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.189.0/24
Signature Algorithm: sha256WithRSAEncryption
21:cf:9e:06:18:2e:f3:02:63:fb:eb:32:69:71:87:df:24:54:
ff:75:e6:c4:96:c8:48:44:b9:ff:a7:60:e7:cb:b6:3a:86:05:
33:fc:d2:cc:b5:e0:ba:fe:7b:4e:62:16:2b:f7:76:c3:06:f2:
5d:5e:e9:22:04:a7:59:37:73:61:5d:53:b7:bd:78:3f:1b:de:
c8:f7:a0:8a:8c:ed:32:c0:be:d9:e9:a8:90:8b:37:b1:0d:03:
b4:70:8e:a3:ba:0d:db:c1:15:d2:4d:a0:c9:90:32:0e:3f:a9:
1c:ce:e4:e9:69:12:8f:f9:40:d9:0d:63:d0:64:7a:24:62:0b:
21:7f:25:30:a0:d3:e4:8d:07:06:b4:08:08:ae:bf:3f:fe:cc:
d8:96:cb:65:85:65:ec:67:8a:0c:58:bd:2a:5d:66:bd:0f:83:
b0:41:80:27:07:89:89:a5:2d:a7:73:62:8c:84:fa:06:10:6a:
69:7e:95:6e:2d:18:d7:6f:06:04:03:ce:9f:24:c9:bd:c8:b9:
a9:98:b4:98:02:95:99:bf:31:ff:aa:ea:96:ba:72:84:ee:5b:
fe:46:15:7c:c2:2d:d4:37:1c:86:d1:2e:c0:29:05:52:c9:ff:
f6:de:53:4c:4a:9a:02:3b:89:79:c6:45:ba:08:64:5c:75:cd:
95:9a:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:44 2025 by rpki-client