Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: EcPHj05vNUWDE/XWaY4tjrPUqjPcZB7Q2+fyh9sPHvk=
Subject key identifier: 9B:E9:6D:E1:9D:C5:05:F8:FC:C4:92:EA:B0:B3:BC:B9:E6:2F:B0:3B
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 1AA829F916EB99E525C796867C421D1EB22D1A19
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS197537.roa
Signing time: Mon 17 Mar 2025 06:01:18 +0000
ROA not before: Mon 17 Mar 2025 05:56:18 +0000
ROA not after: Mon 16 Mar 2026 06:01:18 +0000
asID: 197537
IP address blocks: 157.254.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a8:29:f9:16:eb:99:e5:25:c7:96:86:7c:42:1d:1e:b2:2d:1a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 17 05:56:18 2025 GMT
Not After : Mar 16 06:01:18 2026 GMT
Subject: CN=9BE96DE19DC505F8FCC492EAB0B3BCB9E62FB03B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:81:19:e0:4e:d4:2f:60:13:ab:b2:01:2b:
c4:f3:bc:aa:0c:53:e4:7e:35:10:00:15:cd:c5:88:
3b:25:3b:97:5d:c4:9f:47:5c:03:a7:7d:7c:6f:db:
bc:27:73:6a:d1:f4:c8:e8:59:7c:e2:81:7e:1a:f1:
8f:06:77:e9:fe:ed:c5:a8:c1:5f:0c:b9:48:d4:6f:
16:3e:68:4d:63:1b:c9:85:a3:6a:69:7a:99:cf:81:
4d:6c:69:a6:0c:2d:88:c2:12:d9:6a:7f:06:5f:3d:
46:28:cf:7e:88:0c:ac:84:17:a3:7a:42:18:42:33:
17:81:1d:37:70:9a:46:3d:33:79:61:72:58:01:ac:
db:87:ea:78:aa:8a:19:d6:9e:ea:18:a9:46:ad:91:
d7:76:fb:f2:41:d6:28:a8:77:a2:9f:90:7a:7d:e7:
43:8c:75:ca:10:b1:60:83:e4:ea:e3:b3:0c:78:c0:
0a:85:4e:f7:45:9a:f5:27:03:e8:07:4e:1f:5f:f4:
d8:7d:f3:35:9c:48:d4:8c:b8:7c:79:3b:0b:72:b5:
15:fb:45:09:f1:fc:d8:73:0e:a3:81:2c:01:27:e3:
f1:72:21:4e:ef:09:35:82:d8:90:2b:ee:f9:47:c0:
b6:7b:7a:89:7b:43:83:28:18:2f:b9:e6:cb:7e:0e:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E9:6D:E1:9D:C5:05:F8:FC:C4:92:EA:B0:B3:BC:B9:E6:2F:B0:3B
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.191.0/24
Signature Algorithm: sha256WithRSAEncryption
69:43:0e:8b:c2:1f:ea:94:d7:90:73:64:e2:38:6b:f4:35:4b:
40:8b:ca:da:a0:18:23:c7:e8:9e:87:bb:ee:14:7f:0e:98:ba:
d9:a5:73:28:76:fe:af:78:70:a0:67:4a:5e:8d:48:ed:bf:1b:
5b:cf:94:9a:00:ff:4c:14:2f:05:6b:00:4a:5d:30:e1:70:90:
3d:ca:fe:f4:92:ef:9d:a7:63:ab:7d:3a:41:15:05:1f:28:f9:
23:1c:80:78:6a:78:bb:e9:3e:a9:05:44:3c:68:e8:e2:4d:4c:
88:de:b2:cb:a5:5d:a2:99:df:40:28:f7:d8:36:92:3c:e6:94:
2e:f3:b5:17:df:b0:93:56:8b:ad:29:5b:f1:b3:24:7b:64:47:
5e:3f:3b:83:14:0a:ce:dc:d1:75:6a:65:f2:19:d6:e7:39:bb:
03:75:24:d1:30:6c:be:51:64:cd:25:1b:65:c6:cf:7f:23:bd:
c0:72:b1:cb:4a:93:5a:e2:a3:5b:9a:b9:df:38:3c:3d:41:ca:
c6:29:6a:89:0d:c4:6e:c6:61:01:53:ba:ea:18:70:1b:84:3d:
e0:6e:09:a5:f5:ad:30:a4:3c:f7:c6:e2:3e:0f:88:86:8a:34:
d0:05:2d:d1:68:12:31:17:d8:7e:51:bb:5d:a2:1a:e9:f5:48:
f8:08:bf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:35 2025 by rpki-client