Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS202662.roa
File: AS202662.roa (raw, json)
Hash identifier: WSD9fK8pHCQ1a3UFZdm2oGNH9HWHKjn03ABiM7/1lJg=
Subject key identifier: 20:8E:55:A5:FF:C8:9E:6A:4E:72:28:DE:FD:18:FA:9D:B3:3D:E1:63
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 31D226DBA2A28FE74118D46A9B5D2D0F947C019B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS202662.roa
Signing time: Sat 21 Dec 2024 10:28:23 +0000
ROA not before: Sat 21 Dec 2024 10:23:23 +0000
ROA not after: Sat 20 Dec 2025 10:28:23 +0000
asID: 202662
IP address blocks: 157.254.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d2:26:db:a2:a2:8f:e7:41:18:d4:6a:9b:5d:2d:0f:94:7c:01:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Dec 21 10:23:23 2024 GMT
Not After : Dec 20 10:28:23 2025 GMT
Subject: CN=208E55A5FFC89E6A4E7228DEFD18FA9DB33DE163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:d8:d3:23:9e:e5:53:af:02:7f:96:7d:30:
ac:ec:31:97:8e:29:f7:f1:80:bd:6f:7a:a0:00:65:
3b:1f:21:7c:70:24:c0:1f:21:94:7b:3e:37:e9:c7:
ef:87:4b:11:50:e5:02:9c:f2:da:8a:82:17:ff:a8:
c0:bd:a2:e0:64:11:68:c7:5e:43:38:3c:b4:eb:3f:
a6:cd:6b:7a:13:c7:a4:41:42:09:9f:ee:a6:3d:2f:
26:1d:8c:a5:5a:64:10:79:43:dc:3e:fa:f0:e6:f8:
ae:a1:5c:8b:1c:6b:f5:5b:42:ef:f6:3c:02:af:f9:
69:e3:3f:bc:a9:ec:0b:4a:d5:19:4e:71:c3:e2:e4:
92:89:e3:7c:c4:9d:7f:2b:bc:6b:32:1b:a5:fe:87:
a4:1d:37:00:8f:7c:c3:5a:6b:04:a6:48:9b:cd:a6:
7e:09:11:cb:95:30:34:c5:04:61:7a:4a:c1:b2:19:
75:1d:99:c1:77:89:9c:0d:0c:ab:8e:77:cf:a6:2f:
cf:47:6f:38:5c:dd:49:91:9d:b4:f0:ef:15:fd:32:
df:4a:00:37:19:40:8d:b1:c3:37:95:8b:52:0a:ce:
3c:e8:f7:71:0a:6c:63:dc:55:44:72:00:91:7c:d2:
7d:e3:c3:35:5f:e4:46:00:d7:c5:38:30:c3:95:24:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8E:55:A5:FF:C8:9E:6A:4E:72:28:DE:FD:18:FA:9D:B3:3D:E1:63
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS202662.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.20.0/22
Signature Algorithm: sha256WithRSAEncryption
49:e6:df:24:08:e5:2f:7f:8e:97:34:e6:eb:29:2b:f0:d7:ed:
17:de:dc:52:8a:5d:b1:7b:54:ae:db:42:3c:88:9f:35:b4:7d:
64:c4:75:c4:94:79:6a:b0:12:13:5f:70:54:47:ce:6f:20:49:
9c:64:01:72:72:29:93:7c:3e:7e:34:40:4f:2f:b1:8d:d2:2d:
b4:db:0d:4d:40:0f:05:0a:da:63:94:f8:13:36:f2:b1:71:8f:
b0:af:57:77:82:d0:02:8e:05:ea:9c:02:27:8d:35:ab:2e:32:
4f:9c:cf:57:df:33:4e:c4:ad:13:dd:2b:82:7b:28:74:87:c3:
4c:bc:d0:18:48:0d:1f:0b:67:f3:b3:57:db:f5:b0:c9:b7:43:
71:cd:bc:ac:eb:84:7b:2c:f6:94:04:9a:51:20:9e:b8:ce:71:
8d:a0:8b:7b:08:07:02:93:2e:8b:b2:04:39:eb:40:fd:f2:23:
bf:20:ce:f0:c0:82:58:37:47:a5:7d:63:eb:aa:ee:aa:2c:d9:
b3:ed:56:c7:db:da:72:06:fd:1c:1c:75:0a:e5:ab:f8:22:ce:
db:82:11:76:6e:8f:be:f5:96:64:51:ce:6a:1e:59:52:d8:04:
b9:68:01:4c:4f:2f:26:d5:18:4a:d2:ef:c2:5b:61:8e:ea:36:
51:22:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:07 2025 by rpki-client