Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS213990.roa
File: AS213990.roa (raw, json)
Hash identifier: bDSw8aXzUySAoZhwqyf6VsTchTgkh2bTGm5eSC9GEQo=
Subject key identifier: 38:E9:FA:D7:47:06:7A:D3:34:1F:28:F8:13:3E:83:83:C7:46:20:62
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 48ADA5F183C2C2F70C652BF3A3DEB5A88985A23F
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS213990.roa
Signing time: Tue 11 Feb 2025 14:13:56 +0000
ROA not before: Tue 11 Feb 2025 14:08:56 +0000
ROA not after: Tue 10 Feb 2026 14:13:56 +0000
asID: 213990
IP address blocks: 157.254.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ad:a5:f1:83:c2:c2:f7:0c:65:2b:f3:a3:de:b5:a8:89:85:a2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Feb 11 14:08:56 2025 GMT
Not After : Feb 10 14:13:56 2026 GMT
Subject: CN=38E9FAD747067AD3341F28F8133E8383C7462062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:f8:74:0e:f0:e5:ea:53:47:b5:42:f1:af:
5a:c7:d0:41:b7:0c:97:f4:7e:0d:6f:eb:78:b0:7e:
e9:c2:c8:d4:cb:2e:78:5c:f7:d8:0b:cb:ae:f9:f3:
07:23:7b:4e:c7:b4:56:d8:be:2a:5e:e3:08:f4:63:
12:9b:ed:5a:fd:e0:9b:2c:fb:0e:46:f8:4d:96:e7:
b8:f1:12:24:2b:d2:ef:cc:6d:4d:82:10:e3:fb:80:
e1:ed:54:d1:dd:1c:f0:7a:e4:d0:ea:55:62:b7:b9:
be:3a:c7:75:46:ed:bc:b0:a3:38:83:80:45:ac:9a:
c4:45:5e:ab:dc:8a:2b:b9:9e:fd:19:8f:7a:24:c9:
8c:ef:44:20:8f:8f:7a:a9:f1:11:57:72:6e:69:b0:
65:57:eb:1a:33:20:e9:85:c5:9f:ac:9b:be:65:ea:
9d:14:26:e8:39:7e:10:64:89:31:36:b6:fe:8f:68:
6e:11:74:47:c8:34:70:30:c5:ca:6c:ad:1b:04:35:
77:76:35:e4:1f:70:6a:3e:a7:88:51:32:c6:15:0d:
59:b5:26:27:18:9b:1b:85:97:fb:3c:a9:d5:1e:75:
a9:26:9b:d5:83:22:f9:74:7e:84:a0:21:86:1d:be:
9e:3d:76:41:56:d1:1e:fa:40:a2:c9:66:3e:4a:19:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E9:FA:D7:47:06:7A:D3:34:1F:28:F8:13:3E:83:83:C7:46:20:62
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS213990.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
67:91:2e:bf:3e:69:eb:80:ee:f9:8e:47:17:f5:35:1b:26:28:
39:c1:4d:b5:49:93:c6:73:b1:a1:a6:d7:ca:98:9f:03:4f:e1:
ea:40:af:48:18:90:58:27:c9:c8:22:be:b8:92:d3:b8:d2:7d:
9a:4c:38:b5:0a:0b:c6:43:ef:88:4a:3b:f9:38:a6:50:8c:c9:
30:93:08:06:73:83:07:bc:fd:a2:3d:ba:1e:ac:d2:2c:3d:ab:
4d:ab:e2:ff:99:dc:cb:1f:b8:00:79:69:df:b5:70:61:45:50:
75:63:87:22:a1:f3:d1:f8:77:2e:7f:6c:e0:95:2f:06:eb:bb:
8a:54:f6:4b:bd:52:fd:b9:19:a0:a5:10:74:b4:b0:fc:0d:be:
53:1a:be:9a:1d:aa:9f:82:4c:7b:84:5a:b8:6b:34:4b:54:8d:
df:73:de:63:ff:0c:a4:4d:6f:1d:6e:bc:bf:42:c2:c5:5f:d4:
fd:0c:69:14:d0:6a:f2:9a:c8:08:78:53:6a:03:73:dc:af:eb:
3e:60:c6:c0:be:e2:7b:d9:44:2b:d0:5b:d4:06:d5:91:db:32:
ca:ea:08:85:22:78:ef:a1:61:32:bc:21:a7:d9:86:49:e9:05:
1e:48:20:31:a1:ee:8d:a1:1f:86:d1:e7:42:6f:07:fe:9a:62:
f9:dd:7b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:57 2025 by rpki-client