Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS268581.roa
File: AS268581.roa (raw, json)
Hash identifier: dYALc3jDBI5f1zsPna5XM11TEltcr5QpxHufdZn2kvY=
Subject key identifier: 81:9C:E6:6E:03:04:AC:22:F6:41:04:0C:5B:29:A8:FC:7F:F9:77:73
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 458A01F5B8F7106712B7B05F14C2974140658C57
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS268581.roa
Signing time: Thu 30 Jan 2025 15:28:26 +0000
ROA not before: Thu 30 Jan 2025 15:23:26 +0000
ROA not after: Thu 29 Jan 2026 15:28:26 +0000
asID: 268581
IP address blocks: 157.254.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8a:01:f5:b8:f7:10:67:12:b7:b0:5f:14:c2:97:41:40:65:8c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jan 30 15:23:26 2025 GMT
Not After : Jan 29 15:28:26 2026 GMT
Subject: CN=819CE66E0304AC22F641040C5B29A8FC7FF97773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:4a:ba:c0:ac:02:b4:be:9b:ee:32:35:12:
6b:6d:6e:6c:3f:38:1c:cd:5c:db:22:07:c5:62:e0:
6d:12:63:39:bb:92:d6:b5:5c:02:20:54:77:a7:8d:
35:4b:28:20:02:ce:1e:25:b4:7f:6f:38:53:67:e7:
bc:c2:ac:7e:e7:40:6f:e1:f7:2b:54:b3:48:2b:fd:
13:1a:31:0d:ce:7a:48:e2:8a:ff:4b:d0:ce:d6:1d:
05:b1:dd:2c:f1:99:bf:e2:09:36:1e:00:84:b8:30:
02:9b:3d:45:02:92:cd:c0:6b:d0:d5:81:3a:73:64:
9f:c9:2e:2c:b3:c5:c4:6c:88:f6:21:e9:1e:98:cf:
bf:20:75:3a:ce:c9:79:aa:04:54:d8:9c:07:02:d2:
c3:88:29:57:69:fd:4c:30:98:31:f7:3d:4e:9f:4b:
cb:62:7e:69:08:6c:33:61:fa:ef:88:a2:64:2c:fd:
04:93:23:bc:8e:71:c4:0e:dc:1c:87:a1:78:43:4d:
cc:6b:52:8c:ae:9a:b8:2f:21:75:bc:c9:7c:f7:ec:
7c:f8:af:14:a8:da:4f:97:e2:68:e3:30:09:eb:4a:
dc:2e:6f:a4:40:ae:62:48:a0:02:53:94:dc:60:9e:
1d:6f:52:5a:72:5b:bb:2e:55:90:6b:cb:d2:4f:53:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:E6:6E:03:04:AC:22:F6:41:04:0C:5B:29:A8:FC:7F:F9:77:73
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS268581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.54.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:82:46:87:c0:2c:ab:23:77:12:3c:7c:a4:e3:06:7f:84:fe:
a1:10:43:53:52:bf:2c:85:53:b8:7d:e2:f0:50:9a:32:a2:98:
d4:62:b9:a0:94:11:21:07:3d:5a:5c:c1:81:d9:47:d5:5e:a1:
b3:93:9a:65:06:9a:fa:a8:a3:69:5d:4a:30:4d:7b:c3:19:5d:
84:31:4d:96:f0:fd:08:28:0b:24:6e:5a:81:74:b2:61:94:5e:
73:9d:31:d3:76:05:2c:4d:95:ea:d6:36:07:80:e0:1e:a9:e7:
68:27:5f:67:81:0e:9c:a8:65:3f:2c:29:87:5e:fa:ac:e0:07:
e7:f0:36:bc:25:1c:95:81:0a:51:cf:6b:0b:b9:63:bf:f7:fc:
dd:7e:6f:7e:91:23:96:eb:fd:40:ee:d6:7c:1b:bb:b1:c1:55:
d5:8f:96:be:4a:e8:79:ad:96:b9:8e:46:83:8f:5b:5f:ac:50:
34:0b:a2:16:15:ba:90:eb:68:68:dc:3d:ab:fb:88:1e:74:12:
53:4c:a5:02:aa:b3:87:d3:ec:fb:96:f5:45:4c:99:98:1d:84:
15:2b:88:37:67:36:e0:ed:0c:cb:0c:6f:5a:47:0a:c9:f7:d6:
e4:31:2c:e9:08:b3:74:35:83:fc:af:8f:49:35:f5:f3:db:84:
29:cc:12:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:50 2025 by rpki-client