Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397113.roa
File: AS397113.roa (raw, json)
Hash identifier: HG85O60a3jsSevY9o1rgPNo6ISpWnlSMHej/MuWZtic=
Subject key identifier: 27:7F:46:1A:F3:DC:16:9D:CF:BB:7F:EC:2D:8D:D4:27:73:13:E3:7E
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 0917473C14D28E6D66E0B640690C335D52E9AB42
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397113.roa
Signing time: Thu 13 Mar 2025 01:28:26 +0000
ROA not before: Thu 13 Mar 2025 01:23:26 +0000
ROA not after: Thu 12 Mar 2026 01:28:26 +0000
asID: 397113
IP address blocks: 157.254.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:17:47:3c:14:d2:8e:6d:66:e0:b6:40:69:0c:33:5d:52:e9:ab:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 13 01:23:26 2025 GMT
Not After : Mar 12 01:28:26 2026 GMT
Subject: CN=277F461AF3DC169DCFBB7FEC2D8DD4277313E37E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:e2:3d:e2:75:87:61:6c:ab:0f:74:62:b4:
02:e9:b2:20:44:e1:45:95:56:bf:27:67:2e:73:3e:
f0:24:6b:b9:16:10:25:8a:92:6a:55:40:60:ca:79:
64:53:5a:ce:ee:b7:84:ff:e8:be:fd:98:f1:74:8c:
12:75:7d:82:f1:b3:b0:a9:43:d1:e6:c8:00:2b:bc:
d3:65:a7:eb:52:c5:be:d6:60:78:9a:96:3c:19:6a:
a7:42:ce:e1:f2:60:be:25:4d:43:b0:10:19:4b:48:
23:e6:8e:a3:95:2f:19:34:0c:54:b0:b1:e0:9a:28:
7d:ae:10:78:99:1a:5f:c3:7b:61:73:7b:18:75:b0:
bf:16:7a:62:f7:1d:26:14:5f:4a:a5:29:99:58:3a:
79:f7:86:fe:78:ac:47:67:d4:5d:8f:17:a0:07:ab:
00:25:09:6f:32:2b:fb:9f:af:5e:68:a0:b1:d1:3f:
b5:00:cb:2f:bd:47:99:06:c4:5b:52:13:86:73:c1:
40:e1:57:4c:1d:0b:8b:2c:0a:e8:ca:fb:05:2a:29:
d9:ec:76:1a:b8:0e:c4:34:21:d3:6a:16:f3:80:2a:
59:68:97:1e:b1:09:60:f6:f7:e1:7f:01:3f:5f:65:
28:18:db:eb:0e:e4:bf:11:cf:a6:ba:85:d4:bc:7d:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7F:46:1A:F3:DC:16:9D:CF:BB:7F:EC:2D:8D:D4:27:73:13:E3:7E
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.50.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c4:a3:36:02:3f:28:99:d9:3f:94:bc:e6:45:ea:74:08:c9:
00:2e:05:8d:92:eb:84:1b:86:1a:b0:32:75:59:ad:71:c4:0e:
03:c3:39:f7:6b:a4:06:6f:c9:68:ec:8c:15:73:16:32:8c:90:
b8:81:12:23:fd:ec:3b:99:4c:a6:ef:69:99:5f:7c:b5:d8:5d:
f5:62:cf:d7:d2:a2:2a:fb:e1:b1:12:2e:26:2c:2b:e8:98:06:
7b:ca:40:39:10:46:86:25:68:f1:4b:0f:bc:4c:03:61:d3:8a:
88:23:98:99:de:1c:e5:1c:49:86:e1:1a:85:03:58:cd:bf:04:
60:84:50:52:33:99:e9:67:b7:64:e7:b8:ea:d8:8e:b4:4f:d5:
5d:20:e7:9c:1b:c6:ce:3c:5c:b1:39:28:c5:96:d7:36:5c:9f:
68:bf:1e:d5:65:44:98:3f:5c:9a:b8:3d:e0:d2:34:13:9e:4f:
9b:02:f8:da:80:a4:e6:25:83:c1:56:e1:fe:cb:47:99:a8:8e:
cb:76:4c:85:73:21:bf:d3:49:86:7a:87:32:d6:76:5c:7f:aa:
f0:ed:a5:20:c7:03:2d:08:fe:ab:e8:af:91:0e:f3:5f:1f:56:
21:a7:21:82:00:5a:be:e0:cb:4e:23:0e:20:93:1e:d7:ce:f2:
4a:bc:68:a6
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUCRdHPBTSjm1m4LZAaQwzXVLpq0IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMzEzMDEyMzI2WhcNMjYwMzEyMDEyODI2
WjAzMTEwLwYDVQQDEygyNzdGNDYxQUYzREMxNjlEQ0ZCQjdGRUMyRDhERDQyNzcz
MTNFMzdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/XiPeJ1h2Fs
qw90YrQC6bIgROFFlVa/J2cucz7wJGu5FhAlipJqVUBgynlkU1rO7reE/+i+/Zjx
dIwSdX2C8bOwqUPR5sgAK7zTZafrUsW+1mB4mpY8GWqnQs7h8mC+JU1DsBAZS0gj
5o6jlS8ZNAxUsLHgmih9rhB4mRpfw3thc3sYdbC/Fnpi9x0mFF9KpSmZWDp594b+
eKxHZ9RdjxegB6sAJQlvMiv7n69eaKCx0T+1AMsvvUeZBsRbUhOGc8FA4VdMHQuL
LAroyvsFKinZ7HYauA7ENCHTahbzgCpZaJcesQlg9vfhfwE/X2UoGNvrDuS/Ec+m
uoXUvH0JQwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFCd/Rhrz3Badz7t/7C2N1Cdz
E+N+MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzM5NzExMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+MjANBgkqhkiG9w0BAQsFAAOC
AQEACcSjNgI/KJnZP5S85kXqdAjJAC4FjZLrhBuGGrAydVmtccQOA8M592ukBm/J
aOyMFXMWMoyQuIESI/3sO5lMpu9pmV98tdhd9WLP19KiKvvhsRIuJiwr6JgGe8pA
ORBGhiVo8UsPvEwDYdOKiCOYmd4c5RxJhuEahQNYzb8EYIRQUjOZ6We3ZOe46tiO
tE/VXSDnnBvGzjxcsTkoxZbXNlyfaL8e1WVEmD9cmrg94NI0E55PmwL42oCk5iWD
wVbh/stHmaiOy3ZMhXMhv9NJhnqHMtZ2XH+q8O2lIMcDLQj+q+ivkQ7zXx9WIach
ggBavuDLTiMOIJMe187ySrxopg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:12:56 2025 by rpki-client