Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400601.roa
File: AS400601.roa (raw, json)
Hash identifier: YbgyBeNFOBhJkeYR5GOl34M8IM0FD+ZouNTzov+/DV8=
Subject key identifier: 28:95:A4:A4:0E:E3:42:48:89:C1:AE:B4:3D:8A:23:62:EB:68:91:5B
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 50F5C15713F32D4A0FD62CE93E2C24C9259A7899
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400601.roa
Signing time: Fri 14 Mar 2025 23:49:15 +0000
ROA not before: Fri 14 Mar 2025 23:44:15 +0000
ROA not after: Fri 13 Mar 2026 23:49:15 +0000
asID: 400601
IP address blocks: 157.254.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f5:c1:57:13:f3:2d:4a:0f:d6:2c:e9:3e:2c:24:c9:25:9a:78:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 14 23:44:15 2025 GMT
Not After : Mar 13 23:49:15 2026 GMT
Subject: CN=2895A4A40EE3424889C1AEB43D8A2362EB68915B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:30:05:b0:8e:eb:3e:88:5d:b6:98:26:53:
cf:7d:64:c6:90:ff:d7:82:27:01:43:1d:1f:6f:f1:
ef:04:45:ea:fd:04:b5:81:69:37:3e:c4:3e:24:dc:
2d:75:3d:b2:22:61:ca:0a:25:fa:f0:42:bb:19:4b:
85:70:55:26:73:39:23:37:a7:58:c9:1f:f0:83:57:
d0:7d:9c:a3:2e:4b:33:c6:88:fb:65:ca:b8:7b:bc:
b8:23:95:94:8f:0c:2b:d6:d6:ac:9b:96:b7:24:91:
6d:16:3a:85:1c:d4:d7:03:55:c8:14:c9:71:18:17:
f5:9d:e2:47:32:0d:f2:ee:be:dc:e5:5a:2a:b9:7f:
19:3c:f1:37:72:51:06:9c:38:b6:bb:64:d8:8d:8d:
5d:1e:10:d1:76:58:61:6a:64:ff:6f:04:27:b4:1b:
f2:30:bf:10:76:dd:fb:47:03:42:4e:ea:5b:b1:ef:
88:8c:67:e7:99:7f:01:55:04:29:a1:ff:c8:08:4f:
84:30:ea:f1:ae:21:aa:4c:af:a8:6c:e9:c9:54:81:
23:5c:b6:c4:62:9c:e2:f8:44:a0:b5:1d:dc:8e:c3:
71:ef:8c:53:ef:db:7a:c2:0e:35:54:8a:1f:bd:9b:
ad:4f:e1:c7:a1:45:06:15:35:f4:7b:6f:7a:05:15:
4e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:95:A4:A4:0E:E3:42:48:89:C1:AE:B4:3D:8A:23:62:EB:68:91:5B
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400601.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:4d:2d:8e:0c:b2:0d:0e:36:57:fe:ed:36:c4:17:9a:08:a1:
92:d5:a6:1a:cc:7d:fd:ab:f0:98:d8:d9:c8:87:ca:ae:f0:dc:
01:83:60:bf:6c:a8:df:9d:4d:8f:3b:c1:8e:1c:32:59:95:f8:
14:3a:ff:d9:ee:33:c0:b2:64:a6:83:73:f1:06:d3:54:a2:99:
bd:2c:87:fb:ae:11:10:7b:82:ad:e7:ad:f5:a4:41:e6:6d:9a:
91:b2:f7:27:60:0b:07:8d:b2:9f:a7:28:19:bd:d5:df:b7:bc:
9b:4e:32:2e:ad:1a:fe:ba:73:31:b6:3a:11:5e:a5:8e:63:0c:
d4:69:9a:8c:dd:69:ae:ee:4e:cb:7d:c4:da:d6:ab:db:66:ac:
19:78:c8:d9:b8:9b:74:a4:26:3f:1a:2e:5c:a7:8c:b6:ce:87:
4e:9a:36:3d:fe:97:48:28:5a:86:e1:2d:82:81:43:53:d7:31:
05:f1:e3:2f:27:9f:62:f3:b7:3a:33:62:08:52:14:d9:9d:1d:
76:be:84:99:44:88:78:01:28:ab:61:5b:1b:e3:e0:5d:68:12:
57:8a:82:40:59:20:8d:45:c2:6f:62:30:6c:3a:4c:3d:87:07:
a3:4a:85:cd:46:a0:a9:eb:3a:3b:0c:ee:37:43:a2:a6:95:3b:
f5:2a:ea:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:40 2025 by rpki-client