Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5065.roa
File: AS5065.roa (raw, json)
Hash identifier: Z2YWUT1iMsyj3akyT6pX4oZ1o2G6AgmG1YOSzCi4KAU=
Subject key identifier: F8:4C:8E:10:FF:71:06:77:D3:FF:C5:58:6C:59:79:8E:76:86:4D:C4
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 6EC48956C964E227C863B004596827D6FD0C34B7
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5065.roa
Signing time: Wed 09 Oct 2024 09:16:54 +0000
ROA not before: Wed 09 Oct 2024 09:11:54 +0000
ROA not after: Wed 08 Oct 2025 09:16:54 +0000
asID: 5065
IP address blocks: 157.254.14.0/24 maxlen: 24
157.254.18.0/23 maxlen: 24
157.254.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c4:89:56:c9:64:e2:27:c8:63:b0:04:59:68:27:d6:fd:0c:34:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Oct 9 09:11:54 2024 GMT
Not After : Oct 8 09:16:54 2025 GMT
Subject: CN=F84C8E10FF710677D3FFC5586C59798E76864DC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:53:bb:cf:1e:e0:c9:e0:7d:63:86:40:bc:
cf:79:b2:86:e9:78:6a:14:cb:56:c9:69:5b:99:ae:
1b:a5:88:d2:8f:6d:a2:69:03:5c:4a:91:29:5e:37:
ed:fe:e8:bc:e6:86:f3:56:a6:cc:55:c3:98:c2:e4:
de:3e:00:47:27:b4:d3:0b:3d:00:e6:db:fa:16:95:
e7:30:79:76:b9:e7:8c:45:9e:3a:7f:5d:79:16:2c:
c7:ed:48:7c:4c:95:bd:47:9c:f4:63:87:fb:f5:ba:
32:dd:53:95:1b:ba:ae:0f:92:06:a1:3e:20:62:bf:
71:65:56:32:ce:3b:d1:62:fa:09:7d:93:1b:a2:01:
2c:e3:c3:11:25:7d:25:ba:9b:9e:34:df:82:22:58:
0f:09:d1:a2:8b:42:d0:47:bc:21:9d:55:cf:d4:b6:
9d:bc:b6:25:84:4c:6f:87:37:49:7a:f4:60:82:16:
a6:2b:d7:8c:9c:6e:16:d7:4d:cf:dd:80:54:62:c5:
21:eb:ad:0f:1f:fb:5d:ee:24:6c:78:b6:ea:3b:95:
0f:52:c2:82:43:ec:e9:b1:3f:e1:7c:df:85:1e:09:
b8:f3:75:12:a8:8a:0f:e6:06:5f:d6:59:c3:05:2c:
dc:0b:e3:17:48:a7:d9:96:92:61:a2:3e:62:12:55:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4C:8E:10:FF:71:06:77:D3:FF:C5:58:6C:59:79:8E:76:86:4D:C4
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.14.0/24
157.254.18.0/23
157.254.225.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f0:4b:ea:f5:df:9d:d7:4b:75:30:a3:7a:25:73:b9:a0:68:
be:8d:ff:95:d3:cb:cc:dd:11:67:eb:1b:f2:34:7e:4b:d5:9c:
8b:ad:38:45:77:47:4c:cf:88:7d:71:fd:bc:09:6f:54:31:cc:
49:7c:e2:c2:93:6a:d7:bc:ff:89:b7:dc:c1:7e:14:72:c9:21:
ed:7c:1a:52:9d:ba:ee:92:61:ea:30:18:34:c4:3f:89:0d:3c:
01:6e:fb:56:7b:5a:33:36:e0:5f:44:aa:b5:09:44:13:88:8a:
77:2a:6e:c1:ac:bf:bc:dd:99:bf:59:73:00:d3:ff:f1:2a:6b:
c1:db:de:52:3c:16:d8:28:b2:27:8d:6c:80:a2:99:c5:ec:f7:
ad:0c:8f:80:29:12:d3:81:d9:40:3d:c6:e3:ca:c4:58:6b:ee:
84:73:71:5e:90:e9:e1:24:d4:4a:4a:e6:32:71:a6:ba:36:08:
62:ff:65:9c:1f:e8:03:10:68:79:54:db:e9:ea:ad:ad:df:d0:
dc:70:09:6c:19:f8:98:fa:2d:53:bd:5e:ae:c6:aa:5c:ee:bd:
a6:f1:aa:17:04:43:16:03:54:54:37:cd:de:b5:bc:b6:86:2b:
00:0b:0d:40:17:21:f5:84:46:89:3b:22:6b:9d:87:94:70:6b:
d0:9c:66:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:33 2025 by rpki-client