Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63025.roa
File: AS63025.roa (raw, json)
Hash identifier: 1W2LgNXsNX3ENy7iMImJM/Q6DBj35gaUdK6zlO61/h4=
Subject key identifier: A4:8F:06:D9:EB:11:72:24:DC:DE:B5:3D:0B:EB:59:5D:17:BF:02:92
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 5A5222CE532EE80BA481B7A209838AA9D20C5581
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63025.roa
Signing time: Mon 10 Mar 2025 15:14:12 +0000
ROA not before: Mon 10 Mar 2025 15:09:12 +0000
ROA not after: Mon 09 Mar 2026 15:14:12 +0000
asID: 63025
IP address blocks: 157.254.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:52:22:ce:53:2e:e8:0b:a4:81:b7:a2:09:83:8a:a9:d2:0c:55:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 10 15:09:12 2025 GMT
Not After : Mar 9 15:14:12 2026 GMT
Subject: CN=A48F06D9EB117224DCDEB53D0BEB595D17BF0292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:32:39:06:a9:41:ce:f5:c1:24:06:a4:6b:
77:68:94:eb:c5:89:2c:58:89:07:99:a6:6c:6d:29:
bc:aa:c2:3b:2e:78:9d:ec:ef:fc:ab:ea:1d:a3:77:
6b:02:6f:33:39:18:71:a9:9a:29:46:64:91:20:ff:
31:8e:79:ec:9c:8f:32:6c:97:7b:d3:a1:5c:b8:38:
2d:09:5d:ec:7f:02:ee:4c:44:52:a4:15:94:e8:a5:
ef:4a:1c:43:b6:87:c6:0b:1f:7e:2e:24:00:99:4f:
72:9b:20:4e:28:6c:ba:e6:8b:57:8b:8a:d5:14:47:
6a:da:92:c9:fb:3f:d2:73:8e:6b:25:ae:c1:5e:a5:
67:43:40:5f:56:a5:13:22:a8:8e:a3:2a:e2:1f:bd:
99:54:95:cd:f0:4b:2f:70:fe:4e:e8:96:67:2e:03:
53:0e:16:84:df:6d:3e:3f:5b:dc:1c:55:7c:aa:33:
77:7b:81:8f:79:23:f9:92:2b:cf:20:94:48:be:4d:
40:ef:14:df:d1:e3:a6:84:46:bf:b9:9c:80:79:1a:
76:4f:a4:04:c1:af:29:1c:8e:53:62:1d:11:b9:f9:
cc:64:e0:c5:6a:60:e0:40:e3:02:6c:3e:66:93:66:
fe:3f:79:77:0d:0e:5c:66:cf:3f:e5:d1:df:c4:f9:
df:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8F:06:D9:EB:11:72:24:DC:DE:B5:3D:0B:EB:59:5D:17:BF:02:92
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:59:fb:22:b3:e9:5c:e2:0c:d7:76:92:7a:9b:26:0a:3d:fc:
0a:72:11:30:95:ce:9b:ea:d5:ff:67:14:67:0d:fc:b2:6f:99:
2a:58:52:90:0b:81:d0:3a:d7:b2:ea:9f:67:02:5a:89:33:a0:
b6:fa:1c:89:b5:3e:27:9b:23:60:03:ea:62:97:bb:ad:24:7d:
83:1a:59:60:a5:98:ba:a2:89:1c:4f:4b:fb:cf:10:b2:75:52:
33:65:45:07:5e:98:9b:0f:c7:1a:64:12:53:b8:c1:a5:83:c0:
11:c1:31:b5:d2:53:33:eb:a8:43:3a:ec:a3:9b:03:5c:17:de:
d1:04:05:ba:04:e0:64:50:c8:f1:5a:8a:62:65:40:a2:ad:7c:
8c:b1:14:67:d9:a1:fe:ae:8e:c1:24:cb:17:16:28:06:ed:d1:
ad:12:86:6a:e5:d9:5c:3d:e5:70:af:92:35:4c:39:85:27:00:
1c:8a:ef:9a:5a:95:74:5f:e9:63:13:17:a3:1f:e3:b2:1f:7d:
5e:db:f7:24:7d:f2:87:d9:c5:4e:88:bd:38:86:26:ac:b7:ed:
7d:d8:5c:01:4b:51:6f:c0:39:9b:5d:ba:6c:af:9b:10:1c:67:
ec:78:d5:aa:45:0b:04:6d:a4:02:9b:61:0c:23:bd:c0:d2:0b:
da:6b:ef:da
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUWlIizlMu6AukgbeiCYOKqdIMVYEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMzEwMTUwOTEyWhcNMjYwMzA5MTUxNDEy
WjAzMTEwLwYDVQQDEyhBNDhGMDZEOUVCMTE3MjI0RENERUI1M0QwQkVCNTk1RDE3
QkYwMjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUkyOQapQc71
wSQGpGt3aJTrxYksWIkHmaZsbSm8qsI7Lnid7O/8q+odo3drAm8zORhxqZopRmSR
IP8xjnnsnI8ybJd706FcuDgtCV3sfwLuTERSpBWU6KXvShxDtofGCx9+LiQAmU9y
myBOKGy65otXi4rVFEdq2pLJ+z/Sc45rJa7BXqVnQ0BfVqUTIqiOoyriH72ZVJXN
8EsvcP5O6JZnLgNTDhaE320+P1vcHFV8qjN3e4GPeSP5kivPIJRIvk1A7xTf0eOm
hEa/uZyAeRp2T6QEwa8pHI5TYh0RufnMZODFamDgQOMCbD5mk2b+P3l3DQ5cZs8/
5dHfxPnftQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFKSPBtnrEXIk3N61PQvrWV0X
vwKSMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzYzMDI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf77MA0GCSqGSIb3DQEBCwUAA4IB
AQCKWfsis+lc4gzXdpJ6myYKPfwKchEwlc6b6tX/ZxRnDfyyb5kqWFKQC4HQOtey
6p9nAlqJM6C2+hyJtT4nmyNgA+pil7utJH2DGllgpZi6ookcT0v7zxCydVIzZUUH
XpibD8caZBJTuMGlg8ARwTG10lMz66hDOuyjmwNcF97RBAW6BOBkUMjxWopiZUCi
rXyMsRRn2aH+ro7BJMsXFigG7dGtEoZq5dlcPeVwr5I1TDmFJwAciu+aWpV0X+lj
ExejH+OyH31e2/ckffKH2cVOiL04hiast+192FwBS1FvwDmbXbpsr5sQHGfseNWq
RQsEbaQCm2EMI73A0gvaa+/a
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:33 2025 by rpki-client