Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: psdcOayR4UYAfPOkojmbz941davgcfZ9kOimicImsEg=
Subject key identifier: 7F:D3:C5:5E:57:4E:2E:6E:6D:67:EC:66:E6:6B:FC:97:84:6D:3F:24
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 5F1C3985B4500C1FB6850FAAC36BC369E016397E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa
Signing time: Mon 30 Dec 2024 12:01:50 +0000
ROA not before: Mon 30 Dec 2024 11:56:50 +0000
ROA not after: Mon 29 Dec 2025 12:01:50 +0000
asID: 9009
IP address blocks: 157.254.40.0/23 maxlen: 24
157.254.42.0/23 maxlen: 24
157.254.44.0/23 maxlen: 24
157.254.46.0/23 maxlen: 24
157.254.56.0/23 maxlen: 24
157.254.58.0/23 maxlen: 24
157.254.60.0/23 maxlen: 24
157.254.62.0/23 maxlen: 24
157.254.64.0/23 maxlen: 24
157.254.66.0/23 maxlen: 24
157.254.68.0/23 maxlen: 24
157.254.70.0/23 maxlen: 24
157.254.72.0/23 maxlen: 24
157.254.74.0/23 maxlen: 24
157.254.76.0/23 maxlen: 24
157.254.78.0/23 maxlen: 24
157.254.80.0/23 maxlen: 24
157.254.86.0/23 maxlen: 24
157.254.88.0/23 maxlen: 24
157.254.96.0/23 maxlen: 24
157.254.98.0/23 maxlen: 24
157.254.100.0/23 maxlen: 24
157.254.102.0/23 maxlen: 24
157.254.104.0/23 maxlen: 24
157.254.106.0/23 maxlen: 24
157.254.108.0/23 maxlen: 24
157.254.110.0/23 maxlen: 24
157.254.112.0/23 maxlen: 24
157.254.114.0/23 maxlen: 24
157.254.116.0/23 maxlen: 24
157.254.118.0/23 maxlen: 24
157.254.120.0/23 maxlen: 24
157.254.122.0/23 maxlen: 24
157.254.124.0/23 maxlen: 24
157.254.126.0/23 maxlen: 24
157.254.136.0/22 maxlen: 24
157.254.144.0/23 maxlen: 24
157.254.146.0/23 maxlen: 24
157.254.148.0/23 maxlen: 24
157.254.150.0/23 maxlen: 24
157.254.240.0/23 maxlen: 24
157.254.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:1c:39:85:b4:50:0c:1f:b6:85:0f:aa:c3:6b:c3:69:e0:16:39:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Dec 30 11:56:50 2024 GMT
Not After : Dec 29 12:01:50 2025 GMT
Subject: CN=7FD3C55E574E2E6E6D67EC66E66BFC97846D3F24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:45:9a:1e:d8:fc:96:e8:8e:fd:51:0e:0d:
6e:f1:7c:ad:05:b8:03:10:7d:e5:69:09:0a:76:de:
26:6b:b7:98:5e:8c:a0:8c:75:32:2d:c9:88:13:be:
3d:c8:36:af:57:23:71:8e:c7:4e:79:67:86:04:29:
a6:38:dd:81:f8:e8:98:a1:ec:5b:61:52:f6:30:5b:
ef:72:18:2b:4a:8b:31:84:6d:82:e0:21:32:46:1e:
ea:e7:d9:cf:a9:38:cd:3b:8a:c6:4c:8f:18:40:bb:
ab:7e:d7:5c:c9:05:07:fb:86:4e:fe:09:9f:e8:04:
d8:c6:be:a7:f6:c1:b6:78:2b:1c:00:ce:6a:4b:7d:
47:97:06:bf:e3:b0:23:be:c1:c5:f5:dc:bd:e7:8d:
bb:a7:96:61:08:78:d6:8c:7a:3e:07:dc:ea:39:4a:
57:e6:83:69:fe:34:97:ba:dd:1d:d2:d1:90:f1:64:
ab:e7:e5:db:c5:c5:c9:9c:15:b2:f4:50:6e:50:6b:
a7:a0:4c:76:d9:3a:38:8f:0e:d2:65:0b:bc:8e:f0:
71:db:5b:07:6d:75:c7:75:cc:4d:ea:89:73:ce:39:
e5:3e:ae:7e:44:84:a1:2b:fc:92:d9:12:77:91:e5:
d6:d4:cf:8d:98:53:6e:ac:06:f1:05:be:62:0d:8c:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D3:C5:5E:57:4E:2E:6E:6D:67:EC:66:E6:6B:FC:97:84:6D:3F:24
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.40.0/21
157.254.56.0-157.254.81.255
157.254.86.0-157.254.89.255
157.254.96.0/19
157.254.136.0/22
157.254.144.0/21
157.254.240.0/22
Signature Algorithm: sha256WithRSAEncryption
46:0d:90:c4:be:65:80:ab:ad:de:8c:de:62:62:79:eb:7d:0b:
96:cc:a6:cb:fe:f3:20:db:7e:90:b9:67:37:3e:59:c6:07:4f:
b4:cb:33:fc:bf:cf:dd:09:26:96:02:d7:e7:0c:07:89:15:25:
7c:c0:a6:59:c1:43:39:09:c7:2c:a5:e9:ba:27:53:f2:7e:bd:
9b:90:db:86:31:de:8d:ca:17:93:b8:8b:28:8e:3e:b0:ea:92:
18:84:ad:48:ed:50:41:62:15:af:4d:c8:29:ef:51:01:82:ff:
1b:da:05:94:a6:98:3d:ef:10:08:a4:f0:a2:4d:15:bd:94:b6:
4a:dc:46:ad:09:85:83:08:78:8a:c4:ef:b8:f1:d1:39:d0:63:
49:31:07:eb:28:b3:7e:08:7a:7f:46:c0:41:cd:15:3d:2d:0f:
bd:e5:8a:8e:38:ea:28:ac:9e:be:da:51:4c:ce:e0:47:5b:c7:
b8:a2:20:a3:3f:75:be:0c:6c:a6:0e:5d:84:03:89:1e:e3:7d:
c0:f9:03:0e:e4:29:56:d7:57:17:87:99:01:28:c6:33:00:6f:
da:5e:c1:34:89:8f:95:e5:90:70:37:df:fe:f7:58:b3:c7:84:
bb:17:37:5e:ef:ac:88:01:20:93:f5:4e:5a:4e:62:48:77:c4:
c0:57:4b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:02 2025 by rpki-client