Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: A8cXYE+5hL5v88ABa26MtSGL9PQICVuGBoHC7Dr/rRg=
Subject key identifier: 93:C8:7D:7C:95:AA:76:87:69:8C:D6:AD:39:1C:23:06:86:C6:D0:3F
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 4EBB7573C68B730FC5F3231E87B95922BFF0B470
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
Signing time: Mon 17 Mar 2025 06:01:18 +0000
ROA not before: Mon 17 Mar 2025 05:56:18 +0000
ROA not after: Mon 16 Mar 2026 06:01:18 +0000
asID: 9304
IP address blocks: 157.254.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:bb:75:73:c6:8b:73:0f:c5:f3:23:1e:87:b9:59:22:bf:f0:b4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 17 05:56:18 2025 GMT
Not After : Mar 16 06:01:18 2026 GMT
Subject: CN=93C87D7C95AA7687698CD6AD391C230686C6D03F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:88:34:2b:96:fd:96:7f:15:fb:4d:51:00:
f9:bb:72:68:e5:19:37:76:9c:6a:9a:6d:0c:23:ee:
47:33:5c:39:ab:88:cc:05:05:f8:6e:90:7c:6b:22:
bb:7b:50:aa:a6:47:d9:72:c0:3e:cd:87:3a:63:8a:
04:0c:d2:02:89:de:ab:1c:8a:92:af:bc:3c:8b:6c:
33:2e:de:03:ed:f4:6c:fa:3a:6e:ae:86:aa:9a:e0:
b0:97:f6:4a:e8:50:bf:eb:2f:a1:84:34:cb:f1:27:
9a:9c:82:8a:74:c7:03:e3:9b:77:5c:de:ab:8d:c3:
0c:7c:e0:24:70:24:b4:f6:53:2c:ee:0f:1e:9a:25:
ae:e3:5e:da:61:ad:75:83:b4:a8:dc:a4:fa:ea:61:
48:60:9e:91:61:12:a9:ec:2b:e1:d7:0e:bf:33:d6:
1f:a6:e5:14:73:c2:c1:c3:41:47:77:00:70:a4:31:
49:6d:ea:48:f2:8f:33:77:a3:d2:9a:c6:c3:dd:a3:
c6:4c:ed:bc:f1:24:f3:82:cb:c7:a0:a1:04:c2:10:
49:16:b2:db:35:02:aa:e8:98:97:10:87:91:3b:79:
1f:05:57:22:84:85:3c:d6:cf:bc:59:96:43:6d:22:
0c:3b:82:d1:32:d5:30:b6:9f:df:b8:83:78:78:93:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C8:7D:7C:95:AA:76:87:69:8C:D6:AD:39:1C:23:06:86:C6:D0:3F
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.191.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7c:07:21:d6:9f:11:59:6f:88:14:e6:2e:73:49:c8:3c:73:
07:99:8d:58:28:f9:7e:c8:1f:56:4e:e1:f6:eb:0e:84:26:78:
b8:1a:63:06:83:8c:23:92:66:c5:af:0e:0b:1f:2e:43:23:aa:
62:01:d9:94:3f:d5:67:c1:da:5b:52:22:39:c4:c7:df:f5:ed:
a9:82:14:3f:83:1b:69:7e:e3:2f:c5:b0:00:2d:5a:55:01:94:
02:06:5a:19:0c:13:9c:e9:6f:51:c3:dc:70:aa:fb:49:be:f5:
2f:b3:60:6d:19:b2:0f:6a:2c:3b:e1:60:9f:1e:68:a7:e3:1b:
e3:13:e3:1f:d0:aa:4f:25:71:74:96:5c:0d:45:23:76:48:a9:
05:68:d5:65:5b:5f:21:bc:33:6d:32:ed:e1:4a:ac:0d:36:52:
7e:e8:0f:73:4c:48:00:bd:7e:c7:e6:8e:4f:70:32:59:90:ca:
b2:8f:e4:40:17:ac:02:45:61:2c:4e:fc:43:ce:04:7e:73:f5:
e4:5d:12:02:ec:25:e6:59:1f:57:a7:a9:d3:db:0b:04:9d:4b:
b6:7e:bf:12:e5:02:9c:b7:5e:74:a5:4f:97:ff:90:64:5b:b8:
c8:ba:5f:7a:67:dd:7c:ee:a4:bd:60:3f:8b:bf:ac:d7:2a:ac:
92:e3:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:09 2025 by rpki-client