Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: UhAO9au7D+3sXyLPhr9+nOJNayF0N2abzC5JmSnA38s=
Subject key identifier: 8B:B6:2C:0D:30:21:61:67:E0:49:8D:8E:87:FD:47:2E:57:BF:CE:F6
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 2105DC123C32EBE07B9EDB7B8905BE837C5E4579
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS984.roa
Signing time: Fri 07 Mar 2025 10:28:26 +0000
ROA not before: Fri 07 Mar 2025 10:23:26 +0000
ROA not after: Fri 06 Mar 2026 10:28:26 +0000
asID: 984
IP address blocks: 157.254.8.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:05:dc:12:3c:32:eb:e0:7b:9e:db:7b:89:05:be:83:7c:5e:45:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 7 10:23:26 2025 GMT
Not After : Mar 6 10:28:26 2026 GMT
Subject: CN=8BB62C0D30216167E0498D8E87FD472E57BFCEF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:f9:e4:5d:6e:1c:14:9f:d6:f1:6f:f7:87:
45:02:6d:8a:f8:47:b1:0f:7d:a2:0a:91:bb:6e:7a:
cc:34:db:08:de:fc:1d:94:db:71:08:5a:43:c3:29:
e0:03:6e:2d:7b:65:12:0d:ab:5a:74:b1:fd:74:60:
62:b1:f9:52:f9:1b:f7:09:ad:8c:60:5c:2a:a3:f7:
bf:7c:1b:6d:7d:b7:78:8b:1d:32:40:77:45:2c:c3:
4b:be:0f:cf:ca:f5:e8:7b:34:a5:4f:4a:85:b0:4f:
e7:89:87:dd:7e:f3:c2:39:1b:d1:66:03:d7:0e:36:
59:77:3e:44:b3:56:fd:e3:27:5e:2e:e1:14:f4:77:
5a:31:a4:73:0b:a8:7f:94:3e:d4:c9:2a:2f:03:ae:
0c:37:62:87:6f:0c:e3:e0:c6:e5:89:fd:8a:c0:5a:
b1:49:5e:c1:49:af:2f:a8:6c:f2:b1:9a:c9:2c:9c:
56:48:6c:e9:31:99:25:19:6e:98:69:75:eb:28:1b:
95:7c:47:de:10:aa:d1:1a:17:a9:69:62:f6:ce:9a:
61:4e:96:d5:48:f0:9c:6b:c5:96:9f:0d:9a:94:6d:
da:b6:bc:38:bd:18:9d:81:46:0f:ae:3e:4a:e1:2c:
77:83:40:d0:ee:66:fb:0a:71:fa:fe:9f:60:eb:99:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B6:2C:0D:30:21:61:67:E0:49:8D:8E:87:FD:47:2E:57:BF:CE:F6
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.8.0/23
Signature Algorithm: sha256WithRSAEncryption
75:ac:d8:64:e0:d7:fc:01:aa:08:e2:5d:79:10:6a:c6:3b:30:
7d:91:ef:ad:e0:c4:09:de:33:e6:3f:39:d0:0d:0f:9c:ab:a0:
80:58:56:81:7a:e3:49:39:b9:ca:ee:64:30:ec:65:ba:71:ac:
e1:79:28:88:34:43:70:03:c8:51:5a:79:9d:88:c3:13:1e:18:
0a:b9:97:71:38:07:67:67:c6:b2:d5:cf:da:72:2d:58:04:e0:
fa:e5:02:b2:d3:e2:3b:c9:ec:42:ac:d3:8a:df:06:59:da:cd:
b3:2e:c0:8a:4e:4c:2b:e3:b9:1f:d3:af:51:16:ec:14:73:9b:
f6:6f:9a:2d:1d:5d:2f:03:2f:88:3c:bb:cc:0e:72:89:db:38:
66:53:a5:31:57:a8:9c:82:64:eb:84:6e:f8:a4:36:be:f5:f9:
8c:6b:5d:19:ad:fd:51:4f:4a:35:d3:6c:1b:82:cd:95:e2:fc:
d1:ad:99:5c:91:08:c8:eb:0b:e9:2f:5a:77:1f:e4:37:0a:5d:
30:20:72:99:0a:9f:e0:db:b5:86:87:c1:3b:d4:80:9d:fc:3d:
a8:da:86:8e:dc:3a:26:75:a1:0f:56:96:b8:ff:fd:f5:39:4f:
ee:42:e9:05:df:8f:23:6f:43:23:cd:c2:9f:f3:8b:82:e7:3c:
3e:62:70:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:18 2025 by rpki-client