Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa (raw, json)
Hash identifier: PtPdzY6dhbIRxX7OOjxs9ifqrGQpiojHnJZ5YClR6nE=
Subject key identifier: 15:CF:99:71:60:C3:F8:A2:52:F6:16:34:67:E3:9C:B3:D9:CB:5E:2A
Certificate issuer: /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial: 291FF178C0654AD8EE3E35E32CC37BC5BA51C423
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access: rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
Signing time: Fri 18 Apr 2025 22:23:23 +0000
ROA not before: Fri 18 Apr 2025 22:18:23 +0000
ROA not after: Fri 17 Apr 2026 22:23:23 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1f:f1:78:c0:65:4a:d8:ee:3e:35:e3:2c:c3:7b:c5:ba:51:c4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Validity
Not Before: Apr 18 22:18:23 2025 GMT
Not After : Apr 17 22:23:23 2026 GMT
Subject: CN=15CF997160C3F8A252F6163467E39CB3D9CB5E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:98:09:9e:ec:1f:97:96:3d:7a:81:82:73:
bd:98:89:69:72:b0:e3:2a:81:9c:3c:aa:ab:23:07:
a0:08:98:3c:07:f5:e2:62:62:42:f4:a6:ac:c5:3f:
76:05:8b:26:b0:5e:1a:20:32:2f:26:3a:ed:06:2d:
1c:65:64:2e:3b:6c:b0:67:b9:68:91:cb:1b:a3:b6:
74:13:98:29:b7:32:45:27:e3:9c:27:44:57:46:41:
26:3a:cd:74:dc:63:c5:5b:24:8d:22:d7:09:ee:85:
26:4b:d8:66:b1:0f:d9:7c:4a:c4:24:bc:be:3c:60:
c4:90:f5:48:28:26:58:44:9c:48:86:31:be:06:94:
2a:05:46:37:e1:0b:1f:43:e5:0b:5c:d7:c4:b7:01:
c5:a6:16:56:0b:0c:f9:28:fa:b9:be:35:2b:38:08:
84:18:a9:5c:24:77:01:47:74:8a:8d:3b:f7:c5:b1:
78:b2:8d:b8:92:83:ba:14:8a:79:40:74:2f:4e:37:
a5:5d:be:3b:62:7a:b2:20:e2:b4:de:9b:4f:a6:80:
94:c7:2a:4b:b0:2b:16:8c:79:32:0d:5b:aa:20:a8:
e5:d7:4b:87:a7:19:8d:01:9d:78:5f:f3:4f:0f:93:
dd:0a:23:7d:1a:38:a2:d9:c3:6d:b3:95:94:a4:21:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CF:99:71:60:C3:F8:A2:52:F6:16:34:67:E3:9C:B3:D9:CB:5E:2A
X509v3 Authority Key Identifier:
keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:2d:dc:c4:cd:ee:2c:d8:1b:88:a2:ff:ed:ed:01:5f:0b:75:
08:99:d0:c2:fb:cd:ff:8c:fa:8d:a8:63:d8:0e:af:35:ea:45:
08:69:54:39:ed:cb:88:ad:e0:d9:5d:ac:07:da:6f:af:67:05:
73:34:aa:d5:71:98:bf:bb:ec:51:f0:65:aa:0e:8d:96:a4:63:
bd:24:ab:94:09:f7:78:40:39:d9:3b:6b:b1:99:f8:b7:ff:89:
35:82:b3:86:a8:4d:36:f9:6a:df:27:ec:68:1f:99:21:df:cf:
89:65:58:7f:97:28:d1:33:31:b8:ae:bf:ea:2f:6e:e7:03:f1:
07:5b:24:09:b0:27:e3:a8:b6:9c:62:d8:e8:8c:d8:38:30:d1:
45:a4:b1:9f:5d:25:29:38:2d:03:84:51:14:1f:04:c3:f3:be:
6c:db:cc:5f:99:09:e5:48:af:3e:13:16:8a:ee:d1:54:6d:c9:
49:88:5f:26:2b:12:a0:6c:87:c2:e8:03:bc:6c:0b:e2:c8:ea:
91:e5:a2:11:6d:71:eb:0a:28:d0:c7:28:21:cb:da:7e:b4:f6:
ed:e4:08:f0:67:9d:2c:8d:b3:92:47:0a:c2:06:30:29:77:b5:
b5:ab:d5:9e:7d:57:1c:fe:b3:ca:97:c2:be:7b:a1:da:48:9b:
47:07:e7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:12:10 2025 by rpki-client