Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
File: 3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: Y5PD4dmhAx+q9gB5lqWlSRytO8G8x1amT1KXqOpxUe8=
Subject key identifier: 15:B3:33:F1:3D:81:E1:3A:FB:4D:88:F6:32:EA:F6:D1:E0:AF:08:C8
Certificate issuer: /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial: 0F83D21C2AC5EF5A1BA81645BD1697CB1E05C71C
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access: rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
Signing time: Fri 18 Apr 2025 22:31:33 +0000
ROA not before: Fri 18 Apr 2025 22:26:33 +0000
ROA not after: Fri 17 Apr 2026 22:31:33 +0000
asID: 399970
IP address blocks: 149.112.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:83:d2:1c:2a:c5:ef:5a:1b:a8:16:45:bd:16:97:cb:1e:05:c7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Validity
Not Before: Apr 18 22:26:33 2025 GMT
Not After : Apr 17 22:31:33 2026 GMT
Subject: CN=15B333F13D81E13AFB4D88F632EAF6D1E0AF08C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:c2:34:27:63:c7:a9:49:f4:19:70:b2:96:
04:4b:62:33:2a:7c:25:9d:8a:2b:12:8e:38:50:40:
5d:16:b7:fe:e3:72:41:03:30:e7:24:eb:65:f2:1b:
59:5a:41:c0:be:f7:0e:f6:c8:75:3b:81:79:10:eb:
fc:05:98:aa:f0:5b:c9:f0:de:d2:d7:9a:4f:a4:c8:
66:63:c4:df:e3:27:af:5a:9c:ca:e2:03:1b:03:f4:
9a:22:8e:16:fe:f2:8e:f7:64:4a:07:c3:14:c2:88:
5e:37:fd:51:bc:b0:1a:f2:6b:80:b6:10:bc:0a:f9:
e8:2d:e0:a2:7d:87:15:c3:b7:7b:1a:46:bc:ab:7a:
c7:39:30:0c:75:49:c9:cf:a6:db:02:37:03:fd:d9:
f8:11:d1:f5:c9:49:b0:90:41:14:ec:8c:b9:b2:78:
dd:fc:f0:17:aa:c9:ef:96:3d:e6:15:cc:9a:d4:e5:
f4:4d:49:39:9e:e8:86:eb:38:27:82:1f:ce:0d:a4:
3b:42:82:b0:d1:d3:a3:dd:64:a5:c9:60:86:21:ab:
b5:bc:38:54:12:78:79:dc:02:f0:aa:c9:ea:2b:ba:
ce:88:37:83:c2:99:85:67:7e:88:1f:15:1d:fc:cb:
f3:93:b2:fa:7c:fb:bd:6c:65:7a:77:03:a5:4f:5c:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B3:33:F1:3D:81:E1:3A:FB:4D:88:F6:32:EA:F6:D1:E0:AF:08:C8
X509v3 Authority Key Identifier:
keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/3134392e3131322e3135322e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e8:1f:aa:35:c2:de:02:bd:43:7c:5d:fb:b0:af:0e:f7:fc:
52:c6:40:cb:c8:2c:0c:cc:e7:e8:7a:2e:1d:0f:0a:13:f5:76:
36:90:a7:c9:bf:c4:6f:57:b4:7d:fd:a5:b7:f4:54:04:b3:7d:
a9:b7:68:0f:04:2d:01:fb:c8:f0:2f:b3:99:b1:a7:ac:d4:e5:
bf:fe:59:b5:ec:f9:21:ae:1d:3e:cd:eb:fc:08:59:53:ef:9a:
0e:c8:e5:59:ae:9a:cf:d9:a5:cb:dc:8a:9e:7a:b7:09:0c:9a:
65:53:c4:4d:c0:e3:28:63:9a:b9:48:49:5b:85:c6:02:b0:dc:
fa:ac:5b:6d:44:bc:28:49:f8:46:d4:39:cc:53:4c:77:cd:c7:
e6:d1:8d:40:15:32:7e:fb:66:20:06:36:15:04:7c:a7:bb:67:
a1:00:1a:db:34:68:31:38:2c:83:c2:88:fc:f3:b6:da:e4:b9:
20:12:9e:4f:50:79:de:9c:3e:77:88:1e:41:df:b3:03:df:d9:
88:f4:97:e1:90:93:6d:2a:1d:fb:e4:49:9a:0e:8a:1a:10:f3:
a6:3d:1d:77:16:4d:b3:f1:86:1d:eb:be:49:1a:21:d9:f3:59:
56:f2:23:64:45:d9:78:37:bc:91:68:a0:b2:a7:18:9a:89:7a:
4f:74:4c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:25:42 2025 by rpki-client